Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/f014894b-1ee7-3406-8883-0cb0e9a51082.roa
File:                     f014894b-1ee7-3406-8883-0cb0e9a51082.roa (raw, json)
Hash identifier:          ZVtAG5mL9do4GDbNCzsn0FUu5XIK/vG+QQe7r/UTAAU=
Subject key identifier:   45:4D:E8:2B:25:DD:F0:29:58:EB:08:88:73:26:0C:42:E3:9A:B3:02
Certificate issuer:       /CN=e0687cea-be52-4639-b2ec-92c799316a27
Certificate serial:       010D0C9F4328584F541AE85B3461F694AA761650
Authority key identifier: 3F:07:0D:ED:79:94:93:FA:20:59:FF:87:D7:E0:EE:69:AD:A4:FE:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/f014894b-1ee7-3406-8883-0cb0e9a51082.roa
Signing time:             Mon 28 Sep 2026 20:37:34 +0000
ROA not before:           Mon 28 Sep 2026 20:37:34 +0000
ROA not after:            Sun 27 Dec 2026 21:37:34 +0000
asID:                     6666
IP address blocks:        2602:f2dc:8a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:1a:e8:5b:34:61:f6:94:aa:76:16:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0687cea-be52-4639-b2ec-92c799316a27
        Validity
            Not Before: Sep 28 20:37:34 2026 GMT
            Not After : Dec 27 21:37:34 2026 GMT
        Subject: CN=16a93a9e-e8be-4c09-bd51-8e6833755fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:a7:1f:0d:e0:53:e9:dd:f6:0f:c2:f5:36:
                    e6:a6:e0:78:63:a4:f2:03:de:42:c3:8d:2b:d7:7e:
                    40:2e:cf:04:a5:9e:96:78:de:96:c5:b3:81:a7:53:
                    94:73:b6:8d:ce:2d:24:b8:12:3a:00:de:c7:90:fc:
                    8b:97:c7:67:c7:e7:41:ad:5f:fb:b6:a9:cd:53:41:
                    9e:6b:2f:37:6d:49:5d:4b:ba:32:e8:8d:f5:76:f6:
                    ed:02:0b:79:e4:51:9a:3b:4f:4f:31:67:49:34:9c:
                    6b:d8:69:06:fb:fb:e2:eb:bb:c7:a4:7b:28:66:20:
                    db:70:56:39:bb:5d:88:4c:55:fc:cb:14:88:25:fa:
                    db:6f:5f:4a:c2:4f:33:8d:2f:fd:bb:90:8a:46:1f:
                    be:f5:77:f2:ec:28:a4:56:87:12:50:66:f4:b3:f3:
                    b5:74:12:5d:7f:91:d0:58:ff:cd:7d:9b:1b:2e:e4:
                    1f:23:50:40:e1:87:fc:07:53:f1:b2:c9:74:e0:78:
                    0b:43:3d:53:f0:71:f1:48:85:dc:f4:a2:ee:0b:69:
                    e3:8e:36:cb:da:5e:c0:56:4b:6d:a8:48:99:c9:0b:
                    18:6e:3b:ec:d2:64:34:2f:b2:9d:a9:f4:be:93:ed:
                    44:fb:65:2c:5b:ee:da:2f:ea:ef:48:74:c0:5f:a5:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4D:E8:2B:25:DD:F0:29:58:EB:08:88:73:26:0C:42:E3:9A:B3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/f014894b-1ee7-3406-8883-0cb0e9a51082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.crl

            X509v3 Authority Key Identifier:
                keyid:3F:07:0D:ED:79:94:93:FA:20:59:FF:87:D7:E0:EE:69:AD:A4:FE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2dc:8a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:2b:bd:db:0f:b7:68:33:7e:27:c3:f1:c9:97:0f:4f:69:
         19:ed:89:40:ea:38:24:66:df:06:f7:bb:d9:11:07:5b:c5:e9:
         6a:27:ef:22:62:eb:31:ad:f5:5f:b0:f9:e6:43:f3:69:f6:96:
         4c:8f:52:04:71:af:27:25:e8:c3:bc:04:a2:89:2a:4d:3d:d7:
         2b:e0:79:6d:89:1f:82:d7:f5:0d:e1:6d:4f:db:16:e3:aa:8b:
         79:ba:98:83:e3:e8:da:e0:6e:2b:c6:42:5d:4f:03:7b:82:46:
         1b:28:99:71:37:d7:70:15:39:4a:d0:66:5a:de:ce:69:7b:97:
         79:e5:93:ae:0f:09:4f:aa:ba:d8:52:70:eb:ff:e8:7b:18:9c:
         8d:ab:6e:5a:0b:7e:60:4d:87:7d:87:f2:39:ca:8b:80:0e:ac:
         db:d6:43:c2:e4:2f:61:c4:d7:45:de:f5:9f:54:d1:f5:24:52:
         f1:57:f1:23:69:b3:b5:af:ab:ae:5e:5a:ee:9a:01:c1:e3:94:
         77:26:51:1a:cf:fb:98:a7:08:1a:c5:03:49:5c:f2:6a:8a:18:
         10:2a:e4:04:53:e2:59:0c:0d:5a:c8:7e:06:53:d9:10:ba:2c:
         b8:0a:3d:23:44:6a:c3:9b:77:8e:b3:73:85:13:09:51:1a:cd:
         20:37:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:42:35 2026 by rpki-client