Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/9f200902-5aae-3a68-a97d-994b8717ca9d.roa
File:                     9f200902-5aae-3a68-a97d-994b8717ca9d.roa (raw, json)
Hash identifier:          7Ja+Ug1QEcT/4yetntVRynkVId0IrR7Rmvv7/F4RqxU=
Subject key identifier:   FF:1C:0B:E0:94:71:A6:72:92:BA:18:16:A4:26:D1:C7:60:CA:B0:A4
Certificate issuer:       /CN=421c0ace-1d1f-41d4-99d6-d72badfabf4a
Certificate serial:       010D0C9F4328584F0DA6055540AE0BC68ED17780
Authority key identifier: 45:54:32:38:26:41:F3:8D:F8:F8:70:51:87:DB:C9:2B:C4:95:66:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/9f200902-5aae-3a68-a97d-994b8717ca9d.roa
Signing time:             Thu 03 Sep 2026 14:55:28 +0000
ROA not before:           Thu 03 Sep 2026 14:55:28 +0000
ROA not after:            Wed 02 Dec 2026 15:55:28 +0000
asID:                     17267
IP address blocks:        2602:f2f6::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/421c0ace-1d1f-41d4-99d6-d72badfabf4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/421c0ace-1d1f-41d4-99d6-d72badfabf4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:a6:05:55:40:ae:0b:c6:8e:d1:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421c0ace-1d1f-41d4-99d6-d72badfabf4a
        Validity
            Not Before: Sep  3 14:55:28 2026 GMT
            Not After : Dec  2 15:55:28 2026 GMT
        Subject: CN=1efb675a-f545-4675-9cfe-99fe8bcc61d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:cc:b1:ad:a0:d0:91:25:ae:da:59:5e:05:
                    e9:7b:68:64:e0:be:3b:14:6e:83:ba:42:ae:77:71:
                    c5:ac:4d:db:9d:1c:d1:cf:21:ec:4b:59:56:12:ce:
                    6d:90:05:4b:79:ca:c2:48:da:a1:c2:31:03:25:70:
                    93:07:54:68:d1:6a:4a:2c:9c:b8:57:36:a1:a8:08:
                    75:53:6e:e2:50:a0:0b:05:e2:fa:e9:ff:47:87:12:
                    a5:40:89:28:e7:31:e2:21:dd:b4:10:da:8a:d9:55:
                    18:20:37:d1:e7:48:ef:aa:c8:66:96:9f:0a:ed:97:
                    2d:ef:63:b4:49:99:59:04:15:d6:00:b1:08:5e:5b:
                    a8:fe:b8:e8:82:cf:db:9d:d0:b6:11:cc:bd:d9:7b:
                    ca:6b:45:5d:96:73:b3:0c:a6:f7:f9:1e:e2:80:70:
                    32:8f:b9:69:01:f6:f8:47:16:96:72:05:82:e2:11:
                    7d:58:2b:76:39:8b:79:d8:49:1c:f9:75:e6:af:f8:
                    17:42:4b:b0:62:5b:d0:4e:06:ac:2c:65:03:3b:22:
                    28:37:18:ad:5d:b2:b2:03:10:a7:db:f1:97:8b:14:
                    a0:4d:6d:d3:91:d8:ca:e6:cf:cd:e7:d6:76:b9:3e:
                    b9:68:6f:64:fc:da:11:c6:f6:d0:6f:3e:79:05:41:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1C:0B:E0:94:71:A6:72:92:BA:18:16:A4:26:D1:C7:60:CA:B0:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/9f200902-5aae-3a68-a97d-994b8717ca9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/421c0ace-1d1f-41d4-99d6-d72badfabf4a.crl

            X509v3 Authority Key Identifier:
                keyid:45:54:32:38:26:41:F3:8D:F8:F8:70:51:87:DB:C9:2B:C4:95:66:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2f6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:9e:95:13:cf:8b:db:22:0f:7f:f3:65:7a:8f:db:3f:c5:2e:
         a2:e9:bf:5c:44:5e:95:8c:dd:fe:1e:4a:7b:0c:89:44:7c:9e:
         d3:2e:30:eb:1d:5f:1c:60:b7:9c:82:0f:f3:67:5a:81:d5:5b:
         3a:29:e8:91:4f:4e:52:85:ea:0f:3c:ff:69:25:31:cb:d1:ad:
         19:47:c0:94:24:24:ee:be:21:9d:88:6b:28:18:8e:07:3b:95:
         07:63:d4:a1:20:ca:a9:37:18:7e:46:04:f3:6c:42:48:03:c9:
         84:36:40:90:ad:b5:68:d9:e6:df:98:a0:ee:f2:fb:85:c7:32:
         e1:6a:26:2c:ae:ab:6b:b8:fe:a6:92:06:f8:db:2c:e8:44:ec:
         eb:63:d8:82:bf:ff:40:08:22:fe:27:57:4d:fc:4f:ef:02:52:
         5f:45:60:d9:ee:ca:91:0e:42:a3:8f:67:09:58:36:15:47:22:
         12:f3:8d:78:94:8a:55:06:33:18:f7:a0:03:8a:c5:34:ec:ae:
         9d:d4:ee:61:c0:f6:99:17:17:18:e6:46:b0:83:2f:86:4b:d9:
         18:45:9a:9b:d3:34:c2:c6:f2:98:90:94:71:b6:c2:05:a8:e7:
         30:ef:d9:2a:5e:f3:f6:e5:b2:d7:e1:a3:e9:47:f8:5c:da:74:
         a7:71:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:11 2026 by rpki-client