Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/f0b15209-c30c-3fad-9d6c-ea71756081e2.roa
File:                     f0b15209-c30c-3fad-9d6c-ea71756081e2.roa (raw, json)
Hash identifier:          JJbPHlQfpS9rXs8G89hBPEbAi0HAUF9gl1w1jUT/FxU=
Subject key identifier:   96:4D:F3:DC:A7:57:4F:02:3A:BE:A2:42:5F:02:88:D2:F8:25:82:E2
Certificate issuer:       /CN=584e7168-9707-48dd-beaf-b7bb4b5e84b8
Certificate serial:       010D0C9F4328584EDB2C979957FABE2036B92200
Authority key identifier: D8:CD:F1:6A:04:F5:E0:44:42:13:25:ED:B1:D6:EB:55:84:E3:18:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/f0b15209-c30c-3fad-9d6c-ea71756081e2.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     398031
IP address blocks:        2602:fc29::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:97:99:57:fa:be:20:36:b9:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=584e7168-9707-48dd-beaf-b7bb4b5e84b8
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=9e40ff15-0b92-4861-8269-b0b68c1e5064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:63:f6:0a:97:3a:23:fa:c1:02:dc:90:6f:
                    71:69:0f:0f:c1:4b:ad:f3:40:46:8e:d8:63:71:5b:
                    52:f4:13:4a:e3:39:93:df:0e:3b:1a:8d:64:d6:9c:
                    2d:d5:6b:6a:b1:a0:9b:69:61:67:7a:e6:c1:42:11:
                    2a:33:a4:12:b1:28:d3:ac:25:30:5c:46:e8:ba:ab:
                    90:04:19:65:de:7b:54:47:98:09:99:96:64:bd:95:
                    c3:53:31:c8:b3:84:44:63:49:12:cf:78:ce:4a:89:
                    09:08:f1:61:24:e4:83:b3:7e:ef:78:a0:5f:70:3e:
                    d5:99:f2:27:80:d7:b8:06:58:0a:a6:ac:58:a3:b6:
                    de:69:9b:81:7a:02:3d:6b:7c:fa:77:69:9f:32:60:
                    90:aa:f2:af:77:50:ee:fc:e0:a7:28:78:c1:0d:e0:
                    e1:17:57:9e:2f:da:f3:1c:74:6e:ce:db:2d:a7:b1:
                    04:26:af:8f:93:01:52:b7:b7:5e:84:1e:96:5d:d5:
                    f0:bb:4e:d6:5e:f8:5a:cb:9c:96:07:82:04:ef:fd:
                    09:61:ed:21:ac:16:12:8d:e5:dd:5e:f3:b3:15:41:
                    6c:8d:36:68:3d:d2:85:df:40:b0:6b:0e:d8:0b:91:
                    db:80:a6:f3:97:f9:df:84:64:7a:d3:b9:98:bb:5e:
                    2a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4D:F3:DC:A7:57:4F:02:3A:BE:A2:42:5F:02:88:D2:F8:25:82:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/f0b15209-c30c-3fad-9d6c-ea71756081e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.crl

            X509v3 Authority Key Identifier:
                keyid:D8:CD:F1:6A:04:F5:E0:44:42:13:25:ED:B1:D6:EB:55:84:E3:18:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc29::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:75:1a:1e:cd:9e:88:29:b7:1d:81:33:32:02:fe:11:12:23:
         77:4d:19:b1:87:ae:28:90:e3:8e:d5:b0:4a:1a:9e:d5:9f:7b:
         61:fe:10:67:ba:2e:fa:d4:3c:d5:db:d3:2f:f4:48:4b:c4:41:
         30:bd:0e:e0:4b:69:db:8c:b6:46:fa:16:70:ee:41:b8:80:58:
         f9:0b:77:b3:d1:14:42:1e:bb:ba:2f:95:c8:52:ad:3a:27:68:
         19:4c:87:4b:22:8e:3b:95:3b:a5:ac:cc:aa:c5:fb:ce:58:20:
         94:de:ed:d4:f7:4d:34:35:1b:db:4c:c0:94:b7:42:be:26:24:
         05:c9:02:35:f6:d8:cf:74:5f:0e:4a:58:58:67:b5:d7:eb:44:
         52:ce:c3:02:a1:40:36:6a:60:40:b7:87:33:16:94:72:4d:84:
         16:81:54:cd:5d:4e:19:98:2d:39:79:48:22:3b:5c:d6:04:89:
         24:97:e9:fe:fd:bb:64:69:0e:62:6c:08:19:bf:d4:6d:b1:cf:
         6a:e6:6c:69:0b:f8:ca:4b:a7:0b:1b:4b:67:3e:a9:f7:be:0c:
         68:ab:a3:b9:5d:12:33:54:71:69:d6:91:77:f7:0e:7e:e1:d2:
         3b:2d:78:55:13:ed:ef:a6:81:84:72:b5:47:e5:bd:48:32:9f:
         1f:76:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:28:12 2026 by rpki-client