Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/6eaed1ea-3446-361d-abfd-07f55bdb2f1e.roa
File:                     6eaed1ea-3446-361d-abfd-07f55bdb2f1e.roa (raw, json)
Hash identifier:          2jumyoYWEoT/UeM0nXb24yD3HETlnmb+r9oZJr88sLc=
Subject key identifier:   7F:34:64:23:03:28:AA:30:F9:3A:94:0A:B9:00:CB:DB:E3:5C:05:74
Certificate issuer:       /CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
Certificate serial:       010D0C9F4328584F225D02CC4BDE1DBC4A1D4500
Authority key identifier: 1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/6eaed1ea-3446-361d-abfd-07f55bdb2f1e.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     27630
IP address blocks:        2607:f350::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:02:cc:4b:de:1d:bc:4a:1d:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=01b7930b-672f-4ab9-850e-b2ca6d5c9ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e5:97:4a:c0:6a:3a:03:63:26:1f:32:5e:b5:
                    0f:70:0d:99:54:2e:ab:fa:a4:e1:9b:f9:4e:c0:e4:
                    1e:6f:c4:01:e3:f8:5b:c6:d7:10:22:82:bf:f3:c4:
                    50:d9:17:57:cb:c1:01:75:e2:d7:6d:a6:4c:77:b0:
                    45:cd:38:94:52:49:eb:e7:df:1c:f0:db:7c:bf:cc:
                    d1:07:12:31:e4:d0:16:50:04:40:ab:2f:26:a9:82:
                    16:55:ac:5d:91:13:5a:1e:84:f0:3a:ac:ac:54:e6:
                    36:9f:41:73:96:5e:27:4f:a5:7d:a4:d8:f3:48:be:
                    e0:b8:0b:c9:39:26:50:c7:c4:78:6e:81:b4:5a:09:
                    81:2c:d8:d1:c3:08:01:1b:d2:55:c0:fc:bd:08:63:
                    1b:69:c1:ca:4c:37:11:23:48:6a:d2:5f:39:1c:f7:
                    bb:f7:81:a7:b9:30:38:8d:cc:eb:65:b9:e0:16:d1:
                    60:c3:27:5c:be:06:c2:11:0d:de:df:2d:ab:2e:72:
                    29:ad:85:28:af:84:9f:e6:12:05:87:b1:57:c5:b2:
                    4e:83:ff:08:3f:49:4a:6c:d9:66:3f:2a:c3:98:cb:
                    2b:6a:55:af:76:c8:39:46:3f:61:aa:12:4f:fc:a8:
                    aa:07:61:02:f4:d5:99:66:c4:85:fe:be:e8:a1:d0:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:34:64:23:03:28:AA:30:F9:3A:94:0A:B9:00:CB:DB:E3:5C:05:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/6eaed1ea-3446-361d-abfd-07f55bdb2f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl

            X509v3 Authority Key Identifier:
                keyid:1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f350::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:29:a3:06:f2:ff:ed:74:95:da:50:8c:a1:c9:b8:68:db:d1:
         25:43:47:5e:b3:ca:93:d9:f0:03:e8:02:51:4f:c2:86:91:b5:
         0e:8c:e7:50:0c:f5:ac:d5:a6:00:77:31:bb:7e:13:34:90:7f:
         3e:91:05:64:2d:23:d9:44:3f:59:0c:99:22:1e:f8:68:cf:d2:
         f9:e2:23:e5:94:96:84:5b:91:4f:86:e0:3e:c2:ae:a4:90:c0:
         6d:14:00:26:31:a1:c5:64:82:13:62:c8:23:a8:0d:30:d1:a1:
         63:64:3e:08:0c:90:6c:f2:d5:fe:18:33:92:d4:86:4a:73:33:
         c6:95:7e:fa:5a:a0:b3:b9:fa:24:1c:b1:67:90:b1:3e:7f:fd:
         16:57:3e:cc:cb:a4:b7:34:e2:4e:90:95:13:c2:94:1d:53:fc:
         46:53:7d:91:83:e8:6e:da:e5:b5:91:2e:d8:85:a5:3f:91:7c:
         94:e9:9a:25:ce:db:62:7e:97:bc:6f:ca:d8:92:0b:a3:4b:fd:
         e0:b2:b6:3f:cd:da:83:99:f1:49:1d:f4:a0:36:88:09:01:c3:
         04:2a:e9:7c:fd:c4:9e:2a:c1:f4:04:c5:0f:a4:f9:9f:b0:cd:
         9c:1b:16:84:d5:44:9e:f0:3c:e5:43:bb:57:bb:9d:56:6b:87:
         48:4b:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:50:32 2026 by rpki-client