Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/9d7d4507-24e4-3e95-b34d-6308ad381e2e.roa
File:                     9d7d4507-24e4-3e95-b34d-6308ad381e2e.roa (raw, json)
Hash identifier:          8ZEX386b/Jg4fRZJsdWpAB7ABakUseQFgSpBIvRri5c=
Subject key identifier:   F6:A4:B3:94:25:7D:28:93:48:C8:03:C1:C6:A2:DC:CE:C8:CA:58:80
Certificate issuer:       /CN=45c9903a-58e9-4d12-b429-df86258726e0
Certificate serial:       010D0C9F4328584E354844FA8AC0AD698D114FE0
Authority key identifier: 84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/9d7d4507-24e4-3e95-b34d-6308ad381e2e.roa
Signing time:             Thu 18 Jun 2026 02:51:58 +0000
ROA not before:           Thu 18 Jun 2026 02:51:58 +0000
ROA not after:            Wed 16 Sep 2026 02:51:58 +0000
asID:                     16509
IP address blocks:        2602:f387::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:48:44:fa:8a:c0:ad:69:8d:11:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c9903a-58e9-4d12-b429-df86258726e0
        Validity
            Not Before: Jun 18 02:51:58 2026 GMT
            Not After : Sep 16 02:51:58 2026 GMT
        Subject: CN=0c322759-a20a-47ad-9f92-779872891f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:95:58:c0:05:35:8b:ef:5c:e0:3e:cf:76:
                    14:db:54:e7:be:dc:f0:97:e7:c9:4a:dc:bd:c0:22:
                    0d:43:2e:03:7c:11:75:df:8a:d0:ca:59:ee:49:fa:
                    98:9f:92:2b:13:42:42:6f:87:df:0b:ec:db:b6:8a:
                    2d:02:bf:9d:72:a0:fc:1d:16:37:9c:93:00:57:8a:
                    7f:91:85:60:f7:a3:ed:47:fe:21:cd:03:0a:82:fd:
                    0f:ad:2d:cd:bd:ef:8c:d9:1f:df:52:5f:cd:ac:2b:
                    46:65:b4:fe:58:81:77:ea:fd:7a:f1:e3:07:ca:b3:
                    5b:5f:c4:19:a8:47:de:bb:93:f6:33:6c:d1:3b:9b:
                    ea:75:12:22:4b:e1:ef:87:e2:26:31:f4:3a:3a:8f:
                    ac:29:50:ee:60:71:47:c4:50:59:dd:38:c9:b4:21:
                    fe:06:1f:1b:5d:36:e7:7b:18:e8:78:e4:67:ce:80:
                    35:c3:27:2d:a0:e0:63:83:7b:c7:fb:80:4a:6f:bc:
                    2d:23:49:5d:f6:19:91:a2:63:74:5f:ed:40:e3:7b:
                    83:5f:3c:69:53:93:47:89:21:a4:48:8a:df:78:10:
                    83:2d:90:21:cc:46:ad:25:b9:84:b4:76:53:78:51:
                    39:40:83:7a:e2:ca:88:1b:7f:04:bc:a2:ae:be:84:
                    d6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A4:B3:94:25:7D:28:93:48:C8:03:C1:C6:A2:DC:CE:C8:CA:58:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/9d7d4507-24e4-3e95-b34d-6308ad381e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl

            X509v3 Authority Key Identifier:
                keyid:84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f387::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ab:8f:04:f3:1d:d4:d8:19:e3:8c:c1:5f:9c:9a:9c:cb:b0:
         ef:d1:79:9e:b6:8f:7c:44:1e:3c:d4:95:9c:ff:ff:ea:0b:75:
         d4:74:65:dd:34:2a:27:8d:fe:b2:79:52:c0:48:91:14:ec:98:
         d5:0a:01:18:f7:0b:00:ba:7d:8e:7b:82:11:27:53:b3:37:9a:
         0d:e0:89:04:d7:65:98:73:95:b1:12:8c:cf:42:2b:f3:ed:5a:
         6c:bb:5e:3e:e6:bd:ea:36:45:c3:0f:0b:2f:eb:e9:8a:68:31:
         5d:b1:c5:8e:eb:0c:92:f7:d2:2b:cf:8c:15:81:6c:a3:24:47:
         53:8b:f4:96:19:ea:7d:0d:87:2f:c7:fb:de:41:33:9a:51:99:
         d0:1b:9d:ca:ec:d0:1f:2c:9a:18:d9:9e:fc:05:69:49:a4:b5:
         38:e4:db:46:ec:13:33:43:90:2e:3f:b4:ec:7d:b1:11:dc:e4:
         cc:1f:45:61:0c:42:d0:27:52:62:0c:86:3b:ba:29:e4:01:b0:
         c3:4a:3b:40:55:55:c9:a8:86:71:55:16:3d:09:9c:1c:47:db:
         1c:91:4d:03:da:2d:68:72:17:97:e4:e8:07:ac:4c:be:54:63:
         24:b4:b5:6b:cb:43:3b:d0:1a:cc:00:9f:54:3b:81:22:ab:13:
         2a:be:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:03:15 2026 by rpki-client