Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8621281f-8199-35f7-a748-fc28d9c02c4d.roa
File:                     8621281f-8199-35f7-a748-fc28d9c02c4d.roa (raw, json)
Hash identifier:          zOdll5eb2GBaeSAHPuGQhBapXvIi8n6JexMCFhmJC+4=
Subject key identifier:   1C:D6:2C:EF:85:85:3A:80:7E:3F:97:B5:C3:03:23:09:42:71:5E:74
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584F13023C38D2457055A4FE3000
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8621281f-8199-35f7-a748-fc28d9c02c4d.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2607:dbc0:820::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:3c:38:d2:45:70:55:a4:fe:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=47158d2d-e443-46fc-a213-b59501e68d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:fb:ac:e6:36:b4:df:b5:5e:c7:a2:ab:d9:
                    d6:6e:02:e9:e8:7e:9a:55:55:b5:a2:db:40:51:8b:
                    2c:73:87:50:c2:f5:28:27:cf:4e:24:18:aa:2f:2f:
                    93:26:52:e5:e2:49:fd:2a:07:95:8a:71:90:b9:70:
                    f4:73:02:0e:cd:ed:82:a1:ea:2a:f2:f9:0d:10:32:
                    5e:c0:a6:a6:39:6b:9c:dc:ac:9b:d1:6f:f4:1d:53:
                    65:70:b6:8c:d7:4e:7b:9d:85:bb:b5:d9:54:f9:10:
                    1f:95:3b:42:f8:1a:99:63:21:fa:50:b0:29:c1:24:
                    1e:38:3d:1e:c3:9e:48:95:a4:bc:19:fb:d1:70:fd:
                    10:fc:1e:e9:b4:0b:78:f1:be:90:ff:92:87:21:5e:
                    f2:88:68:2f:d9:7b:c7:2f:ad:b2:1c:43:46:4b:74:
                    1e:8a:44:79:31:a5:3e:ab:c0:41:69:d2:71:db:59:
                    6f:df:00:74:18:dc:a9:ab:82:ba:02:66:9d:7e:c2:
                    cd:2d:c3:cf:36:0e:97:3a:f6:dd:61:d0:cc:0c:9c:
                    68:5b:87:b8:96:1f:b5:ac:59:48:5e:71:22:32:14:
                    ec:8b:81:eb:3a:f7:d4:f8:95:5d:dc:ed:35:95:ac:
                    3b:fe:2a:07:6e:0d:98:c6:97:b5:61:4d:f1:43:18:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D6:2C:EF:85:85:3A:80:7E:3F:97:B5:C3:03:23:09:42:71:5E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8621281f-8199-35f7-a748-fc28d9c02c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:820::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2b:13:c5:6d:49:d8:2d:df:40:c3:fa:9d:80:0d:c9:8f:92:
         2e:b5:8e:7c:28:ba:6a:65:7f:f8:97:17:d4:e1:80:58:a3:0f:
         3c:36:b9:be:23:fe:dd:18:e3:d8:58:89:85:c8:07:9a:6a:51:
         b3:30:0c:b8:72:df:34:0c:e2:a5:ac:91:ba:d4:d5:d2:46:e0:
         74:b6:8b:d1:95:dc:57:aa:98:56:25:8c:98:ff:70:5d:42:e5:
         d0:aa:a1:6b:fa:af:0c:64:1f:a5:3d:89:fa:8e:13:a7:56:2b:
         a9:cd:84:e9:06:a1:c9:d1:06:4e:2d:78:93:a7:60:60:8a:34:
         99:61:78:71:c3:59:8d:c9:23:53:32:81:2e:bd:c8:fd:a7:06:
         54:76:5b:93:74:40:2b:12:22:73:b2:d6:96:65:f9:f8:6f:c1:
         35:f5:3d:59:da:dd:0a:67:a6:e8:cc:ac:f5:f0:e7:40:d0:bc:
         72:fd:59:74:94:cf:83:2a:cb:c3:dc:80:1e:c9:91:71:25:ff:
         65:b6:14:62:87:1c:68:3e:50:65:a8:e1:ee:77:b8:c3:e6:8e:
         dd:0a:b3:6b:ff:70:6d:12:a0:2c:9e:d5:3a:ae:32:fb:8d:02:
         9b:25:29:c2:03:0c:fb:4a:31:72:3b:13:2f:92:13:83:44:1a:
         fb:6e:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:41:24 2026 by rpki-client