Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/2117e668-d2f2-3039-be13-8676224ae1ae.roa
File:                     2117e668-d2f2-3039-be13-8676224ae1ae.roa (raw, json)
Hash identifier:          qw0s1tzZ91aVKUUEhpmjjB3Mp3oLw21QwoivweeJt8g=
Subject key identifier:   29:53:1F:23:89:B5:B1:1E:01:78:AC:B6:1B:FC:7C:FD:DA:C9:20:E6
Certificate issuer:       /CN=624ed502-24b2-4939-bd7e-39531ca3404a
Certificate serial:       010D0C9F4328584F2957D2C0044CE7B7377BC680
Authority key identifier: 9F:18:AC:DB:16:0D:4C:DC:2A:88:3A:D8:8D:7C:A8:9E:5A:5D:44:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/2117e668-d2f2-3039-be13-8676224ae1ae.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        2620:fe:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:d2:c0:04:4c:e7:b7:37:7b:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ed502-24b2-4939-bd7e-39531ca3404a
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=c6d842b4-0e39-4a4a-ad70-b81d90bf5184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:99:8a:77:e8:60:d0:cc:ee:8c:7e:ed:e7:f8:
                    62:32:18:68:f5:3f:aa:d7:c2:87:29:79:c0:20:0b:
                    69:d1:25:32:55:7f:a4:e1:26:c4:02:72:05:7b:3c:
                    b2:82:ad:45:e0:77:d5:aa:f2:50:27:29:94:52:b8:
                    73:eb:a1:fc:f9:c5:03:ba:f2:e7:3d:b8:89:f4:d2:
                    36:24:93:bd:85:95:35:05:ff:d5:11:c6:10:47:07:
                    20:28:3d:a9:7b:bb:8d:7f:e3:67:d6:94:ef:b7:0f:
                    1f:19:cb:ec:7e:ee:42:3c:1f:18:5b:6a:33:82:83:
                    a5:7d:4d:88:ca:3e:7e:aa:b5:ee:dd:7e:a7:a8:72:
                    ce:81:23:d3:d5:5e:fd:28:a0:2f:10:ec:bc:6f:c9:
                    d4:28:d8:34:0e:03:15:11:fa:75:cc:eb:79:e5:b9:
                    e1:a6:13:f7:29:08:1c:58:04:b1:ea:34:74:91:43:
                    d7:3a:ff:19:7a:2f:a0:f0:e0:c3:7c:76:78:b2:99:
                    30:dc:0c:5b:56:fb:7a:8b:9d:1c:20:30:53:04:3f:
                    31:59:61:c7:6a:59:fa:aa:73:40:b8:a2:c7:6f:ea:
                    77:29:80:dd:a1:1b:84:07:05:25:89:27:ef:26:04:
                    32:a2:2a:14:9a:bd:58:68:8f:67:c7:7f:8a:ee:0b:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:53:1F:23:89:B5:B1:1E:01:78:AC:B6:1B:FC:7C:FD:DA:C9:20:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/2117e668-d2f2-3039-be13-8676224ae1ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.crl

            X509v3 Authority Key Identifier:
                keyid:9F:18:AC:DB:16:0D:4C:DC:2A:88:3A:D8:8D:7C:A8:9E:5A:5D:44:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:fe:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b6:80:4d:61:c3:9a:4a:0d:83:3b:c7:7d:6b:dc:f3:80:4e:
         b6:dd:4b:83:45:b5:30:91:c1:63:15:3a:42:4d:e5:41:0a:3a:
         64:b8:c3:d2:c1:4d:26:55:64:e1:39:a4:88:b1:01:4d:fb:3c:
         19:89:92:a8:69:24:4f:a1:53:10:f5:dd:38:be:64:50:03:2a:
         b9:1b:10:1a:e9:55:c7:ae:ba:83:23:57:c3:fa:83:0c:68:ee:
         bc:6d:dc:d5:bf:de:ef:4b:9e:39:5e:ae:8e:72:ad:cd:af:2e:
         46:47:72:95:bd:8d:bb:b0:7a:ad:b1:68:5c:89:ce:16:90:dd:
         9d:90:19:ed:1d:d8:6e:05:c5:56:c5:3e:ca:42:5e:73:4e:0a:
         b0:f3:50:fc:64:d3:8e:3a:44:62:f8:6a:23:1b:9a:e2:fc:8c:
         20:12:8f:de:14:2d:b4:c1:51:4b:b0:67:f8:8c:15:cc:b4:85:
         05:b5:9f:ff:65:58:ee:fc:42:cf:1f:d4:84:05:11:4c:f0:6d:
         a6:4b:33:df:45:dd:18:0a:d9:57:62:1d:ba:f7:25:76:3d:a5:
         7f:c3:95:50:80:58:b5:63:43:1e:c2:e1:a1:68:ee:ec:ab:41:
         f9:47:3c:b1:1f:54:70:19:51:92:a2:7c:2e:9a:9b:82:a8:32:
         ef:3d:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:03:01 2026 by rpki-client