Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/ddb6e609-5863-342b-82f1-d60010d3957a.roa
File:                     ddb6e609-5863-342b-82f1-d60010d3957a.roa (raw, json)
Hash identifier:          WFk5ZMOzJ2w6Vs9VuvvbD/d31AjDqhi9FCL3yMZ8t2c=
Subject key identifier:   1F:8B:71:7E:0D:90:65:8D:09:FD:D0:F7:77:0B:8D:E7:8B:5C:AD:CC
Certificate issuer:       /CN=82f36e71-6ecb-4315-846e-5cbc1f4770fe
Certificate serial:       010D0C9F4328584FA7A6DF9433C3D17A371691B0
Authority key identifier: E9:0D:30:C9:87:25:36:29:94:22:73:AC:19:C8:9A:C5:B1:7A:5C:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/ddb6e609-5863-342b-82f1-d60010d3957a.roa
Signing time:             Wed 28 Oct 2026 18:51:40 +0000
ROA not before:           Wed 28 Oct 2026 18:51:40 +0000
ROA not after:            Tue 26 Jan 2027 19:51:40 +0000
asID:                     14016
IP address blocks:        2602:fbcb:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/82f36e71-6ecb-4315-846e-5cbc1f4770fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/82f36e71-6ecb-4315-846e-5cbc1f4770fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a7:a6:df:94:33:c3:d1:7a:37:16:91:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f36e71-6ecb-4315-846e-5cbc1f4770fe
        Validity
            Not Before: Oct 28 18:51:40 2026 GMT
            Not After : Jan 26 19:51:40 2027 GMT
        Subject: CN=aded806c-381d-48c5-8a36-854f5ec67a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:3a:de:1d:1b:7b:ba:cb:ec:6d:8a:62:06:
                    26:6c:17:a6:a8:43:eb:de:57:88:b7:8a:44:8f:6a:
                    bd:80:a7:56:7e:72:93:d7:7f:94:d9:46:0b:66:b6:
                    3f:5b:5a:d8:68:9c:6a:bf:f8:a1:9d:95:2a:79:9d:
                    98:55:61:5c:bf:d3:c1:e0:10:95:a5:6c:ac:83:f3:
                    84:81:8f:1f:be:68:aa:32:36:f8:27:d2:99:7d:37:
                    90:a4:e8:c2:6f:62:ce:16:5e:ef:26:00:a2:25:fb:
                    9c:5d:ea:04:a2:27:08:5a:2c:d2:28:72:56:42:bc:
                    f0:b5:a5:85:75:1d:b9:95:b1:87:fb:9e:be:5c:f9:
                    d3:85:7f:ce:b0:da:b2:b8:f2:5d:c6:31:f8:b8:82:
                    b7:36:1a:20:15:9e:9a:03:54:b1:1b:b5:eb:44:1f:
                    d2:c0:dd:69:ff:d5:bf:2b:1b:28:6c:64:b1:07:13:
                    50:85:18:10:5b:3c:6b:da:f5:1f:fd:df:7a:ea:38:
                    0f:e7:56:69:aa:e0:a8:20:30:a2:68:5b:84:e5:8b:
                    63:51:02:51:86:6c:93:55:87:71:28:77:f9:bd:72:
                    02:97:09:4c:be:9d:61:3f:93:fc:1c:78:d1:12:c2:
                    2e:2d:22:2f:5a:53:12:5e:9f:fa:f8:55:24:9d:ad:
                    c8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8B:71:7E:0D:90:65:8D:09:FD:D0:F7:77:0B:8D:E7:8B:5C:AD:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/ddb6e609-5863-342b-82f1-d60010d3957a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/82f36e71-6ecb-4315-846e-5cbc1f4770fe.crl

            X509v3 Authority Key Identifier:
                keyid:E9:0D:30:C9:87:25:36:29:94:22:73:AC:19:C8:9A:C5:B1:7A:5C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcb:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6d:76:29:a3:13:48:41:2f:ff:3e:23:c8:18:2d:d8:69:56:
         8a:96:12:00:61:a7:f4:c5:5d:fc:e3:1a:44:d9:96:d6:77:2c:
         9e:da:ef:df:60:6b:08:8f:8c:cd:be:32:aa:ab:51:00:81:a3:
         33:18:b8:12:4b:8d:62:6d:c5:b0:06:68:de:a1:0b:f1:92:70:
         89:ae:97:c3:a0:e2:95:99:16:2c:aa:3e:28:76:d9:53:35:d4:
         0d:0f:04:92:b5:49:68:4d:7e:bf:c6:07:19:de:c3:df:00:3e:
         44:ad:23:fa:4e:88:94:5a:51:5c:cd:e7:0f:f5:f7:a9:32:34:
         73:0a:2c:f7:73:95:cd:82:5b:25:f0:63:3a:b4:09:26:10:98:
         2d:13:af:1b:03:0d:38:6d:9a:36:19:18:95:5f:3a:34:d5:21:
         a6:16:30:18:da:7c:cb:76:3f:56:34:8c:de:15:cb:98:45:4a:
         a6:7c:ec:78:16:ac:cc:45:30:2d:cd:77:db:c4:72:9d:49:84:
         5b:f4:d6:95:64:9d:f2:49:c9:5b:33:cb:4a:05:aa:81:2c:c5:
         0f:04:3d:7b:a5:fb:56:dd:ba:ea:ce:e0:d2:96:71:7e:c5:9f:
         30:ee:6d:b0:b6:89:18:6c:5a:f2:35:3b:93:b6:b2:86:ed:54:
         8c:7c:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:28:43 2026 by rpki-client