Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/e0f1b718-aa3d-36c7-8024-83ec29cdd052.roa
File:                     e0f1b718-aa3d-36c7-8024-83ec29cdd052.roa (raw, json)
Hash identifier:          V7zfk1xN1novW4GupVRVDwqW4FoGgBtsjtlcKp/7n+s=
Subject key identifier:   3E:58:76:C6:67:93:E1:62:48:00:78:2D:F7:32:DA:4E:A3:0A:99:44
Certificate issuer:       /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Certificate serial:       010D0C9F4328584FA16337363B6DF11437C2CB80
Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/e0f1b718-aa3d-36c7-8024-83ec29cdd052.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     139648
IP address blocks:        2602:f88f::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:37:36:3b:6d:f1:14:37:c2:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=0ae5fd26-5b94-4972-9d2f-bdfea0a13dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6a:fa:b1:b9:90:5a:4f:e1:f5:a7:28:69:40:
                    d0:20:3f:ae:b5:71:d2:da:39:7e:79:52:cc:c3:b7:
                    00:db:05:3d:18:54:e2:a7:1a:f8:06:6b:93:47:8f:
                    2f:37:cd:e7:38:f1:46:75:dc:7b:09:1e:34:0c:b7:
                    b3:cf:93:7e:85:53:57:a0:56:e2:4c:4f:39:7d:bc:
                    77:72:45:88:06:0f:31:78:86:e0:0f:6b:ce:6d:f1:
                    e8:f2:3e:6b:d1:fb:6f:34:c7:00:11:90:c2:8e:5e:
                    09:23:80:44:11:f7:d4:11:bb:95:6b:47:b4:65:09:
                    53:80:a7:41:d9:a6:39:38:6b:91:34:66:47:a7:2d:
                    af:f7:d4:4c:71:db:1d:5a:7f:4b:76:63:3a:b3:fa:
                    8b:23:61:1b:9e:08:48:67:86:a3:48:96:fb:3d:45:
                    9f:b7:9e:d0:0b:72:68:cc:74:3a:a1:1a:4c:16:8f:
                    55:7e:03:52:ac:92:f4:81:14:90:1b:cb:84:51:6f:
                    8d:e9:e5:38:c3:59:bf:5f:aa:07:7b:1f:07:ce:08:
                    22:c6:32:98:e5:d3:98:44:3c:d7:f5:fe:e0:b7:7f:
                    8b:6b:0c:46:ed:aa:c3:6f:9b:72:61:64:d4:d7:51:
                    21:9b:cf:81:46:be:ca:bf:03:5a:2a:20:df:d6:b4:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:58:76:C6:67:93:E1:62:48:00:78:2D:F7:32:DA:4E:A3:0A:99:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/e0f1b718-aa3d-36c7-8024-83ec29cdd052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f88f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:23:68:08:1f:1c:f6:74:04:9f:00:c5:93:67:48:ab:5c:7d:
         0f:c3:bf:c5:3f:81:dd:e8:af:82:d5:ea:4d:f6:1c:c0:93:dc:
         a3:1c:07:67:35:5f:03:cb:dd:7b:66:3b:83:9e:1e:b5:bb:f4:
         4d:89:4b:e1:07:23:44:01:64:40:9c:e1:05:64:28:05:c5:13:
         42:f7:4c:fd:e4:7b:17:24:12:cd:bc:28:df:77:e9:54:05:3c:
         76:96:fe:dc:a7:b4:b5:bd:dd:bb:3d:62:2f:31:40:34:6b:ad:
         2f:af:ac:4a:77:9d:41:70:c1:cf:4e:35:fc:9f:03:b9:ec:47:
         57:4c:7d:6b:9d:3a:84:7e:ef:83:35:05:87:0c:bb:cc:08:b9:
         60:32:a8:a8:94:30:22:7c:15:3d:83:c4:05:47:d7:e5:c5:b1:
         2e:1a:0c:5f:c9:0b:f6:69:a1:8f:b1:34:e7:95:c6:8e:3c:a3:
         56:5b:bf:ee:76:14:02:92:19:25:9a:aa:57:be:44:99:ff:0f:
         35:78:3d:67:ed:85:ee:84:0b:4d:88:c2:e2:d5:b9:d7:17:84:
         ed:8d:eb:f2:52:21:d3:8d:cc:43:eb:8c:2d:60:9c:9b:8d:67:
         7a:a2:6f:34:b7:b9:17:83:2a:1f:36:22:84:e6:6d:a3:37:b2:
         22:1f:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:43:04 2026 by rpki-client