Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/38da7b0c-74ee-34c8-b5a8-2eb186cb6d59.roa
File:                     38da7b0c-74ee-34c8-b5a8-2eb186cb6d59.roa (raw, json)
Hash identifier:          Dv9VnMqqPmE06MD8qTRq52JC0xbMwqwgQChfFDBZYRE=
Subject key identifier:   2F:D9:B8:D1:DA:53:18:A0:2D:14:BB:A9:47:CD:0C:B5:E6:76:EC:93
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584F51D2C2F7D19C4DAB1F39FC00
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/38da7b0c-74ee-34c8-b5a8-2eb186cb6d59.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     400919
IP address blocks:        2602:817:2004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:c2:f7:d1:9c:4d:ab:1f:39:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=7ecb67b9-f2e5-441a-aba7-3ac0973a3230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:71:44:b0:db:d2:46:3e:76:9f:72:ef:77:
                    22:08:1f:77:db:77:e0:50:10:37:10:ee:60:33:b7:
                    d9:74:d7:e8:df:81:06:55:2c:1d:3d:ad:7a:6a:b3:
                    5e:47:40:99:c3:19:a1:5f:d0:6b:dc:7b:d6:60:62:
                    69:8f:b5:be:d9:4f:75:5a:2e:91:02:5e:51:0d:4c:
                    33:ba:08:5e:6e:43:23:5e:29:be:8b:f2:d2:70:9f:
                    99:20:a9:58:a2:f5:6f:61:2a:b6:c5:e6:7c:da:4e:
                    64:a1:e3:19:94:c0:bd:62:8c:36:8d:02:b9:46:14:
                    af:67:b4:eb:11:a8:59:4f:47:bb:e7:18:b8:5e:24:
                    a5:2c:4b:23:0f:8f:2d:b4:e7:f1:b6:23:74:29:8c:
                    1c:43:b9:e4:53:e3:dc:4e:77:19:3f:42:40:b4:8b:
                    ca:5a:77:24:3a:06:6d:5c:a9:8e:4f:ac:7b:66:f4:
                    67:2a:bf:3d:54:13:95:ff:01:99:46:72:e8:4b:65:
                    ac:7f:f2:03:72:b3:bd:01:17:d7:9c:5a:d3:4e:77:
                    8a:b1:6a:95:c4:d0:61:52:6d:bf:82:ac:9d:3a:11:
                    48:99:d9:dd:4c:cc:13:f5:6e:72:27:ed:52:ea:48:
                    b4:41:25:fa:3f:86:82:51:f6:23:07:67:4e:9e:d8:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D9:B8:D1:DA:53:18:A0:2D:14:BB:A9:47:CD:0C:B5:E6:76:EC:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/38da7b0c-74ee-34c8-b5a8-2eb186cb6d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f3:14:4f:43:8d:b0:f5:37:9d:c8:e8:28:62:c7:fb:94:14:
         89:f6:5e:9f:87:d8:06:03:31:dd:ed:d4:7a:37:76:ca:b3:30:
         22:22:b0:df:22:60:40:b9:2d:cc:05:87:99:c5:d8:ef:9a:91:
         4d:89:9f:e7:1d:65:12:9e:5a:c2:fd:d1:67:0b:ea:e6:19:52:
         45:dd:6a:49:e6:aa:d4:4c:32:6f:49:63:32:c5:4f:12:54:39:
         77:25:3c:c5:d0:16:9d:50:66:49:fc:bd:7e:5e:69:95:d1:9e:
         dd:37:6a:d9:a2:4c:5e:52:17:af:e9:3b:76:b3:6d:08:b1:82:
         9d:f0:16:5f:b1:d2:04:86:9d:59:21:44:49:b7:df:5a:e6:99:
         61:e5:fd:42:aa:eb:4a:16:9a:bf:28:98:1e:f0:eb:66:2a:70:
         74:9a:a1:ef:02:ca:e3:57:f8:64:38:7b:14:36:ea:82:5c:ce:
         bd:b3:e2:2e:a9:9d:9b:0d:9d:e6:a5:ac:a9:85:c1:84:e8:5c:
         d4:4f:fb:23:f5:dd:31:fd:a2:37:e7:77:9c:25:0d:cc:56:c8:
         d3:bb:d7:99:f7:7e:29:fa:1a:1d:86:ce:5e:b9:18:46:3c:e7:
         9a:40:16:45:2f:fd:ba:b3:a0:fe:e2:bc:73:b5:20:c8:1c:ea:
         9f:a4:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:28:16 2026 by rpki-client