Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ceffd4c2-5f05-334c-bebf-a36930e664c3.roa
File:                     ceffd4c2-5f05-334c-bebf-a36930e664c3.roa (raw, json)
Hash identifier:          RwPi56hlCkpqfLEz2snUkowI2K3CvKkNSvqds7lLw1I=
Subject key identifier:   69:BB:74:21:1B:98:71:F1:B9:0D:0D:DA:7C:95:DE:D2:6B:8D:F6:E9
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584F0D91AEDC61A60B133DCE4500
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ceffd4c2-5f05-334c-bebf-a36930e664c3.roa
Signing time:             Thu 03 Sep 2026 14:14:30 +0000
ROA not before:           Thu 03 Sep 2026 14:14:30 +0000
ROA not after:            Wed 02 Dec 2026 15:14:30 +0000
asID:                     36692
IP address blocks:        2620:119:76::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:91:ae:dc:61:a6:0b:13:3d:ce:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Sep  3 14:14:30 2026 GMT
            Not After : Dec  2 15:14:30 2026 GMT
        Subject: CN=02b57140-1e91-41e3-8f1b-8cb0be18fc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:33:a8:0e:d5:3a:fb:bc:a7:11:35:42:67:
                    9b:34:43:9a:c1:8b:b5:7a:b2:19:d7:84:b8:75:d1:
                    19:24:ec:c4:82:47:cf:89:02:cf:0e:2b:f1:a1:69:
                    34:59:be:59:36:3c:64:f0:0d:be:13:d9:d3:b6:61:
                    18:a5:f4:7b:04:e8:1d:43:22:1f:30:20:c1:a0:93:
                    72:cf:91:59:df:87:c0:6f:d1:23:61:38:98:01:e5:
                    09:35:a3:15:47:78:85:e5:6e:8a:5b:96:f3:53:99:
                    46:7c:6f:1d:61:f9:b8:ec:85:77:78:6b:20:5a:85:
                    d1:c7:63:0f:ea:6e:39:c4:08:b1:d1:78:e4:28:a6:
                    63:29:75:3b:5a:8a:58:e3:54:5c:af:fb:b5:75:29:
                    94:a8:b8:eb:0b:a8:34:03:83:bc:db:3a:f2:39:ce:
                    46:98:d6:fe:21:1b:d4:4e:af:5f:c0:ef:92:40:73:
                    ff:53:7b:0c:d2:9a:71:47:f9:87:59:94:e7:f1:d9:
                    74:18:da:34:0f:c8:b6:cd:e2:ef:ae:30:e6:60:58:
                    0b:8c:d8:d3:50:34:c1:b7:ea:3a:c9:54:e7:08:79:
                    08:d4:3f:c1:01:02:29:0f:cd:58:f6:fe:b5:bd:24:
                    88:9f:ea:c1:ab:3b:05:cb:9c:48:3d:a6:0b:21:97:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BB:74:21:1B:98:71:F1:B9:0D:0D:DA:7C:95:DE:D2:6B:8D:F6:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ceffd4c2-5f05-334c-bebf-a36930e664c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:76::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:74:c7:cc:f5:6b:b1:3e:ca:79:55:9a:be:6f:85:b9:ce:
         c9:53:16:40:3e:46:cf:0e:ea:d6:c6:0b:f5:90:bd:4c:9b:9b:
         b4:42:09:11:2f:c6:7b:8b:37:46:ea:cc:13:86:27:45:2b:89:
         23:8d:a5:e8:05:bc:82:03:12:77:5c:12:2e:75:a7:fe:c6:8a:
         24:3a:93:e5:06:84:c7:f4:fb:24:d2:96:9d:6a:89:52:4f:2c:
         5e:c0:ad:11:c3:9f:c4:94:30:6b:5f:39:87:73:cb:e7:16:ae:
         71:fb:e2:e2:53:bc:5e:ab:e4:12:d6:47:b9:81:bd:65:a9:73:
         eb:a0:69:e1:71:3f:7d:d0:23:80:34:0d:5d:e4:44:e4:71:82:
         0b:27:e8:3c:67:2d:45:5e:42:59:0e:f5:e4:3f:c4:5d:3e:55:
         ca:78:a4:39:67:42:c5:cc:f2:fe:61:d9:65:30:75:68:1d:42:
         87:ec:0f:60:13:6b:98:97:70:2e:01:47:eb:1c:62:a2:c2:18:
         28:9b:b3:c3:2e:15:76:79:d5:09:ef:8f:7b:e5:ad:d7:0b:c4:
         38:06:7d:6d:47:c1:bc:87:da:cd:80:0c:5a:5d:13:b8:09:54:
         25:23:a3:a9:a4:e0:72:3b:f8:00:a4:5b:a1:ca:a1:64:a4:c9:
         ec:22:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:24 2026 by rpki-client