Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/98d5020c-6b0c-32fa-a07c-c7b6eb3753e3.roa
File:                     98d5020c-6b0c-32fa-a07c-c7b6eb3753e3.roa (raw, json)
Hash identifier:          Tz1XaftQM6xiT5k4AZgWmBBCzq+kzxNIHuKRhuHhi80=
Subject key identifier:   99:D1:EF:73:EF:6A:05:78:AD:DE:15:0F:4C:23:15:B4:B9:9D:D4:EF
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584EEA878B6109A4BDD394C1FE00
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/98d5020c-6b0c-32fa-a07c-c7b6eb3753e3.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     399870
IP address blocks:        2602:f7a5:10a::/48 maxlen: 48
                          2602:f7a5:20a::/48 maxlen: 48
                          2602:f7a5:30a::/48 maxlen: 48
                          2602:f7a5:40a::/48 maxlen: 48
                          2602:f7a5:50a::/48 maxlen: 48
                          2602:f7a5:60a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:8b:61:09:a4:bd:d3:94:c1:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=0a172b8c-5147-4c64-a867-c9b1c1c7ae3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:96:88:6f:e9:7f:9a:76:50:1a:df:d9:a4:
                    ea:6c:30:a3:f3:31:18:6c:62:a4:15:05:1a:c7:19:
                    b5:7d:2f:6b:b7:60:2d:3d:20:06:db:c5:d5:9a:3b:
                    d8:07:b0:bd:8f:f7:63:92:87:05:5e:44:33:db:69:
                    40:ad:62:53:db:0c:b4:8c:a3:51:8f:af:4c:f8:d3:
                    fe:2c:52:13:99:bd:84:65:2f:51:5a:8c:c7:c5:02:
                    0b:81:77:bf:91:7f:3f:c3:dd:c3:e8:f2:14:4e:f8:
                    d9:dc:84:34:10:fc:19:c2:45:0c:28:ab:52:d2:07:
                    2c:b2:a1:fb:2d:ad:48:35:d7:b6:f8:96:ba:4c:43:
                    3f:fc:89:2f:52:5f:a8:db:4b:7f:f8:be:b4:1b:48:
                    58:f4:27:fb:31:2d:59:e1:82:c0:88:15:78:98:93:
                    5c:eb:aa:d6:b7:60:1a:b2:41:63:2d:ab:1a:27:99:
                    f5:3d:88:93:20:77:e5:da:e2:71:31:e2:a0:6f:71:
                    40:1c:c0:48:4b:6b:77:96:16:46:c4:68:1c:b3:e2:
                    c2:98:31:bc:69:41:5e:3d:55:77:86:e9:89:c6:dd:
                    ad:68:e5:c7:10:a0:15:c6:0e:5d:f1:69:ef:45:d5:
                    c1:12:9c:11:81:d4:66:08:7f:db:95:62:96:d8:03:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D1:EF:73:EF:6A:05:78:AD:DE:15:0F:4C:23:15:B4:B9:9D:D4:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/98d5020c-6b0c-32fa-a07c-c7b6eb3753e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a5:10a::/48
                  2602:f7a5:20a::/48
                  2602:f7a5:30a::/48
                  2602:f7a5:40a::/48
                  2602:f7a5:50a::/48
                  2602:f7a5:60a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:3f:2c:a2:ef:c4:7b:be:12:06:9c:c8:66:05:d9:d4:e4:bf:
         60:a2:93:91:98:a2:c6:a8:92:ba:b1:47:5e:1d:66:b2:a3:13:
         88:90:0b:05:1c:b1:2c:1b:f8:79:4f:3a:de:f2:96:41:42:04:
         fc:f4:0c:1e:68:69:4d:b6:5d:71:0b:b1:55:55:8f:33:08:33:
         07:71:46:1c:74:dc:75:b5:97:67:8b:d7:ff:5f:85:6b:1c:d5:
         50:cc:6e:a5:ba:bb:a0:da:c0:f7:50:ec:7d:e8:a8:8a:1b:4e:
         97:a4:09:b6:ea:51:04:e4:34:b1:bd:91:df:a7:e2:54:a3:2e:
         65:f8:05:b9:57:fb:44:3d:50:e9:85:18:2b:e4:fd:dc:58:bc:
         ae:46:de:41:38:7d:19:a8:35:ca:24:8f:96:8d:c3:65:0d:3a:
         f5:e8:6c:fc:ad:50:38:c1:6c:24:ca:ea:d6:fd:b1:2b:f7:0a:
         b9:6c:0a:20:51:ac:22:21:cb:c9:a5:62:7d:b5:ce:1a:45:ca:
         d0:95:f2:3e:32:30:72:37:dd:73:71:58:99:f9:f6:01:43:e1:
         2f:f9:17:c8:23:cf:bf:cc:5c:6b:41:53:fa:5e:10:fe:a9:18:
         15:32:b8:95:06:d2:bf:db:97:91:cb:da:9f:75:b5:1c:12:46:
         35:ff:23:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:37 2026 by rpki-client