Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/cd79fbf5-04f6-34ec-894c-e075cf6349c9.roa
File:                     cd79fbf5-04f6-34ec-894c-e075cf6349c9.roa (raw, json)
Hash identifier:          KKnATblknG78MNAGX/15Rcjsf319jVXYo2QCaSXQREA=
Subject key identifier:   09:B5:38:C4:68:15:83:D0:C3:1D:59:CA:13:8F:A1:B4:27:9B:E4:E3
Certificate issuer:       /CN=e93b687e-96ad-4930-acf8-896c92d40eff
Certificate serial:       010D0C9F4328584F4973AD0FD627E1AD4E0A8A18
Authority key identifier: C4:DA:79:31:26:68:92:A2:74:AB:6A:D3:D7:CE:E0:5C:4F:5A:D0:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/cd79fbf5-04f6-34ec-894c-e075cf6349c9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     62309
IP address blocks:        2602:facc::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/e93b687e-96ad-4930-acf8-896c92d40eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/e93b687e-96ad-4930-acf8-896c92d40eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ad:0f:d6:27:e1:ad:4e:0a:8a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93b687e-96ad-4930-acf8-896c92d40eff
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9d5fde81-b184-44ba-8d00-4c9496141138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:67:e3:7d:06:cc:3d:39:e1:52:1d:01:47:f3:
                    8f:79:ca:f4:22:cf:47:ce:33:45:82:c3:ae:65:b0:
                    fc:14:af:8d:24:9f:99:21:b7:e9:ca:32:32:5e:8b:
                    f6:e4:89:dd:cd:86:b5:53:72:40:0a:9e:8f:1a:0e:
                    d9:bb:64:13:4a:51:e9:3c:f1:b2:7c:d2:7e:d2:9b:
                    a5:7a:3c:9b:4b:41:91:0c:d4:07:d2:11:56:b0:08:
                    31:b3:25:22:0a:13:80:35:88:f6:0e:16:ba:c3:eb:
                    c0:67:36:12:3f:ab:65:0f:41:9c:b9:38:fc:87:8f:
                    88:ce:89:96:88:8e:8f:03:b8:1f:73:32:98:c2:49:
                    09:12:58:16:cd:d6:eb:45:b4:77:90:a3:bc:9c:8f:
                    0f:a9:e5:23:46:6d:b4:c8:d9:8f:37:70:3f:43:5c:
                    f0:fc:a7:6f:2e:6a:46:c7:92:25:98:55:12:a3:60:
                    10:3b:e7:69:55:d7:65:ca:22:de:96:7a:f7:bb:4c:
                    b0:20:e5:90:ad:ba:29:03:75:47:a1:b8:04:f7:41:
                    22:f4:70:f0:39:1b:f1:f9:17:dc:8c:1f:2d:20:e7:
                    12:cc:2e:c9:aa:cd:fd:89:d0:5b:f2:9e:aa:de:1b:
                    2a:d5:08:59:72:ef:1d:34:e2:f0:02:5d:34:11:dd:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B5:38:C4:68:15:83:D0:C3:1D:59:CA:13:8F:A1:B4:27:9B:E4:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/cd79fbf5-04f6-34ec-894c-e075cf6349c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/e93b687e-96ad-4930-acf8-896c92d40eff.crl

            X509v3 Authority Key Identifier:
                keyid:C4:DA:79:31:26:68:92:A2:74:AB:6A:D3:D7:CE:E0:5C:4F:5A:D0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:facc::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7a:5e:55:5a:c7:3b:ae:8e:d3:b9:2b:90:e6:34:bb:4e:25:
         9e:2a:04:1d:b2:97:0f:a1:c9:c0:eb:34:50:ec:39:20:8c:5e:
         93:e3:68:4a:18:e5:34:44:6d:6e:c9:e7:ca:ad:22:72:47:fa:
         a4:d6:d6:49:bb:79:4e:10:7f:e1:d5:fe:db:e3:be:ce:03:0a:
         5d:9a:e1:7d:b8:fb:72:15:f0:61:3a:60:41:1f:f5:6e:3e:38:
         f1:91:6b:b3:22:9d:3d:25:76:41:d2:6f:d0:96:f3:6a:c2:95:
         b5:87:0b:15:03:64:b9:9f:08:b3:55:2f:60:2e:a8:5d:1d:0e:
         32:ec:bb:44:df:50:21:12:a5:35:46:68:fc:13:83:75:5e:4e:
         61:7e:16:5d:3d:23:05:c2:02:01:95:ae:ca:b7:76:f8:76:0c:
         c3:39:64:3f:c2:e9:07:17:51:83:09:6f:a5:bf:f9:1e:26:a1:
         84:f0:81:9d:88:ae:cd:c5:5e:b9:1a:0a:a2:bd:43:4f:71:90:
         62:6c:9a:62:8a:62:d5:0a:65:11:6a:b0:89:dd:ee:26:1c:37:
         a8:43:e2:85:d5:7c:1c:3b:7b:7f:17:53:a8:17:9b:de:6a:e4:
         d1:a7:07:eb:c5:2d:af:2e:a9:c2:33:de:ac:08:03:96:f0:47:
         84:f3:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:11:13 2026 by rpki-client