Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/617e1c03-5275-389c-969d-81c0d93c13ab.roa
File:                     617e1c03-5275-389c-969d-81c0d93c13ab.roa (raw, json)
Hash identifier:          hUcx3mxtQhBOWOyV51rasN6j9MRzIx5J/EKWdAOKQts=
Subject key identifier:   5E:43:41:F2:8C:6E:59:18:7A:D2:54:6F:72:6E:3C:B9:5C:17:7D:89
Certificate issuer:       /CN=e0687cea-be52-4639-b2ec-92c799316a27
Certificate serial:       010D0C9F4328584F541AE2BEACD5F3E4FA385A80
Authority key identifier: 3F:07:0D:ED:79:94:93:FA:20:59:FF:87:D7:E0:EE:69:AD:A4:FE:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/617e1c03-5275-389c-969d-81c0d93c13ab.roa
Signing time:             Mon 28 Sep 2026 20:37:31 +0000
ROA not before:           Mon 28 Sep 2026 20:37:31 +0000
ROA not after:            Sun 27 Dec 2026 21:37:31 +0000
asID:                     211358
IP address blocks:        2602:f2dc:84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:1a:e2:be:ac:d5:f3:e4:fa:38:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0687cea-be52-4639-b2ec-92c799316a27
        Validity
            Not Before: Sep 28 20:37:31 2026 GMT
            Not After : Dec 27 21:37:31 2026 GMT
        Subject: CN=d561f19e-1fa5-497e-acb9-5f4d08143962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:82:13:64:cf:42:e9:5a:10:2e:ef:a3:2f:
                    c5:22:b8:ef:2b:36:44:bd:30:c0:0b:0c:76:0a:60:
                    b9:e9:94:22:bb:04:27:1b:66:07:8c:cd:bd:63:03:
                    cf:b1:85:ea:d4:43:f2:16:3c:6b:e3:c9:8d:1b:dc:
                    c7:38:f4:db:3e:8d:0a:82:a9:f8:dc:b9:4d:a4:6e:
                    20:1e:7d:72:df:e8:e8:8e:c8:80:94:26:03:4d:e4:
                    9e:bf:aa:1d:26:9e:43:99:0e:57:57:b5:e5:bd:46:
                    96:66:cc:39:da:05:9b:3d:b4:24:9e:0b:3d:ed:cb:
                    19:44:fc:37:62:96:7c:d2:89:5f:41:81:d8:07:1e:
                    51:9b:82:9d:17:22:b7:9c:6d:0f:55:e5:e9:aa:26:
                    89:4b:ed:05:f8:19:8d:56:bc:cf:4f:b1:81:21:f2:
                    35:e0:cd:3f:f7:13:81:3c:41:93:94:88:2d:a6:f3:
                    ef:06:34:e0:b3:08:a9:f4:60:05:81:7b:9f:e5:86:
                    26:90:be:5c:60:81:05:a6:4f:97:4d:57:f0:9b:4b:
                    f6:da:cb:4c:4f:b4:8b:21:e9:a8:8e:3a:a8:ba:e0:
                    80:ba:bc:ce:cc:f6:8d:cb:e1:ea:2c:71:f6:ad:39:
                    85:e1:a8:b5:0b:77:96:ee:1f:be:21:ef:72:21:e8:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:43:41:F2:8C:6E:59:18:7A:D2:54:6F:72:6E:3C:B9:5C:17:7D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/617e1c03-5275-389c-969d-81c0d93c13ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.crl

            X509v3 Authority Key Identifier:
                keyid:3F:07:0D:ED:79:94:93:FA:20:59:FF:87:D7:E0:EE:69:AD:A4:FE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2dc:84::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:67:b9:60:06:d1:b6:02:c2:03:a2:4a:d9:1f:6d:ca:f1:d5:
         98:d9:dc:98:0a:15:b6:8d:39:99:56:73:62:f8:10:6b:d5:06:
         1a:be:a0:54:8f:8b:0f:1b:a5:04:ef:3e:b4:5e:af:f9:af:f9:
         91:55:b9:cf:8f:48:7c:60:69:d4:38:11:09:14:f2:82:be:ad:
         36:0d:91:52:21:93:01:37:e7:25:28:3d:bc:2d:b6:3a:79:ee:
         92:cb:c4:38:bb:96:f9:5e:42:f6:07:e8:3e:fb:1e:6b:8a:2a:
         1b:1a:6b:13:3b:0a:37:2e:e1:42:05:ad:c1:8b:03:9c:8e:d5:
         ac:e4:0f:97:2b:97:b4:7c:06:3d:81:ba:89:b3:77:1f:76:e7:
         52:b6:12:1b:94:dd:e0:97:06:b5:f6:46:6b:07:d3:47:76:dd:
         35:f0:35:56:0a:6c:06:71:e4:de:30:7d:b6:60:b4:91:8e:cc:
         25:42:05:33:f5:12:15:31:2f:cb:aa:29:5b:ba:d2:92:79:82:
         0d:60:5b:29:22:5d:e1:b6:eb:fb:96:98:f3:8c:14:e7:0b:cd:
         93:00:2d:4f:4f:cb:7d:de:7e:cf:4c:11:93:88:d8:24:5c:21:
         be:23:97:97:1c:cd:04:ce:09:2f:46:7f:70:61:56:2b:ec:91:
         d6:e4:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:16:47 2026 by rpki-client