Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa
File:                     7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa (raw, json)
Hash identifier:          59UrB9mXVa2esRL0m7HG6MC9UmZdlPq6RZrmPOtoMSQ=
Subject key identifier:   BE:30:9E:15:03:AF:B7:7A:0C:32:CF:AE:CE:9A:43:6A:E4:AF:2A:7D
Certificate issuer:       /CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
Certificate serial:       010D0C9F4328584F4F0815415FCE09C22D2A7D40
Authority key identifier: 0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     14217
IP address blocks:        2602:f96f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:15:41:5f:ce:09:c2:2d:2a:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=71a63551-2e3b-4e42-96c1-fc167bc85a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:91:e7:7d:02:04:31:87:5e:54:2e:5c:02:
                    d7:a1:2f:f5:28:22:75:56:b9:d5:bf:13:96:1c:e2:
                    35:a2:cf:13:90:8e:50:76:1d:c3:be:93:db:d8:68:
                    34:42:3f:cb:01:94:8f:c0:66:99:13:a2:4a:77:6a:
                    0d:d4:9d:70:50:16:90:ef:50:39:b6:e2:69:bf:b4:
                    27:a0:be:d2:e3:29:31:1e:2a:23:85:d3:30:df:7b:
                    4a:f7:d2:ab:ad:1c:7d:cd:89:ae:fd:91:77:67:f7:
                    38:03:b8:94:2a:08:49:0d:7a:05:59:1b:e9:a0:a2:
                    5e:df:6b:cf:61:93:3e:e2:2e:08:32:3e:44:ff:62:
                    0a:a5:f9:df:82:3d:63:2e:da:99:ce:4b:81:7c:4f:
                    c5:f3:6b:ee:25:ec:96:1a:57:b5:83:b8:b9:b2:2d:
                    c1:8f:ad:10:81:ce:49:20:24:f6:86:5a:c0:25:42:
                    14:16:9b:49:e7:46:a3:38:7b:0f:56:c5:9a:8f:ec:
                    86:b4:70:73:75:2b:73:8e:06:56:8d:f2:e9:4e:1b:
                    72:88:6a:b5:29:33:c8:24:95:e3:15:eb:79:ab:dd:
                    ef:52:05:bd:8b:0c:6e:35:9f:30:45:4d:a5:a6:b2:
                    e2:3c:24:02:24:de:d5:35:56:60:33:c1:62:94:80:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:30:9E:15:03:AF:B7:7A:0C:32:CF:AE:CE:9A:43:6A:E4:AF:2A:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:23:13:4f:e7:83:7d:46:ac:da:ee:d9:0d:f0:22:60:2b:
         17:3c:17:a7:83:ed:94:44:13:14:1e:fe:58:14:c9:37:d1:1f:
         fa:a6:be:f3:68:02:15:cc:ed:77:98:6d:b9:25:c7:62:44:46:
         55:58:98:8d:36:4d:a8:a6:8a:53:5d:c8:da:15:88:d7:0e:3e:
         e0:52:0a:0d:87:3f:14:e4:a4:c8:37:db:4a:c0:af:67:c4:54:
         66:dc:e1:63:71:6a:53:64:2f:3e:8c:2f:1e:bc:82:4d:0f:4e:
         09:ad:84:f2:d0:ca:99:49:a5:c3:d3:a2:83:2d:f5:f8:ef:c9:
         36:37:87:fd:03:a3:43:97:3c:ea:7f:ab:d9:27:cc:86:09:eb:
         90:28:08:b7:e1:b4:36:20:f1:7b:e9:90:9a:1c:67:d2:bd:be:
         5e:66:0f:4a:30:13:a6:4c:f9:55:0f:aa:a4:08:85:f4:57:ab:
         48:10:9f:41:3f:d2:ec:dd:ec:44:9f:fd:72:01:fb:95:e8:fc:
         88:af:f4:d9:74:94:c6:af:15:c0:9e:75:15:57:a3:44:06:3c:
         b5:ca:d7:2d:36:15:65:3a:d2:fb:24:48:00:ce:7a:47:50:ac:
         13:48:a4:94:45:b9:ab:2f:46:95:b0:28:b1:9e:92:7e:ae:dd:
         a6:3d:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:59:05 2026 by rpki-client