Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa
File:                     c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa (raw, json)
Hash identifier:          Q40PoaZ7cW/7/iJrrKF+uoJO7CW0hD09ytamXEMh9lc=
Subject key identifier:   94:BD:09:8F:25:9C:E2:8E:B4:11:27:0F:3E:56:AB:6C:D8:65:3F:36
Certificate issuer:       /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Certificate serial:       010D0C9F4328584F03A78C65B147A55566D9E180
Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     981
IP address blocks:        2605:ac40:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:8c:65:b1:47:a5:55:66:d9:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=eac924c8-4ae6-4dd8-b5de-f66358684b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:ca:2a:23:bf:a7:a9:16:2b:85:1a:2c:be:
                    78:cc:14:18:17:b5:05:13:8d:72:a8:ea:96:63:4d:
                    26:4c:02:42:14:bd:03:7e:4f:89:c0:65:ee:a7:b8:
                    b9:ee:bf:4c:37:ad:96:c2:03:1f:eb:d5:fb:37:9f:
                    59:94:ef:b1:6a:e3:95:e0:64:67:b5:28:21:98:80:
                    1f:3a:61:66:03:b8:09:11:72:f6:a5:7a:e4:5c:cd:
                    e9:3f:9b:8a:1c:5e:a3:df:e1:bc:9e:3b:b1:05:82:
                    e7:68:f4:d1:51:53:b5:b5:b4:62:17:2b:87:00:da:
                    01:0f:f0:99:68:e7:5e:63:ac:b7:51:4f:8e:56:01:
                    68:40:c1:f2:98:20:1c:96:9e:79:61:30:4a:df:95:
                    62:43:db:28:50:ff:9c:66:59:53:a8:3d:39:c3:b7:
                    10:54:5f:2b:90:74:06:d7:81:96:f3:28:54:27:1c:
                    5b:30:85:2a:4b:90:06:84:35:0a:31:3b:21:64:b9:
                    f9:ac:de:ec:30:eb:cf:d8:07:02:54:85:08:03:4a:
                    26:40:81:ab:4d:12:50:bd:5d:3b:03:53:8f:17:25:
                    16:ca:f9:60:1d:1d:d7:fb:23:89:46:8b:5e:73:34:
                    b9:93:be:b6:d7:4a:b9:66:a2:e7:eb:0d:9e:02:1b:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BD:09:8F:25:9C:E2:8E:B4:11:27:0F:3E:56:AB:6C:D8:65:3F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl

            X509v3 Authority Key Identifier:
                keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ac40:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ec:80:24:e6:2b:60:4a:44:bb:f4:e7:eb:f0:32:02:c6:e4:
         63:53:b2:83:e6:bc:0c:8e:4d:91:01:9d:9f:a9:5c:82:f3:ec:
         55:b9:28:f7:98:26:a5:cf:eb:f4:57:6e:20:25:8c:0a:ea:66:
         b4:4c:54:9f:d8:af:07:0d:95:84:cd:7b:ca:bc:8d:2c:84:44:
         79:16:74:7f:24:8f:fe:5a:6d:da:62:98:31:13:53:74:8e:b4:
         ee:36:ca:61:ff:6d:97:0a:9b:7f:c8:51:7a:57:c7:23:fc:84:
         0b:1c:4f:7a:75:a0:22:81:1c:0d:e5:65:8f:d5:ab:fb:e5:b1:
         45:09:b7:79:08:31:36:6b:73:84:e1:b7:1b:a7:ce:30:02:d3:
         6c:4b:3e:39:2e:56:57:03:52:85:77:89:24:3e:52:34:05:19:
         fc:a5:0b:06:ba:10:cb:ec:94:cd:65:ab:13:c0:9f:f1:d0:b3:
         38:63:80:37:5b:e2:a4:f4:3e:fa:e0:00:0f:4b:1c:b5:6c:fe:
         6f:7c:2f:17:29:1d:b5:7f:87:d0:a1:6d:51:fc:af:dc:ad:dc:
         3d:e9:a7:3f:77:4f:57:04:de:a3:29:fd:c8:7d:0b:67:13:db:
         80:6b:81:b7:66:88:7b:11:d6:7a:9c:66:dc:b3:25:50:c7:c1:
         a8:fe:7e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:34:44 2026 by rpki-client