Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a536c405-143a-37a8-87a4-ae1d57a2a636.roa
File:                     a536c405-143a-37a8-87a4-ae1d57a2a636.roa (raw, json)
Hash identifier:          tv2KZJCEALhk8OS+77u5sSOsxZpWnBVWJEmtFFBjgQY=
Subject key identifier:   A4:56:22:5D:8F:C5:6D:A3:BE:1D:69:2E:16:28:A4:A7:8D:74:F5:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F549D67308A61516928E0C0D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a536c405-143a-37a8-87a4-ae1d57a2a636.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:14a0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:67:30:8a:61:51:69:28:e0:c0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=c6ca5d00-bee8-409a-9882-7efbb4339c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:89:e4:76:c5:77:41:77:9b:c0:19:b3:57:
                    f5:45:03:06:aa:53:37:0c:8e:d8:99:25:5a:65:8b:
                    56:70:86:bb:4e:29:9e:20:0f:4d:a5:b6:c4:b3:41:
                    b1:51:f6:34:04:94:c3:c8:07:97:10:9f:5f:a5:16:
                    7a:63:22:eb:82:92:0b:65:ad:6d:b3:24:28:69:45:
                    9e:24:0d:f2:f2:af:4b:8d:f3:5e:f1:53:e5:c7:c5:
                    13:6c:2f:1a:6c:2c:14:13:75:90:92:91:3f:ca:04:
                    73:5e:63:e3:c0:eb:42:ff:5e:a3:1e:5c:67:65:4b:
                    46:f6:68:1b:81:60:2b:91:9a:b1:df:60:f2:67:82:
                    1d:f4:5f:db:f7:71:7e:ae:1f:21:9f:23:8f:a8:64:
                    66:53:18:05:8d:9f:bf:4f:32:46:c0:c6:0f:42:a6:
                    89:40:10:d7:16:75:09:ce:07:00:58:45:c1:b0:01:
                    49:45:7b:59:c3:fc:24:c9:61:fd:1e:f2:fc:71:ea:
                    29:aa:41:58:5d:56:2a:86:68:3c:13:18:bd:09:58:
                    1f:d4:fc:41:23:40:28:e6:82:76:3f:b0:c1:42:86:
                    b1:40:8e:52:a3:6e:7a:a8:2b:a1:4c:fd:82:d3:0a:
                    b4:13:ef:0e:39:ef:6a:36:6c:2b:1a:e7:71:53:76:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:56:22:5D:8F:C5:6D:A3:BE:1D:69:2E:16:28:A4:A7:8D:74:F5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a536c405-143a-37a8-87a4-ae1d57a2a636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:14a0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:07:e7:22:fd:39:17:70:58:01:79:be:5c:cb:4b:4d:e9:33:
         b3:41:20:f2:ec:52:84:e5:a7:b7:6b:27:9a:4f:ac:7b:2e:8b:
         40:70:9e:4a:63:31:9e:cb:f8:bb:f7:ca:ea:46:b1:4d:2f:a5:
         91:e0:d8:b3:dc:86:ef:e1:e9:bd:33:9d:9e:6b:bb:b1:b6:22:
         2e:75:6e:c1:75:6e:9c:25:71:a2:8d:6f:81:4b:7a:1c:4c:cc:
         3f:a3:c1:d4:85:92:77:3e:17:85:0e:63:a8:57:c7:40:5d:20:
         2a:5e:38:fe:7e:89:13:e1:5d:3c:60:1a:53:8c:24:62:88:be:
         1e:88:d4:68:12:07:69:db:07:9f:95:51:0a:c5:fd:74:2e:b9:
         6b:c7:55:97:d7:70:23:13:9e:22:a2:67:7a:68:65:c0:8c:79:
         99:a6:c6:da:0a:eb:3c:9c:7e:90:11:9d:ef:8d:85:5d:92:43:
         dd:1e:ec:2e:48:0f:72:84:55:86:3a:80:02:5e:55:b1:f8:12:
         54:c0:ff:ce:51:9f:e1:01:18:a2:da:fe:a9:53:00:bb:70:06:
         38:f8:f8:f4:d5:f4:3d:d7:e9:21:03:8e:fe:0c:a1:49:6c:7e:
         19:76:72:27:be:9c:8d:f6:37:34:7d:f2:3b:3d:a0:ff:98:d6:
         7d:3a:79:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:29:41 2026 by rpki-client