Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/351812e7-f09f-3ebc-a853-c4c487d4b593.roa
File:                     351812e7-f09f-3ebc-a853-c4c487d4b593.roa (raw, json)
Hash identifier:          /LWYW0FIKE5fNNzoE7cXGc566vnmQkQkpY7KuGb+LGY=
Subject key identifier:   5A:7D:6D:85:5A:3A:D4:55:DB:97:15:46:77:F2:30:C8:57:E3:84:1C
Certificate issuer:       /CN=d1d97ce9-5a4c-441e-992e-39480606bb0f
Certificate serial:       010D0C9F4328584F498A73FE08F638418287F180
Authority key identifier: ED:AF:56:74:C3:55:48:03:79:4E:A3:FA:02:76:02:B5:FE:37:19:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/351812e7-f09f-3ebc-a853-c4c487d4b593.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13804
IP address blocks:        2600:d801::/44 maxlen: 44
                          2600:d801:30::/44 maxlen: 44
                          2600:d801:50::/44 maxlen: 44
                          2600:d801:60::/44 maxlen: 44
                          2600:d801:70::/44 maxlen: 44
                          2600:d801:80::/44 maxlen: 44
                          2600:d801:90::/44 maxlen: 44
                          2600:d801:b0::/44 maxlen: 44
                          2600:d801:c0::/44 maxlen: 44
                          2600:d801:d0::/44 maxlen: 44
                          2600:d801:e0::/44 maxlen: 44
                          2600:d801:f0::/44 maxlen: 44
                          2600:d801:100::/44 maxlen: 44
                          2600:d801:130::/44 maxlen: 44
                          2600:d801:170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:73:fe:08:f6:38:41:82:87:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d97ce9-5a4c-441e-992e-39480606bb0f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9af7207a-73b4-4748-8a4d-3bdde550a5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:60:ab:c7:1f:f9:7e:4c:c9:8e:98:46:c1:
                    ca:cc:9c:c1:b8:7d:63:a5:ff:87:4b:c7:7f:6a:ff:
                    89:b8:6f:89:0c:7f:e9:f6:1d:fe:7a:bb:7e:87:12:
                    3d:4c:25:3e:64:a4:5f:d7:df:de:84:3b:43:90:76:
                    6d:66:76:90:17:3c:d8:ff:d6:ba:c0:be:98:aa:ba:
                    a0:e2:67:9a:33:40:2c:ef:a2:e0:fe:18:ef:ed:70:
                    87:7c:e1:29:3d:f4:18:b9:f0:c1:45:1a:b7:63:61:
                    f0:34:ca:d8:87:8d:3a:61:0b:ae:f4:04:4d:40:7d:
                    eb:20:f1:cb:31:36:de:e0:16:22:f0:13:bb:2c:f6:
                    b5:4b:3d:d1:83:ec:b6:93:ce:7e:c5:77:11:ed:c3:
                    2a:df:9b:15:dc:2e:87:7f:b4:21:a0:7d:e9:c9:d0:
                    72:54:6f:19:70:52:d5:10:b3:47:df:f7:3a:b5:bc:
                    d9:99:13:2b:d9:7a:c8:ca:ee:15:e4:66:0d:23:ae:
                    71:ab:ab:31:68:c5:f2:0e:e6:dc:64:a4:15:8d:16:
                    69:2b:93:c5:79:36:46:1d:fd:35:19:03:5e:05:ed:
                    46:7a:b2:c3:5b:0d:e8:25:5e:bd:0e:31:b3:18:7b:
                    7a:30:6a:ca:64:8a:82:58:bb:b4:01:1b:53:04:98:
                    0c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7D:6D:85:5A:3A:D4:55:DB:97:15:46:77:F2:30:C8:57:E3:84:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/351812e7-f09f-3ebc-a853-c4c487d4b593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.crl

            X509v3 Authority Key Identifier:
                keyid:ED:AF:56:74:C3:55:48:03:79:4E:A3:FA:02:76:02:B5:FE:37:19:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:d801::/44
                  2600:d801:30::/44
                  2600:d801:50::-2600:d801:9f:ffff:ffff:ffff:ffff:ffff
                  2600:d801:b0::-2600:d801:10f:ffff:ffff:ffff:ffff:ffff
                  2600:d801:130::/44
                  2600:d801:170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:bf:f5:3c:24:4a:15:ab:e9:a0:b2:90:fc:ad:19:30:d8:0e:
         e3:7a:2e:1c:6a:db:fd:eb:56:68:cd:28:46:ee:21:3b:6b:0e:
         40:35:52:48:0b:5d:80:45:a8:1d:9e:61:9e:f8:44:92:0f:b8:
         2b:d3:79:63:08:ad:98:e4:03:ef:88:1b:52:c3:57:3b:07:52:
         6e:96:19:e9:29:d8:64:95:b4:83:1a:5e:14:3f:a3:93:04:4f:
         30:3a:1c:8c:d1:53:06:ef:35:84:5d:8d:67:70:88:45:79:33:
         24:d4:de:04:13:5c:63:1f:79:1d:c6:84:13:d7:b7:d4:14:dd:
         1e:80:c8:93:f1:99:90:a5:43:56:14:8a:69:81:04:66:5d:b5:
         fa:f4:90:8b:39:02:d0:f2:73:db:52:62:1a:11:e2:57:8f:68:
         98:9f:d1:5a:0a:b2:69:76:4d:ce:d3:29:83:5d:72:a4:1f:7e:
         6e:4b:74:9d:da:a3:7b:57:24:e9:ba:fe:aa:55:b6:04:17:66:
         02:9a:f8:2b:30:df:97:e7:6a:75:10:45:34:80:78:33:73:92:
         30:c6:f3:8a:6f:57:0d:5d:06:1e:15:47:7f:e6:dc:3b:71:bd:
         52:90:5c:b7:d9:a9:b8:26:bc:0d:4b:af:4f:95:81:20:35:90:
         61:00:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:08:04 2026 by rpki-client