Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/53e9d87d-1b4b-3459-b9ec-ab344dabfbe9.roa
File:                     53e9d87d-1b4b-3459-b9ec-ab344dabfbe9.roa (raw, json)
Hash identifier:          CEB+EBldvaQvzH5OQcXLRaYVGSh75xN45J+s+Vg65iY=
Subject key identifier:   03:47:15:99:9E:AC:3C:72:23:D2:93:B8:5E:42:4E:8D:BB:7E:1F:F4
Certificate issuer:       /CN=d0ee24a2-eb87-4eba-aa78-bca70397cec6
Certificate serial:       010D0C9F4328584F4973A8B0F450CCC1F688CB80
Authority key identifier: F2:24:BC:0E:BA:79:1D:83:D9:A2:B4:59:82:F7:6E:E3:A4:4D:88:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/53e9d87d-1b4b-3459-b9ec-ab344dabfbe9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398415
IP address blocks:        2602:fafc::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a8:b0:f4:50:cc:c1:f6:88:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ee24a2-eb87-4eba-aa78-bca70397cec6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0eb51578-eaeb-4650-bbe3-0bb8ea2a432f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:14:f1:01:72:13:16:9a:12:c4:47:0b:bc:
                    7b:4e:e3:c0:60:7a:c3:02:80:24:3f:2d:90:ed:3c:
                    7a:9d:ba:f8:7e:03:ed:e7:26:48:0b:66:a8:c6:1a:
                    2a:8a:93:37:7e:5a:e0:6e:4e:8d:c2:44:0f:46:a5:
                    15:b4:f2:de:de:8c:36:ae:5a:dc:6e:dd:88:25:4b:
                    c9:c9:be:2e:7c:6e:a5:d7:53:97:58:53:3b:b4:f4:
                    e2:5c:e2:2c:8e:7f:cd:23:45:59:c7:0c:27:93:e6:
                    ea:09:4a:95:6b:fb:aa:53:2f:ad:33:4e:55:7f:0f:
                    fc:bd:d2:36:89:40:e7:00:ff:40:66:8d:5b:9c:24:
                    e1:51:c9:01:a8:b4:6d:49:c1:74:f7:38:d0:79:f2:
                    03:21:3e:26:cd:93:77:6b:84:88:e6:f3:6c:4b:e7:
                    5e:be:5f:4b:a5:c2:90:38:ed:35:45:55:0d:54:46:
                    50:27:7a:e1:e2:5c:49:4e:57:19:a3:3f:69:fe:ea:
                    22:3a:3e:3d:bc:c7:97:58:6e:ba:b4:50:ac:1d:e6:
                    a9:9a:95:ce:d8:f8:86:73:ab:1e:39:e4:32:98:4d:
                    d4:aa:e9:f0:4b:df:b2:21:69:6a:83:76:75:9f:74:
                    62:99:58:67:ea:35:8d:b7:8f:f8:3f:59:67:69:0e:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:47:15:99:9E:AC:3C:72:23:D2:93:B8:5E:42:4E:8D:BB:7E:1F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/53e9d87d-1b4b-3459-b9ec-ab344dabfbe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.crl

            X509v3 Authority Key Identifier:
                keyid:F2:24:BC:0E:BA:79:1D:83:D9:A2:B4:59:82:F7:6E:E3:A4:4D:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafc::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:30:00:d3:5b:2b:f1:96:ca:c1:61:ec:e7:b0:ca:10:99:db:
         c6:50:5f:8e:50:ab:45:71:22:c0:b8:32:02:6b:8c:8c:84:c6:
         e3:1e:31:fe:58:a8:69:2f:54:92:e8:e4:92:00:9e:e9:f3:e4:
         dc:f2:c4:71:1e:52:14:33:bc:ca:56:12:cb:6b:73:7c:fc:a5:
         0c:b7:7d:e5:63:fa:24:cb:5f:0e:e6:57:45:a8:4a:1a:25:f3:
         9f:59:2a:3a:66:05:00:2f:43:4b:a1:34:51:4a:eb:61:8f:39:
         e8:82:1d:40:e6:7f:0a:83:50:5e:df:9b:2f:98:24:99:c9:c1:
         51:7a:4a:26:49:18:4b:bd:57:c7:a4:8c:c2:e0:43:b4:47:b4:
         0b:9c:f7:e5:20:87:5c:e1:4b:81:29:98:3f:5e:08:57:fb:af:
         f5:7c:0d:19:2a:ef:cf:fe:c1:21:f6:5d:bc:60:40:9e:3f:e0:
         29:46:e4:f8:19:6d:fe:13:4c:48:33:e8:52:61:ad:47:36:83:
         0d:94:26:de:2b:49:c5:25:ec:d7:8f:da:7a:ba:83:05:52:d0:
         5d:bf:0b:ba:12:1d:33:2e:1c:6a:c3:e5:22:27:39:43:95:18:
         3a:98:04:bc:e9:22:73:6b:52:48:a1:df:da:2e:5b:79:2e:37:
         b8:9a:59:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:39:55 2026 by rpki-client