Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/7349498a-3be6-3b85-8a16-9fc1413faabd.roa
File:                     7349498a-3be6-3b85-8a16-9fc1413faabd.roa (raw, json)
Hash identifier:          kXDvLUzpl/leC0Bd1JA1nID9BX3dCjdT6f4HMEp0bSk=
Subject key identifier:   3E:75:69:BA:93:36:CE:0A:25:AC:BE:48:29:1B:60:9B:AE:2F:21:F8
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584F498707B507B240BB8155DD00
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/7349498a-3be6-3b85-8a16-9fc1413faabd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401587
IP address blocks:        2607:e740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:07:b5:07:b2:40:bb:81:55:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=28b181de-d606-4c21-8078-2c35b233d731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f7:b3:6f:a1:91:65:a6:de:1a:bc:7a:b4:80:
                    72:e6:bf:ec:62:ff:90:ef:1b:87:02:d8:09:5f:66:
                    03:53:06:bd:c9:f9:c2:c9:95:56:92:f4:83:70:18:
                    0c:bc:a9:d2:db:62:55:46:2b:a2:5c:87:34:05:0c:
                    72:35:fa:b1:50:29:86:36:ae:e6:2a:18:4a:09:ab:
                    cf:cd:a7:e1:d8:46:43:26:9d:bf:a7:f9:cc:2a:65:
                    49:f1:af:d9:80:60:9a:d3:f9:d1:0b:75:35:bd:0c:
                    34:eb:3d:4c:dd:a7:34:0d:4f:06:73:22:46:53:35:
                    bc:cc:e7:ac:d5:1c:6b:7e:e9:ed:86:28:39:82:57:
                    5d:66:df:cd:91:a3:07:67:05:e8:a1:c2:1d:27:a2:
                    bf:f2:ee:04:6c:24:1c:23:ea:cb:ad:52:d8:ec:95:
                    e7:1a:71:45:3c:0a:17:fe:e8:00:2b:44:3d:b6:f0:
                    eb:ba:c7:1b:41:9e:15:99:34:ac:15:19:e3:59:c1:
                    24:90:c8:ba:af:55:a8:74:d7:61:92:98:19:26:da:
                    84:e5:ef:7f:93:33:6b:73:a8:66:a2:52:b3:77:f9:
                    4d:73:9e:76:40:61:e6:1c:1a:96:5f:d1:4f:7d:81:
                    1b:a8:10:f8:02:82:3a:08:88:f3:b3:56:ce:f0:e9:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:69:BA:93:36:CE:0A:25:AC:BE:48:29:1B:60:9B:AE:2F:21:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/7349498a-3be6-3b85-8a16-9fc1413faabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f2:91:99:3b:e9:fc:6a:1f:19:55:08:de:68:70:69:4f:53:
         54:7a:41:25:80:2c:a7:fb:77:c9:05:5a:db:03:29:7f:03:df:
         b4:4b:ee:94:bd:b5:e7:9a:db:93:5c:a3:6e:17:89:3d:1c:7c:
         ce:4c:6f:8d:74:a6:b1:ee:ed:01:5d:1a:44:53:4c:ec:28:e1:
         d3:15:ff:9a:2a:c9:b5:5a:b6:8f:c6:49:e4:d7:a6:27:8d:2b:
         57:33:61:71:10:4f:be:1c:29:8d:dd:e6:ca:85:63:51:93:a2:
         e4:14:96:97:cd:f1:40:b8:d8:9a:bb:9d:66:8f:a8:b9:24:56:
         f2:8f:bc:1d:c0:29:bf:d2:01:8e:82:4e:03:ce:cf:ab:35:54:
         7d:e5:3c:df:72:78:5a:88:71:8c:58:e4:ff:c0:15:53:6d:35:
         dd:96:1e:4e:55:e2:d8:cd:06:56:27:a0:fe:5f:28:23:f1:e8:
         58:ef:5d:21:11:eb:b7:7f:14:0a:f6:9a:d6:70:ab:a0:09:07:
         35:ef:2a:a3:38:74:94:67:6e:41:66:d6:b1:da:47:a8:16:30:
         e4:f8:29:72:f5:b0:42:3d:e0:26:21:d7:bf:78:5e:e7:81:44:
         c5:34:3b:5b:be:1b:5c:43:61:0c:65:eb:39:46:10:0a:fb:6d:
         6a:6b:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:43:11 2026 by rpki-client