Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a63a41ab-5df1-4945-8b84-b7f929fd0e8b/77bd6b3e-ae98-3c30-8b16-c858f2160642.roa
File:                     77bd6b3e-ae98-3c30-8b16-c858f2160642.roa (raw, json)
Hash identifier:          vtZr9yHblkrOl0LHpcYlgm0QdriHRxF3nqoNERlUfSM=
Subject key identifier:   0B:63:7E:AD:5D:88:88:33:E9:72:78:C5:2E:01:F2:71:6B:25:22:E0
Certificate issuer:       /CN=a63a41ab-5df1-4945-8b84-b7f929fd0e8b
Certificate serial:       010D0C9F4328584F91E731E12BFE9C851B9AB640
Authority key identifier: 3D:A5:CD:A7:05:5E:1B:67:12:8A:03:8F:6C:13:97:12:DF:25:90:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a63a41ab-5df1-4945-8b84-b7f929fd0e8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a63a41ab-5df1-4945-8b84-b7f929fd0e8b/77bd6b3e-ae98-3c30-8b16-c858f2160642.roa
Signing time:             Tue 20 Oct 2026 23:53:29 +0000
ROA not before:           Tue 20 Oct 2026 23:53:29 +0000
ROA not after:            Tue 19 Jan 2027 00:53:29 +0000
asID:                     402681
IP address blocks:        2602:f2a3::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a63a41ab-5df1-4945-8b84-b7f929fd0e8b/a63a41ab-5df1-4945-8b84-b7f929fd0e8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a63a41ab-5df1-4945-8b84-b7f929fd0e8b/a63a41ab-5df1-4945-8b84-b7f929fd0e8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a63a41ab-5df1-4945-8b84-b7f929fd0e8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:91:e7:31:e1:2b:fe:9c:85:1b:9a:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63a41ab-5df1-4945-8b84-b7f929fd0e8b
        Validity
            Not Before: Oct 20 23:53:29 2026 GMT
            Not After : Jan 19 00:53:29 2027 GMT
        Subject: CN=f1717f96-ad3c-44df-971c-afb8543df2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:93:2c:9c:53:5c:05:1e:8a:21:d9:65:f3:cb:
                    6c:47:03:7b:3d:0d:69:42:fb:ff:fe:0d:3b:41:bb:
                    77:fa:a7:6b:c2:72:16:37:fc:4e:b0:56:c8:98:20:
                    5e:a7:c3:f6:f3:ef:38:55:68:bf:5a:8d:22:a1:1e:
                    58:f6:ca:37:7a:1c:45:17:97:32:e5:88:54:71:60:
                    7d:f3:f3:17:de:2d:4f:92:20:3b:9b:02:da:80:03:
                    69:cb:8e:d4:57:23:0e:17:23:81:2f:20:79:54:85:
                    75:c6:91:65:1a:42:b9:98:3c:ce:f2:b7:9d:8f:29:
                    11:04:f7:e3:2c:2d:a5:07:33:8c:77:7b:4e:7b:8d:
                    a6:08:fc:3f:9e:05:45:98:8a:8c:92:d1:a5:9f:8c:
                    a7:c7:de:d6:8d:40:cc:72:ee:3d:d3:bf:1e:59:19:
                    b3:dd:a7:82:94:c8:5d:94:42:ba:e0:ab:7a:d9:f0:
                    31:95:89:0d:55:d2:26:bb:45:96:75:f4:16:f1:44:
                    1c:8c:a1:ba:1b:49:0e:66:36:89:37:a5:1a:de:ed:
                    45:ad:a3:88:7d:25:55:e3:02:c4:3e:d7:a3:76:30:
                    bf:d7:27:ff:27:c3:3d:11:0f:a5:f9:08:1a:d2:4d:
                    23:6f:a9:19:1c:a9:d3:ba:98:fb:71:02:d9:6d:32:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:63:7E:AD:5D:88:88:33:E9:72:78:C5:2E:01:F2:71:6B:25:22:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a63a41ab-5df1-4945-8b84-b7f929fd0e8b/77bd6b3e-ae98-3c30-8b16-c858f2160642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a63a41ab-5df1-4945-8b84-b7f929fd0e8b/a63a41ab-5df1-4945-8b84-b7f929fd0e8b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:A5:CD:A7:05:5E:1B:67:12:8A:03:8F:6C:13:97:12:DF:25:90:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a63a41ab-5df1-4945-8b84-b7f929fd0e8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2a3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:71:09:5b:74:cd:e6:63:f9:c8:b7:77:81:11:18:84:57:5c:
         53:aa:89:89:47:05:26:63:58:46:db:cc:5d:0d:44:cc:d5:ec:
         62:b8:63:6e:19:7f:fb:84:14:59:94:0f:6f:d9:cf:3c:0c:28:
         c9:f3:9d:67:e6:c8:ac:00:58:a4:06:5b:4f:6a:40:82:a5:66:
         29:ef:b0:bc:8f:ff:76:bd:a5:e2:2d:3c:f8:8d:4a:9c:e0:03:
         b1:aa:66:54:10:d2:21:8f:e3:49:51:c7:b1:52:11:c6:df:72:
         73:55:e6:9a:21:e6:ae:6f:94:c3:de:d4:3e:93:8b:d9:ee:ea:
         4f:1c:f1:52:56:1d:d6:d8:65:a7:65:fc:1c:77:ab:93:bf:f5:
         b1:98:e4:af:54:bd:c6:1e:e4:23:49:bf:b6:87:ee:60:87:38:
         66:5b:65:e0:bd:34:bb:75:ca:6b:ff:b3:f6:2b:e8:54:49:dd:
         d1:15:9b:8a:5a:6e:80:58:09:e4:14:7e:1f:99:6d:57:70:5c:
         fc:77:3a:fa:fb:5c:8a:e7:81:63:54:a8:e7:87:b6:a4:1f:f2:
         fc:ab:67:21:90:7a:8b:99:a4:5d:24:b4:a9:c5:b5:bc:ad:78:
         6a:91:01:bf:41:1e:48:6c:3a:4c:72:f8:2a:e8:12:5d:a7:7b:
         ae:aa:c9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:09:41 2026 by rpki-client