Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/fd266175-5976-3459-adad-b8fc2230baf3.roa
File:                     fd266175-5976-3459-adad-b8fc2230baf3.roa (raw, json)
Hash identifier:          PrcnPuYxewt95VNa4HtK3q3GGNqfJNSrIlJSsFj+4c4=
Subject key identifier:   ED:01:C4:8D:B7:F8:FC:21:89:6C:D5:CF:DD:45:CD:8E:9C:91:47:1B
Certificate issuer:       /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
Certificate serial:       010D0C9F4328584EA79765F297BD673D35A15A80
Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/fd266175-5976-3459-adad-b8fc2230baf3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401113
IP address blocks:        2602:f964:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:65:f2:97:bd:67:3d:35:a1:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5aa7bd87-12c7-4753-9421-1e1eeb76aece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:62:3f:79:99:40:9b:96:07:a0:56:4f:66:
                    43:d1:a8:32:b3:da:b4:d0:f5:6a:a3:29:2a:d4:12:
                    64:40:ac:02:25:e6:78:12:36:f4:28:98:4b:30:9f:
                    84:5f:a0:6d:b3:86:68:67:36:e8:ea:91:3d:ee:ac:
                    0f:cf:b6:89:17:da:ec:3e:c2:f1:fb:10:6b:92:1b:
                    00:1b:05:a8:f7:44:ce:26:38:b2:0d:23:8f:d1:c6:
                    0f:65:67:af:14:ea:a2:d8:2a:5c:fa:95:4e:bb:1d:
                    21:0f:68:dc:4e:cd:dc:08:ca:ef:cf:41:ef:39:6c:
                    89:f1:52:02:82:7e:78:95:d9:99:51:82:8c:ca:51:
                    68:a4:fe:26:75:c5:a2:d7:c7:a7:be:16:09:2b:b7:
                    f8:17:ec:8c:77:01:1e:c7:29:0a:e4:95:08:a6:87:
                    c3:f1:6c:71:8c:81:84:75:56:01:64:f7:61:20:9d:
                    c3:88:06:f6:14:bd:0d:a8:09:30:0a:eb:e7:85:01:
                    48:6e:bf:d8:07:a1:19:2e:ff:a1:89:69:21:44:24:
                    85:b3:95:19:7e:d1:56:7c:1c:56:5a:84:b9:b0:9c:
                    3c:47:87:91:97:c5:26:05:5c:2f:92:05:1c:42:c4:
                    0a:6e:56:95:22:81:76:09:19:b1:3b:ad:12:09:89:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:01:C4:8D:B7:F8:FC:21:89:6C:D5:CF:DD:45:CD:8E:9C:91:47:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/fd266175-5976-3459-adad-b8fc2230baf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl

            X509v3 Authority Key Identifier:
                keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f964:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:fc:51:d3:ee:6d:59:93:3d:b0:ae:da:f9:4e:b5:df:de:
         e3:3f:76:14:67:4c:42:b6:e1:ea:c8:47:d2:79:e4:11:e2:a8:
         4f:e4:89:36:80:4c:f0:93:a2:1d:98:ad:bb:7c:08:fa:b1:a4:
         ce:60:00:1c:51:34:bf:34:55:21:32:e0:ed:0c:f3:12:fb:c7:
         dc:80:2b:c9:d5:25:ca:28:8e:c3:6e:22:bf:50:d5:76:37:ab:
         63:cb:79:9c:04:39:e6:14:2d:ea:f1:9d:05:bc:1c:7f:a0:b4:
         8c:80:82:4d:a2:75:5a:9f:a7:d6:cc:19:f2:2a:37:09:a9:bb:
         77:17:b5:62:6a:96:7b:35:2a:e9:9d:7d:05:63:75:d0:52:47:
         fb:48:e7:2e:b2:f5:46:4f:92:fa:2c:dd:65:f7:af:50:ac:99:
         05:ba:6a:1e:56:a9:e8:de:16:99:f3:26:13:f0:87:a8:dd:87:
         b2:9a:bf:dc:8e:b9:bc:63:f3:df:54:aa:5b:31:cb:db:25:63:
         82:79:dc:8b:fd:7f:07:7d:d4:bc:c9:96:37:9a:40:1c:a8:b8:
         b1:3d:85:46:fd:e2:0a:fb:b4:f6:be:bf:b7:98:72:61:0d:5a:
         7f:40:79:1b:f8:e1:26:3f:b8:96:97:79:b5:dd:69:1d:74:5d:
         5c:56:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:59:29 2026 by rpki-client