Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162/732360c3-e668-310f-aced-05f4db05a41b.roa
File:                     732360c3-e668-310f-aced-05f4db05a41b.roa (raw, json)
Hash identifier:          7vhEiaM8n36wWiXpnMfPIjYPYFUy2MQAhgH5rJEzeXE=
Subject key identifier:   33:D7:48:C2:5D:32:99:FB:77:2E:46:7E:05:F4:73:1E:5C:09:99:C9
Certificate issuer:       /CN=266d4a1c-d5b0-4329-99d0-8647be3e7162
Certificate serial:       010D0C9F4328584F91650184768F488FD8C50EE8
Authority key identifier: 94:80:EC:AA:1F:F3:5C:89:31:2F:61:F7:2E:15:96:80:90:7C:13:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162/732360c3-e668-310f-aced-05f4db05a41b.roa
Signing time:             Tue 20 Oct 2026 19:31:10 +0000
ROA not before:           Tue 20 Oct 2026 19:31:10 +0000
ROA not after:            Mon 18 Jan 2027 20:31:10 +0000
asID:                     403008
IP address blocks:        2602:f2cf:c8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162/266d4a1c-d5b0-4329-99d0-8647be3e7162.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162/266d4a1c-d5b0-4329-99d0-8647be3e7162.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:91:65:01:84:76:8f:48:8f:d8:c5:0e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266d4a1c-d5b0-4329-99d0-8647be3e7162
        Validity
            Not Before: Oct 20 19:31:10 2026 GMT
            Not After : Jan 18 20:31:10 2027 GMT
        Subject: CN=7488ef4f-6b4a-4c30-a982-79ec1378e0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fc:e8:7a:9e:59:10:ac:ce:f4:dc:3f:65:ab:
                    a4:3d:bc:a6:c5:45:7a:fc:ea:91:99:1d:46:df:e4:
                    1d:e5:2c:7f:75:08:d2:dc:ad:52:36:c1:3c:f0:eb:
                    7d:06:11:1f:f0:18:6d:09:18:a5:68:2f:d1:e5:89:
                    8e:dc:cb:43:d6:27:52:b4:fd:c2:4d:35:84:6e:67:
                    ee:a1:ce:02:17:76:b9:5e:e3:63:18:42:01:4d:93:
                    45:8c:87:48:14:87:fc:f6:d0:e9:e3:e0:52:2c:8d:
                    2f:29:fa:54:d2:6b:31:c7:7e:36:3f:65:5e:54:30:
                    af:5a:fb:6c:42:64:cc:3c:e8:56:57:49:85:f8:39:
                    26:bc:9a:7a:73:20:ee:1b:3e:d3:55:4d:01:74:70:
                    df:fe:3a:cf:69:60:65:9c:b3:cc:88:27:81:53:51:
                    c7:f2:f7:c9:1c:7a:01:83:6b:4f:72:b1:62:ad:59:
                    e4:5f:99:72:69:c4:92:50:f0:e7:f0:8f:e7:2a:5a:
                    b8:79:b7:28:1d:cf:d1:ae:40:a3:31:9a:b3:3e:4f:
                    bc:8c:81:88:90:12:6b:a0:f3:4a:3f:0a:6c:17:bf:
                    bb:dd:71:5e:54:d4:b3:c1:fc:2f:60:c9:ae:b2:0a:
                    53:a8:62:10:ed:85:fe:04:1a:0c:3d:4b:53:50:87:
                    92:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D7:48:C2:5D:32:99:FB:77:2E:46:7E:05:F4:73:1E:5C:09:99:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162/732360c3-e668-310f-aced-05f4db05a41b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162/266d4a1c-d5b0-4329-99d0-8647be3e7162.crl

            X509v3 Authority Key Identifier:
                keyid:94:80:EC:AA:1F:F3:5C:89:31:2F:61:F7:2E:15:96:80:90:7C:13:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2cf:c8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8e:9d:d1:0a:34:25:3f:ad:8c:d7:1d:65:75:ad:b5:40:f6:
         4d:60:19:69:f7:7e:bd:8b:fe:b6:a5:3d:1c:45:f0:52:a1:83:
         a0:00:3b:cb:a6:c7:d2:57:21:63:e6:63:c6:ab:c5:bc:88:8d:
         ec:1f:5a:d3:c0:80:ce:a1:83:1d:a7:ea:a3:3b:9d:58:05:6e:
         03:73:64:88:67:92:46:9e:5c:c2:a1:31:c0:5a:53:b2:d6:eb:
         9d:28:f8:fe:f5:73:01:94:7a:01:f6:fc:3d:c9:2c:9d:9b:29:
         e8:fc:bc:9e:ed:6d:ca:70:cd:62:15:78:07:1d:e2:81:5d:31:
         d2:c9:f1:7c:2a:90:7b:16:e9:fd:86:93:aa:70:eb:1c:7f:f0:
         dd:6a:af:81:b9:2c:a7:ff:b6:ef:4a:8a:5f:9a:98:d7:53:f5:
         f7:45:64:9b:b8:45:5e:3f:31:76:2b:88:2d:65:e7:1e:d2:f7:
         4c:16:39:3a:a4:0a:5e:c4:bd:66:7a:a8:36:37:03:d1:fe:f8:
         40:da:9b:56:b0:b1:78:d2:84:15:2b:51:38:c7:38:6e:58:6a:
         18:12:a5:ca:77:01:3d:f8:84:e1:fb:81:18:94:dc:b4:38:51:
         ac:5b:9a:aa:1d:2f:04:3d:34:cb:95:01:5b:ed:67:97:7d:e1:
         c5:74:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:29:31 2026 by rpki-client