Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f44f96ab-c11a-3846-8c08-653ddf68f2e1.roa
File:                     f44f96ab-c11a-3846-8c08-653ddf68f2e1.roa (raw, json)
Hash identifier:          KLwgr8bpLBdj3cG7Yfy0Oc5vbrtmUYomoOxYV6GLROQ=
Subject key identifier:   26:C9:7A:78:38:CB:00:DB:A7:00:2C:11:6D:C8:36:81:16:72:5B:63
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584EFF77762D4F14DA49594A0574
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f44f96ab-c11a-3846-8c08-653ddf68f2e1.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     398795
IP address blocks:        2602:fd10:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:76:2d:4f:14:da:49:59:4a:05:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=b2e7998c-cd78-4585-b058-f55ddb31a904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:c2:fc:4b:10:66:1b:4e:15:cf:d2:bf:4b:
                    fd:8f:db:b9:2f:0a:c9:d9:4b:f3:e5:7c:ff:77:73:
                    f7:47:e0:ad:09:fc:49:60:a9:a7:b6:5a:18:40:90:
                    56:78:c5:8b:44:20:3c:98:d6:b6:0f:e1:f8:fd:8d:
                    78:22:57:b7:33:96:8d:5c:cb:28:99:88:26:5e:ef:
                    56:37:cf:e4:67:f2:b1:91:2e:3e:f2:a3:0c:6b:b6:
                    00:0c:e1:50:aa:2f:23:77:df:50:79:32:59:aa:1b:
                    f2:34:22:3b:0f:aa:f8:7c:bc:67:0b:cc:59:e4:15:
                    fd:f3:69:80:43:4b:2e:1e:7d:4e:d1:3c:43:02:8f:
                    1a:06:45:49:1d:09:46:61:06:67:85:88:87:f8:0e:
                    c2:88:27:a1:df:77:34:5d:2a:90:15:50:52:95:d3:
                    49:07:b5:8e:30:52:4f:66:8d:0a:38:99:ef:cd:fd:
                    c8:15:3d:14:d3:c6:30:a4:43:01:98:ff:ee:20:d9:
                    b7:9e:aa:fe:fc:db:2d:6a:6f:b8:ea:33:5f:bc:48:
                    e9:aa:0f:d3:59:03:58:33:04:b9:61:6a:64:29:b1:
                    a2:d6:cd:3c:e9:5c:93:ab:53:fb:75:63:1a:fc:94:
                    f3:54:2b:9f:84:b7:68:22:39:48:66:e5:5d:3b:ed:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C9:7A:78:38:CB:00:DB:A7:00:2C:11:6D:C8:36:81:16:72:5B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f44f96ab-c11a-3846-8c08-653ddf68f2e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:70:c3:7d:2c:a0:5a:d0:a1:d3:94:b0:43:cc:35:5b:90:71:
         53:af:d1:9e:66:23:81:bf:c6:02:94:62:18:ca:b5:ac:99:b6:
         70:ae:e5:cb:61:c4:6e:56:f0:f1:5a:2f:c6:7d:0e:a7:44:bc:
         a0:0e:a6:c7:f3:5f:b4:cb:fc:14:ed:c7:bb:69:00:9e:a4:25:
         de:7f:4b:81:3b:ba:f4:44:55:a8:a5:cf:90:89:ae:01:c4:3e:
         71:ec:1c:8d:27:e9:e6:88:76:65:c4:69:cc:5b:f3:82:f6:6c:
         5d:3e:b2:03:74:6f:4c:01:7b:2a:b1:83:2b:88:d7:f4:89:3d:
         40:b4:65:a8:15:01:e5:48:09:c4:a6:aa:0d:4e:48:21:65:22:
         34:f7:49:cb:f2:43:a3:23:3a:75:a0:75:a5:02:8f:59:c1:81:
         99:e7:92:01:d6:c1:4d:69:0a:14:99:5e:c1:fd:46:42:ff:c4:
         9d:4b:6a:a6:9b:f1:47:e1:d9:2f:94:86:6d:66:85:e2:f8:ff:
         30:11:f5:9f:80:8b:47:89:af:a3:eb:5d:78:cf:c1:f7:68:53:
         1b:a5:44:db:da:42:ce:1b:7d:70:7e:08:ce:b8:04:fa:f0:c1:
         f9:f4:62:49:af:a5:80:c1:5d:2f:e3:11:ae:ad:61:90:48:52:
         dc:87:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:25:11 2026 by rpki-client