Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa
File:                     0e66e1a0-d526-33c0-8259-90113fc406d1.roa (raw, json)
Hash identifier:          nhhHMSunQu96mb6PnC7RUtZPb912lqa9byoAouNKmMY=
Subject key identifier:   63:05:16:1A:58:90:13:98:15:A5:56:BE:B4:D4:C8:5A:08:33:DC:AC
Certificate issuer:       /CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
Certificate serial:       010D0C9F4328584EF87CD4754BD6E0C2142EDF00
Authority key identifier: 55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     138997
IP address blocks:        2602:fada::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d4:75:4b:d6:e0:c2:14:2e:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=115d718d-0ee8-42cc-af68-8eb968f4ac98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8e:54:ad:35:92:66:7d:9d:6d:b8:33:e7:e7:
                    79:5c:c3:39:b1:99:8f:39:69:af:36:8d:4d:fe:7d:
                    34:1d:da:03:57:98:4d:42:ea:ee:aa:4c:b5:1c:0c:
                    0a:74:fb:b6:03:33:e3:75:05:42:a9:52:42:3b:4a:
                    7d:36:df:a2:b1:95:d1:d7:2d:5e:7f:4b:8f:19:72:
                    88:89:ff:76:8a:f1:d4:9c:b2:bb:6c:bd:5a:ec:2c:
                    c7:72:4b:89:54:50:f3:3b:9f:ac:85:cd:7c:05:c8:
                    53:3b:51:5a:c5:9d:25:18:0a:e4:a7:9b:1f:03:6e:
                    55:f3:8e:c3:d7:86:bc:e2:9a:8d:73:6e:df:78:fd:
                    44:ec:23:55:0f:04:92:0d:4e:43:36:d1:89:f3:06:
                    11:d8:b3:4a:63:4d:fc:3a:93:f8:10:a6:25:40:fc:
                    99:8c:fc:03:c0:d0:24:82:e2:70:02:3a:e3:00:bc:
                    fc:54:3b:98:48:8c:d7:89:39:e5:33:c0:24:ba:bf:
                    37:da:32:0c:27:cd:33:9b:3a:a4:8f:8c:d1:90:89:
                    9f:59:e6:87:f9:9d:6b:13:d2:90:dd:0c:7d:1f:9f:
                    b3:b7:04:35:90:93:56:6b:e1:c5:73:01:1e:d1:6f:
                    39:e0:ee:bb:60:31:bf:7f:92:fe:ae:2a:92:ad:a1:
                    1c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:05:16:1A:58:90:13:98:15:A5:56:BE:B4:D4:C8:5A:08:33:DC:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl

            X509v3 Authority Key Identifier:
                keyid:55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fada::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:3a:4a:f7:c1:08:ad:dc:0c:95:3c:87:70:c4:98:5c:c0:22:
         09:89:35:7c:d7:d9:70:a2:38:16:32:c9:ec:02:c3:98:fb:4b:
         d6:0a:1f:90:08:17:50:12:52:0b:d7:41:75:c2:e8:3e:1d:16:
         5d:3d:7f:2e:0f:2e:a6:c9:00:39:84:bf:a1:4f:e5:8f:54:03:
         a5:92:ec:9a:e5:ad:fe:75:19:e2:a0:e5:7f:1c:8b:70:4f:a1:
         f3:19:1a:5e:ef:a1:31:59:29:22:f0:e8:85:36:90:99:cf:54:
         42:3b:33:17:81:99:07:2d:cc:e2:c8:f5:1d:5d:0c:43:3f:73:
         43:fe:2a:24:c5:21:7f:43:51:8b:94:a8:0d:02:b8:0d:f2:6f:
         05:d8:70:fc:05:d6:63:17:9e:1e:5c:51:ad:96:9e:0b:bf:49:
         99:ba:26:93:63:b2:d1:de:35:27:fc:b3:25:19:5e:ad:63:97:
         53:c1:8d:27:22:a8:71:d8:95:d3:24:ce:33:a1:69:79:09:a3:
         70:06:13:45:df:1a:2d:2a:93:08:ea:00:81:00:19:27:42:ac:
         17:bd:f3:e8:61:91:3c:1d:97:b1:48:c5:40:12:7a:ca:c1:af:
         a7:e9:a0:7c:0d:a0:f2:9c:af:27:48:98:b6:fb:24:e8:f0:11:
         33:a0:69:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:42:10 2026 by rpki-client