Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/1642e1c9-ce3a-3a8e-b71e-7459a8eeac71.roa
File:                     1642e1c9-ce3a-3a8e-b71e-7459a8eeac71.roa (raw, json)
Hash identifier:          ttjykbKHHHU4dT9KldJfbNFwEN3SEagayqtK0/l2Cs4=
Subject key identifier:   C8:49:E7:67:A3:2B:A1:F1:90:D4:DB:51:D5:DD:A3:0D:1B:23:74:16
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584FC971A9146507355D332B7510
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/1642e1c9-ce3a-3a8e-b71e-7459a8eeac71.roa
Signing time:             Mon 09 Nov 2026 21:21:56 +0000
ROA not before:           Mon 09 Nov 2026 21:21:56 +0000
ROA not after:            Sun 07 Feb 2027 21:21:56 +0000
asID:                     3761
IP address blocks:        2604:9440:8300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c9:71:a9:14:65:07:35:5d:33:2b:75:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Nov  9 21:21:56 2026 GMT
            Not After : Feb  7 21:21:56 2027 GMT
        Subject: CN=da400487-9507-4699-acff-d6d7a49739a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:3d:5e:ff:e5:18:5b:f2:c2:b3:40:4d:22:
                    0c:73:75:75:e8:c8:3a:3f:12:37:8b:c0:53:f6:f5:
                    93:85:72:97:16:c8:aa:fd:ba:89:76:e6:13:a1:70:
                    8b:bf:89:11:aa:00:7d:5e:18:1a:34:de:92:9c:d7:
                    fc:44:1b:92:50:74:31:42:3b:88:01:07:50:16:42:
                    40:46:ef:af:8e:17:c5:e8:74:bc:51:be:2a:98:13:
                    47:a5:82:23:6d:13:df:58:51:78:1c:53:50:76:73:
                    3b:45:76:af:71:16:81:d5:09:56:9f:c8:0d:e0:70:
                    6a:5e:55:30:75:71:7b:23:6e:91:b6:f3:65:08:9d:
                    c8:9c:ff:b5:71:a5:1c:91:16:91:87:c4:6f:f8:60:
                    ee:1d:be:93:2b:5d:dd:b2:6a:ee:67:6c:6c:b8:82:
                    e1:9a:a6:32:6c:f4:61:ec:0c:2b:6c:2d:ba:27:dd:
                    57:c9:d6:19:c5:25:b0:45:b5:6e:78:d8:78:c2:10:
                    c8:75:31:c4:db:c7:47:3f:70:9a:f8:ab:05:dd:f7:
                    b2:44:e0:0d:96:c1:9c:05:3c:fd:24:74:64:59:ab:
                    26:90:2b:4b:3e:27:a9:51:64:b8:32:90:cb:ce:29:
                    8a:94:44:2f:77:42:af:fe:88:50:d4:bf:43:24:8f:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:49:E7:67:A3:2B:A1:F1:90:D4:DB:51:D5:DD:A3:0D:1B:23:74:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/1642e1c9-ce3a-3a8e-b71e-7459a8eeac71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9440:8300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d5:e2:5f:63:55:5d:a8:d9:43:3a:b2:ae:e2:88:c4:fa:7b:
         25:65:c6:42:1e:1d:bd:b1:39:62:5b:5b:cd:76:69:50:cf:2e:
         33:a7:28:f1:42:42:8f:4b:31:a1:18:c4:20:91:48:f1:67:a9:
         90:cb:6b:00:ad:1d:ee:8d:4f:c0:2c:4e:74:57:f3:e2:f5:e0:
         af:8d:21:f8:cd:0f:4e:9f:cd:1f:a4:e1:5a:b9:1d:15:0c:d4:
         29:85:ac:db:10:f6:79:c1:8c:dc:3f:48:1b:03:6d:a1:8e:3f:
         99:0d:b9:ef:9f:d9:02:16:2a:01:84:c2:ff:ad:7c:0f:de:73:
         63:22:b8:28:41:aa:7e:52:4e:3c:c1:f8:c7:8f:07:f0:5d:da:
         cf:ac:81:13:7f:92:7a:25:03:c1:55:3a:ce:0d:41:a9:ad:24:
         13:3e:69:38:d7:22:02:92:94:c9:b9:cb:62:4d:6f:59:39:68:
         c9:b7:55:9f:9b:7a:35:04:e3:c3:8f:dc:b2:42:3f:ab:0f:7b:
         12:7a:23:8c:79:db:82:51:c6:06:8b:98:ce:a9:d3:cc:45:c8:
         13:97:6d:93:b1:7b:be:0d:ad:b0:af:76:01:c4:49:d6:97:60:
         8e:0f:49:ea:0b:c7:de:9b:fe:21:ec:33:05:f3:88:5a:0f:0e:
         12:33:7f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:28 2026 by rpki-client