Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/653ac14b-6f52-36b8-9423-535372503377.roa
File:                     653ac14b-6f52-36b8-9423-535372503377.roa (raw, json)
Hash identifier:          AYEA9Zs5P00ciBbGyt/ysWMQexnqc9kEoS7v1o1qUSA=
Subject key identifier:   30:F7:65:E7:85:92:86:A8:A7:71:EC:EA:B0:8A:72:DE:6A:02:55:87
Certificate issuer:       /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
Certificate serial:       010D0C9F4328584EC20C5C0084086FBEB52DE500
Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/653ac14b-6f52-36b8-9423-535372503377.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     32002
IP address blocks:        2602:f964:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:5c:00:84:08:6f:be:b5:2d:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=9a4f55a7-936e-424e-b147-42aef64573c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:5e:44:86:34:17:05:60:72:10:7c:96:04:
                    05:85:38:11:8a:15:46:86:9f:8f:d2:66:a9:04:d9:
                    4e:d0:3d:fc:f4:c4:56:c8:9c:7f:a6:2a:59:11:95:
                    5c:d6:f9:30:b6:85:23:c0:11:40:43:16:c2:02:94:
                    cf:45:8f:50:b8:e6:f4:63:6e:5b:6a:c4:c5:6c:6e:
                    45:b8:0c:22:50:db:dc:bb:14:ce:21:3a:12:ca:25:
                    cf:26:f8:8b:82:0e:3a:c4:12:56:1a:a4:09:c7:ca:
                    7d:82:d2:87:d0:ea:bc:8a:c5:54:75:46:87:72:95:
                    53:f2:ec:ef:7d:b7:d2:41:42:fa:65:de:06:78:99:
                    e2:95:86:2f:59:6a:27:28:f6:fd:3c:05:0d:70:27:
                    c5:93:d7:96:4e:a8:51:b0:de:64:d5:5f:7d:09:17:
                    81:5c:5c:a0:ab:c7:ac:0e:e3:b4:27:13:6e:e3:17:
                    b0:ff:b1:26:62:f7:96:1c:85:60:30:3f:67:c6:3a:
                    00:22:d6:93:d1:e8:c2:2c:84:c4:b4:2b:e2:0c:79:
                    1e:92:a8:74:d8:56:52:c4:fb:19:31:07:27:a6:83:
                    41:aa:fd:27:d3:9c:30:a6:f0:4f:3c:0c:47:8f:ca:
                    d8:47:ca:7f:1c:59:93:39:a4:f5:a5:a2:e6:e4:1f:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F7:65:E7:85:92:86:A8:A7:71:EC:EA:B0:8A:72:DE:6A:02:55:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/653ac14b-6f52-36b8-9423-535372503377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl

            X509v3 Authority Key Identifier:
                keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f964:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:f0:23:ee:79:7f:4b:91:59:3a:9c:de:12:13:ee:d9:bc:
         8c:fa:69:ce:6e:54:2d:cf:2a:9b:2f:ca:e0:51:74:f0:65:02:
         af:48:71:b0:ec:74:49:f5:78:8b:da:6b:50:10:41:c8:0e:37:
         9f:c2:91:76:a5:3a:ac:55:e3:be:3d:23:e0:15:a8:ff:70:03:
         6e:6f:80:2a:ed:e2:6c:3f:04:a8:eb:5c:74:8a:46:5a:ee:f2:
         91:19:b6:8e:28:64:33:87:5f:1e:c7:ae:0f:bb:5d:b2:c1:e9:
         dd:6e:a2:87:e9:e8:5b:a3:6e:c9:09:39:ed:54:be:fc:0d:ff:
         97:3c:4b:57:ea:00:12:3c:64:ec:83:a3:48:74:fe:c8:9e:11:
         46:53:c5:75:02:af:d2:0b:8e:8d:9b:7f:df:7e:cc:aa:db:79:
         2b:e5:56:c5:1b:6e:57:2d:c9:3e:9e:b2:85:57:24:8c:23:dc:
         c6:3a:7f:c6:99:52:05:6a:0a:5e:e6:48:00:8b:2e:70:d6:fa:
         ae:da:6e:8e:09:0b:4d:3d:5c:08:fb:c5:ad:50:23:97:fa:bb:
         54:50:12:63:0a:77:71:cd:59:b1:fd:9a:5c:5c:e9:4b:01:1d:
         81:01:89:fc:8e:1b:56:66:12:27:43:96:15:67:4f:47:c2:bc:
         2e:87:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:59:13 2026 by rpki-client