Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa
File:                     f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa (raw, json)
Hash identifier:          uEASETX3qgeRSkTL+horHpoaQUvUn0zqu/bu+6u0WJE=
Subject key identifier:   0D:29:CB:A6:79:0E:B5:A4:3D:64:22:D5:40:DF:99:51:B3:52:C9:0E
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584F20F7A904231E02A9C33A0080
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     400214
IP address blocks:        2606:9c40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:a9:04:23:1e:02:a9:c3:3a:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=c0e0877e-5395-48e7-8588-10111740623e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:83:57:62:89:63:78:45:df:07:44:7c:e4:
                    0f:a4:a6:ad:29:ca:27:ae:dc:d7:5d:00:26:d6:b9:
                    fe:3b:ce:f1:5b:61:a9:70:44:7f:f2:d1:bf:e4:73:
                    68:2f:6f:df:a4:c5:bc:68:3a:46:6a:b8:a1:3b:63:
                    63:c4:7e:0c:e6:b2:81:af:f1:ee:3d:1a:58:99:64:
                    cb:66:6d:02:62:a5:7f:26:33:2e:23:30:5d:6f:98:
                    93:fd:92:75:42:70:b9:43:86:87:f3:36:58:ab:30:
                    24:c5:4e:a1:a1:15:ea:18:5c:b1:42:fa:67:3e:72:
                    85:e5:d0:13:25:32:f6:02:ab:d6:61:f3:d0:1d:79:
                    fd:9a:da:52:f8:92:f7:19:2f:ba:42:fb:6e:5d:50:
                    db:66:01:1d:f5:46:00:13:9d:4b:1f:f0:c4:b8:1b:
                    3c:1d:62:b2:62:94:67:15:bc:2a:55:9f:17:17:c8:
                    e1:ba:e9:38:56:1e:be:50:e2:d1:3d:2b:cc:cf:b5:
                    2e:65:e6:6e:3c:cc:15:c5:dd:dd:d0:08:c4:45:22:
                    74:5f:36:9c:70:64:fe:f9:99:5c:d2:96:66:87:c9:
                    47:52:14:43:e7:ed:e6:77:55:38:ae:62:f6:3d:3a:
                    48:ec:1f:1e:0b:cf:7d:82:03:b5:6a:2d:57:75:5f:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:CB:A6:79:0E:B5:A4:3D:64:22:D5:40:DF:99:51:B3:52:C9:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7e:48:b4:3b:5a:3a:d6:5b:03:fd:18:6b:0d:aa:51:77:f9:
         f9:7f:d8:c9:2c:a1:b4:70:f8:3a:0a:9c:fb:0b:90:f6:5d:19:
         d7:ee:89:92:45:d3:7c:bc:62:32:4e:b8:72:98:99:91:5a:ab:
         04:ab:10:c1:04:cf:33:7f:97:f5:66:5b:f8:82:dd:cc:21:30:
         78:27:57:7a:41:5c:cd:b1:b1:99:a9:31:97:f4:b5:bf:1a:ac:
         20:78:cc:c2:28:ba:ac:bb:e0:a7:b8:9d:0a:66:89:c5:b7:ff:
         f0:1d:80:9d:b3:80:ab:44:b7:27:74:b2:fd:5f:0e:18:2e:a0:
         b9:a5:45:e6:5a:12:6a:1c:0e:6d:61:32:56:31:30:2a:0e:6f:
         96:3e:61:18:7e:b1:13:83:30:95:65:cc:66:80:34:ff:db:34:
         20:58:1b:7f:39:bd:b9:51:d0:ed:30:ad:d0:78:01:01:d2:2e:
         77:6e:d1:32:fb:16:54:71:28:01:b3:eb:94:f1:3c:13:46:cc:
         1e:1d:cf:e9:81:91:fd:e6:4c:32:e7:06:24:64:67:ef:7f:63:
         af:b7:73:9d:af:67:3f:dc:de:88:bc:28:f3:dc:99:a3:55:5c:
         38:e2:ff:f7:c1:98:c7:a0:1d:04:df:be:9e:73:31:83:c6:3d:
         e1:e3:c2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:17:58 2026 by rpki-client