Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3dda45f3-4cd1-308c-bc09-6c1819da3b3b.roa
File:                     3dda45f3-4cd1-308c-bc09-6c1819da3b3b.roa (raw, json)
Hash identifier:          TWUbueIXM9ygti3OGX1VCSxibblI0tBU0LYLzTTHo3M=
Subject key identifier:   0D:AE:33:46:56:08:DF:B1:48:84:B4:45:8B:61:0E:B6:ED:32:D6:C0
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F4328584F4F080C52CE0242D867453800
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3dda45f3-4cd1-308c-bc09-6c1819da3b3b.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     43641
IP address blocks:        2602:fa02:4b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0c:52:ce:02:42:d8:67:45:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=7148ebab-80e1-4dfb-8b7a-a513d69cf338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:6c:e6:18:cf:7e:f4:a8:bd:d4:26:94:bc:
                    34:e9:e7:52:32:5a:98:5d:e6:f0:dd:b5:bb:b0:bf:
                    7d:37:7c:0c:1d:95:7c:c3:8a:6c:13:c9:bd:38:11:
                    b3:57:3f:15:29:2c:7b:3b:94:13:fe:12:ff:ff:04:
                    0b:93:a8:cc:d9:ef:9f:00:f6:f2:6e:31:37:86:97:
                    2b:b7:19:d3:94:f5:4e:2a:c3:09:9e:f4:04:3c:5c:
                    38:75:d7:18:23:b6:5f:dd:84:4e:69:56:d5:34:ce:
                    e2:9b:c4:24:be:48:7d:97:44:52:8b:67:2c:11:1b:
                    62:84:2d:bf:33:51:66:71:a4:fb:96:79:6a:94:c2:
                    eb:e6:74:cf:47:2d:c2:83:55:63:1d:67:24:fb:77:
                    ae:42:01:50:8c:76:6e:6f:09:41:ab:c7:21:5d:89:
                    d2:51:e3:e6:e1:7a:81:2b:80:57:4e:fc:ba:ea:ef:
                    5e:0e:93:f1:21:46:63:76:ea:49:85:97:b8:94:9f:
                    26:29:68:c3:38:5d:33:da:20:72:43:e3:df:3e:38:
                    58:40:07:80:f9:75:90:e2:db:a4:ca:34:15:83:73:
                    9b:c4:ad:2e:52:26:04:43:a3:02:5d:34:8d:c5:18:
                    ff:78:46:7c:27:54:13:60:74:da:49:28:97:47:4a:
                    9c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AE:33:46:56:08:DF:B1:48:84:B4:45:8B:61:0E:B6:ED:32:D6:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3dda45f3-4cd1-308c-bc09-6c1819da3b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa02:4b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:c1:30:95:a1:31:46:7a:d8:fb:62:9c:e5:12:ec:ff:18:
         23:96:e8:e6:7f:2b:af:0d:ce:44:76:4c:58:23:76:8f:2e:9d:
         5d:15:2c:8d:46:f1:35:89:a9:51:4c:a0:3d:e7:10:74:eb:76:
         2a:05:71:43:bb:4e:7d:c7:ff:89:ff:6c:8f:e8:63:16:aa:86:
         31:de:37:cc:ea:38:dd:39:23:ea:ad:fd:bf:09:f8:ba:78:b5:
         d5:17:22:9d:47:9d:92:28:3f:86:0f:9c:80:cc:fa:74:60:e6:
         90:9e:80:9b:c1:c8:38:a9:cc:cb:2b:02:67:99:59:b3:28:78:
         dc:d7:f7:44:8f:89:2d:ae:5f:ad:35:db:a3:81:0a:43:28:04:
         34:09:77:2d:20:52:7a:d2:69:07:e2:c8:94:74:8d:72:f9:34:
         ca:ec:14:3c:be:32:9a:ae:76:b2:b9:c2:4d:40:70:7f:d8:ff:
         43:e0:ae:e5:7f:39:8f:06:e1:b6:67:e5:7c:4f:05:10:35:b1:
         f8:75:60:be:00:eb:9e:fb:44:2e:18:82:d2:c8:a4:d3:dd:92:
         b2:93:5a:bf:0f:a2:b4:6d:18:ff:d1:87:17:ff:d5:56:df:a3:
         08:1b:2e:31:0e:04:5e:5a:8a:e3:71:7b:0c:69:cd:6f:8e:17:
         16:49:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:09:32 2026 by rpki-client