Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa
File:                     7c0cede4-8012-3c79-9d4f-59f194f7d629.roa (raw, json)
Hash identifier:          YB2vE10bJh9QRVX76FEWKKVU6MwbWzI/5gZJKpLPPAM=
Subject key identifier:   0B:46:83:69:75:83:6C:B1:43:5B:BA:E3:B3:C9:8B:16:A6:AE:36:76
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F4328584F497631A9A0C6D337272EFB80
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11810
IP address blocks:        2620:98:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:31:a9:a0:c6:d3:37:27:2e:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=68596797-735f-4a09-bee4-00d80d1a794b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:91:d8:c5:c1:ff:24:e2:e4:67:f5:46:2d:
                    06:ad:0f:ff:25:a8:c5:b8:74:e9:29:d5:e2:2e:0a:
                    5f:a6:43:0f:dd:fe:7f:d7:1f:01:7c:8d:75:dc:4c:
                    12:e8:b8:b7:4b:8f:9e:ab:2e:7f:2b:f5:34:7e:a7:
                    cf:d9:9a:e6:68:2e:27:78:80:0b:18:45:6a:06:f1:
                    08:36:b5:d9:29:6e:dd:9b:bd:51:a0:d3:f1:c6:74:
                    df:b0:69:d9:0b:55:eb:ac:85:96:31:60:55:81:4f:
                    87:fb:fe:5b:7a:af:4b:88:57:03:38:1f:33:48:df:
                    e8:61:a9:3f:d6:b9:74:ad:53:b9:3c:50:89:21:f2:
                    09:15:25:25:72:c4:c5:b7:1f:9b:57:d0:1f:07:11:
                    c7:e7:cf:04:4b:98:bf:9a:d7:2b:07:84:c3:92:26:
                    ef:04:74:6e:a7:d6:b5:d8:ef:33:30:7b:ea:d9:71:
                    f1:38:3f:cc:c8:70:a4:70:0a:f5:8f:09:23:8d:e0:
                    d4:9d:10:04:df:a3:9f:29:16:19:2d:cf:a0:ac:ee:
                    1c:c6:4a:a3:b8:83:23:49:6b:cf:90:4c:2e:f8:4e:
                    69:22:f5:44:00:42:cd:af:2d:b9:7c:7c:37:13:61:
                    f6:29:79:a6:4a:46:df:02:c6:13:0a:c8:e4:ad:17:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:46:83:69:75:83:6C:B1:43:5B:BA:E3:B3:C9:8B:16:A6:AE:36:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5b:a4:69:21:7c:8d:b4:ee:d0:3c:cb:35:b2:04:65:38:20:
         5b:19:fd:63:c1:fc:b4:ab:1c:8f:a3:38:ea:f5:47:d9:a1:7d:
         f5:12:39:f0:77:e8:f6:97:98:9a:71:ea:dc:9b:ba:c7:cb:22:
         66:19:19:05:69:fb:8d:a2:f0:95:4a:cc:fb:a7:d9:e3:b5:49:
         32:a7:7b:7a:75:a0:0f:8f:4e:89:a6:3f:70:59:e3:ca:89:fb:
         04:41:1d:c4:24:b1:c6:5c:76:9c:ef:f4:72:2b:f8:27:f6:bb:
         9f:cb:03:c3:ae:2d:33:8a:8b:4c:a0:9a:ac:4b:6c:f7:8f:72:
         a8:1c:51:4b:07:6a:3e:42:84:46:55:22:1e:82:bc:b6:bc:7d:
         22:e2:01:ea:cc:e8:c5:66:e1:2c:e6:3b:a7:48:24:8c:2f:70:
         f9:9a:d6:9c:3e:d2:e3:37:8d:a3:b1:b8:a2:7f:6b:24:25:fb:
         bf:19:77:0d:ad:37:ad:68:0f:3f:fb:63:35:1d:31:b4:9e:9f:
         ff:3a:34:31:d9:1d:00:4b:88:be:b9:3d:f3:06:1b:b1:82:d0:
         7c:dc:62:01:f6:98:f8:2c:52:27:f7:4a:89:b0:b2:7e:6c:66:
         ae:b3:ae:e9:c7:c3:67:f8:73:df:05:9f:af:fd:c2:5f:32:b5:
         3f:f1:15:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:09:49 2026 by rpki-client