Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/61e978e2-0231-3b05-942b-06419b955666.roa
File:                     61e978e2-0231-3b05-942b-06419b955666.roa (raw, json)
Hash identifier:          yFHg2yFDQ/deLpbDrv6q74XoP6hCPopLaN8Oz2r0F/A=
Subject key identifier:   FC:14:6A:D1:D3:8A:02:81:49:D7:35:8C:A6:16:48:DC:DB:28:01:7D
Certificate issuer:       /CN=c06ac08c-95d5-455d-921a-f5ac8059e8ad
Certificate serial:       010D0C9F4328584F1E2CEC9475E378B7BD317B30
Authority key identifier: C2:91:EE:19:B9:63:E0:61:BF:27:F7:15:B9:F3:51:BA:E2:80:F3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/61e978e2-0231-3b05-942b-06419b955666.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        2602:fb0b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:ec:94:75:e3:78:b7:bd:31:7b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c06ac08c-95d5-455d-921a-f5ac8059e8ad
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=0c5102ad-8fe8-4cf6-91c9-ce4f370bbe4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:93:23:c7:16:d3:34:d5:4f:6d:56:e3:f7:
                    51:ce:95:84:f7:14:1d:6a:9f:44:45:a9:47:63:5a:
                    ed:57:da:f8:ab:9f:33:91:18:58:32:74:91:75:0d:
                    d7:de:3e:6e:ac:3c:f8:42:2a:cb:e3:b8:90:6e:96:
                    78:96:1f:5b:80:1e:f4:32:e4:03:63:ad:41:e2:0e:
                    3d:3d:e5:3f:1c:bb:62:16:ab:6b:bd:f0:8c:cd:37:
                    c6:db:2e:2a:b2:99:da:f6:3b:79:9c:38:3c:23:ed:
                    f0:b1:c0:78:f8:b4:90:b7:d5:75:10:de:8f:a0:ba:
                    a6:62:49:b1:74:e7:64:3f:80:8f:f0:b9:55:0b:1d:
                    c3:db:34:90:da:43:47:32:e6:c6:d7:ba:ac:68:77:
                    76:0d:99:8e:7c:6e:60:e6:b0:b3:d6:da:6c:c9:c3:
                    35:9a:21:d5:2a:ed:80:88:19:90:d6:fd:cb:8d:90:
                    34:db:2e:12:11:57:99:d3:17:42:ff:ce:ff:dc:f9:
                    65:76:ae:4e:aa:2e:07:33:bd:05:96:76:eb:00:bf:
                    ba:f9:26:26:17:07:f7:73:c0:71:b1:ea:12:7c:cd:
                    73:27:21:04:0e:3d:35:31:b4:ab:fc:98:db:54:25:
                    2f:ec:7d:e3:dc:9a:26:48:78:4e:01:81:d3:f7:57:
                    49:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:6A:D1:D3:8A:02:81:49:D7:35:8C:A6:16:48:DC:DB:28:01:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/61e978e2-0231-3b05-942b-06419b955666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.crl

            X509v3 Authority Key Identifier:
                keyid:C2:91:EE:19:B9:63:E0:61:BF:27:F7:15:B9:F3:51:BA:E2:80:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:bd:60:b8:00:dc:2d:e1:0c:ce:59:bc:e9:c3:da:bb:e8:21:
         7e:ac:d9:dd:b3:fc:df:5e:d6:69:12:04:82:6c:91:c4:30:23:
         fd:d2:8e:85:08:2b:ee:e5:7c:11:b2:6c:8c:23:cb:93:1c:83:
         16:9c:88:6b:ba:e3:84:14:8e:61:e8:e3:f6:ab:e8:87:7f:b2:
         67:a5:2b:fe:d3:73:ec:7d:a5:09:f7:2a:b3:75:bf:fb:a5:76:
         1b:ff:50:03:cb:dc:a0:fe:91:34:38:ff:b5:ff:26:ba:fc:7d:
         71:90:5b:f1:af:74:55:fa:e5:97:45:26:ab:5d:0e:4b:90:98:
         f3:4a:43:cb:50:a0:11:06:26:b6:7b:1d:fd:4e:c3:f6:af:36:
         ca:68:6a:08:d4:90:b7:c8:1c:85:30:eb:5d:8b:7b:f7:0a:df:
         0b:20:b4:df:41:5b:f5:be:e0:b0:c6:fe:88:c6:cc:06:4e:2d:
         b0:7c:d6:93:de:92:e8:24:ff:0e:6a:be:05:d7:58:9f:be:38:
         51:2d:b6:45:fd:5f:ed:10:bb:43:74:f9:30:ee:f6:d2:3c:8f:
         c2:ec:46:32:73:1a:35:70:82:da:37:00:e9:d9:ee:04:be:c8:
         e6:a0:ea:5e:01:86:ef:d8:89:5c:e1:20:77:b0:cd:c9:58:30:
         27:5d:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:08:33 2026 by rpki-client