Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa
File:                     706a9542-5b90-3186-b2aa-86e2e6a16930.roa (raw, json)
Hash identifier:          DKr8QVp7kUWCD0Ool1MXy73KyhzlXPoFX4JOwoXFhMQ=
Subject key identifier:   09:83:D6:C3:90:96:4D:78:FD:DF:43:F0:D0:4A:61:69:93:8F:28:B6
Certificate issuer:       /CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a
Certificate serial:       010D0C9F4328584F20F7AB04F3F0A7EFCB2EEDF8
Authority key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     198949
IP address blocks:        2606:2b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:ab:04:f3:f0:a7:ef:cb:2e:ed:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=e583b93c-d332-4c33-bf61-0a44f1d668a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:8c:3f:46:2f:97:ee:a3:0a:9b:88:9e:0c:
                    d3:a2:85:5c:6f:2d:f3:28:b8:76:7f:b7:a0:d1:0b:
                    90:ef:38:7b:2f:ff:98:a7:78:91:fa:06:75:2b:17:
                    26:2c:7c:bc:6e:76:6c:76:61:2d:cc:7d:76:59:f8:
                    6e:92:87:94:76:a0:9a:3f:98:c1:65:89:d4:11:68:
                    4c:3b:fc:09:2a:a6:ee:8d:75:7c:a3:a3:f9:72:83:
                    8e:7b:9c:3e:d6:3f:9f:05:78:d6:d8:4a:5d:50:cd:
                    5b:d8:ec:72:4f:b5:05:b0:91:60:b2:f6:6d:69:c7:
                    43:4e:2c:e4:78:8e:0b:6c:e1:51:2d:f9:ad:a9:a1:
                    50:ba:55:4a:0c:a2:77:ff:73:e3:4e:0a:00:e6:a3:
                    6c:fe:39:f8:4a:e7:ea:66:9b:34:f6:e8:b7:2f:7b:
                    57:58:53:88:75:da:2d:d1:9b:4a:f0:47:4f:30:8c:
                    f4:27:50:18:6b:aa:44:13:0a:83:67:1a:e2:51:ae:
                    e0:8e:f3:12:64:ef:fc:e0:c4:40:d2:4b:f2:95:b0:
                    ae:ea:0e:ff:cb:5f:e9:d8:77:48:a8:14:96:cd:5c:
                    9e:da:93:7b:4c:a3:6e:4f:b8:7d:a8:4b:70:df:72:
                    13:a6:72:27:f2:44:71:99:a9:88:a4:ac:cb:41:15:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:83:D6:C3:90:96:4D:78:FD:DF:43:F0:D0:4A:61:69:93:8F:28:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl

            X509v3 Authority Key Identifier:
                keyid:3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:ee:cf:fe:10:5a:08:5e:a3:e0:91:34:a5:01:67:43:b2:
         0c:39:6f:cd:89:f2:a7:f7:e5:52:b8:7a:90:3e:6c:57:cb:d6:
         d2:f8:40:0f:85:9f:0a:8b:01:d1:f8:b3:b4:31:cb:24:b7:98:
         98:a9:21:95:2d:27:bc:c6:f6:01:9e:a8:46:2a:f3:6e:4d:fd:
         2d:79:71:4c:e8:79:90:37:f7:8c:c6:50:05:d8:ed:58:a3:88:
         ea:75:1c:ec:32:cf:1a:39:f9:42:da:be:18:f7:25:a8:bf:e1:
         ad:56:0d:1a:15:44:f2:55:a4:82:c8:bd:c2:e5:e2:5f:4d:db:
         64:21:b7:10:9a:a1:08:15:48:4e:e1:36:ea:68:74:3b:7a:4b:
         7d:bb:c8:9e:46:b3:2c:25:93:61:d8:29:0e:6b:66:fa:f0:72:
         4f:4b:4e:40:15:bb:bc:96:de:a8:a1:dd:49:ee:ac:d7:88:c4:
         c0:bf:24:da:2b:ff:52:03:46:dd:2a:2a:79:0d:57:cc:a9:1e:
         96:c1:c9:cc:6e:15:53:ad:0e:fa:b3:f6:aa:4d:26:34:97:64:
         1e:8f:76:ba:59:be:39:44:a9:7f:84:eb:ea:55:bb:d9:01:a2:
         9f:10:d4:ef:35:26:93:0d:bc:e6:02:54:21:a1:72:b0:8d:8a:
         42:d7:73:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:06:10 2026 by rpki-client