Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa
File:                     94cc771e-e665-32c4-8307-085edb945c30.roa (raw, json)
Hash identifier:          R1ILBGoxEsVX93vqvk1AsKYusPVBJx8puECmdm7bwI0=
Subject key identifier:   2B:3F:DA:3D:08:04:37:6D:69:F1:94:DD:75:3F:15:C6:47:BF:08:F7
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584EE7BCB436EE7F0B7A7F57F3A0
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2607:f368:804::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b4:36:ee:7f:0b:7a:7f:57:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=dbd9f874-e4a8-48b5-ba70-2817c0d2888a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7b:8e:61:7a:67:6c:1a:51:1f:45:3e:66:03:
                    2d:c2:08:46:5b:96:1f:ea:ae:a5:f7:4f:16:60:18:
                    b0:af:57:a1:01:d0:bb:80:71:d3:f4:90:30:35:f5:
                    74:ba:3b:4f:e8:44:f4:cb:d5:70:bc:66:36:3b:52:
                    98:3d:b5:4b:60:d0:02:eb:5a:de:83:c4:a3:7a:6e:
                    05:c1:cb:26:d5:d2:1b:38:2e:db:70:ab:4c:16:28:
                    5c:03:cc:b8:ab:21:8b:8e:cc:ac:79:6b:36:73:b4:
                    14:e9:65:8b:cc:a8:29:fc:78:65:84:91:2d:a7:2a:
                    c0:e1:6d:ad:1e:f0:2b:1c:8a:ed:bb:4c:0a:dd:71:
                    df:d1:af:a8:9f:6c:51:97:4a:c7:49:55:91:f3:52:
                    12:b7:0a:03:37:f0:ff:91:24:27:98:5a:74:1c:5c:
                    d7:5f:1d:b1:49:18:2f:b5:4e:20:3a:d5:f7:6e:0f:
                    af:f6:68:6f:9c:77:42:39:76:7e:54:91:73:5c:06:
                    23:64:63:11:6e:87:39:e1:20:81:b0:e2:8c:8d:36:
                    af:26:20:fe:57:b3:23:49:a6:d8:44:58:9c:4b:cc:
                    23:17:77:8f:cd:a6:68:bf:6b:ce:12:77:46:ba:1c:
                    fc:c0:b6:a5:2f:49:5e:73:c9:02:73:fa:51:52:84:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3F:DA:3D:08:04:37:6D:69:F1:94:DD:75:3F:15:C6:47:BF:08:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:30:b9:d8:e0:99:06:6f:92:56:7b:bb:e8:31:bf:ef:ff:3e:
         30:d8:48:2d:43:8d:07:cc:be:26:74:42:16:3f:8e:b5:6a:d2:
         e5:b8:3d:2f:40:64:54:9c:a1:f6:ed:b5:96:ae:8e:1f:01:e1:
         77:bd:09:45:93:c1:aa:5d:a7:87:60:53:1e:65:14:24:b4:72:
         b2:7a:12:2c:98:88:9c:8e:a8:fc:cc:1a:6b:c8:73:d1:5b:02:
         e3:52:1f:28:c9:65:4c:3f:b0:7c:bb:80:17:6b:89:da:91:51:
         e7:0d:58:52:52:ae:b8:36:f8:4d:cb:6e:1f:48:89:92:07:44:
         ae:9c:16:c9:eb:e8:0b:9c:9f:46:07:fb:b9:5d:df:1c:46:5e:
         ef:83:49:27:4c:e2:9a:3c:dc:78:67:e3:4e:4f:89:40:72:8c:
         31:fb:e2:47:66:72:14:9e:53:8c:1c:00:ed:8b:98:f7:2d:39:
         41:78:ac:78:a8:b1:88:d8:ab:d9:5c:0e:b3:b1:5e:63:e8:ee:
         2f:af:0a:a0:d7:dc:b1:6f:3b:ce:83:85:bd:5b:9e:3c:68:fc:
         b8:3c:46:fa:2d:54:b2:bf:ff:05:4f:19:1e:60:85:ef:0c:29:
         4c:a9:2e:0c:50:80:a3:d8:01:3d:f3:90:10:84:c0:cd:c1:49:
         14:64:d4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:10:58 2026 by rpki-client