Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/f57882f8-b089-3205-9f20-b520c9b8e3a9.roa
File:                     f57882f8-b089-3205-9f20-b520c9b8e3a9.roa (raw, json)
Hash identifier:          l04ZzRVLbdaLVPyL8WccxbMZkq4adDy9rjsGSJhzseY=
Subject key identifier:   B7:05:18:FB:E0:ED:CB:95:22:08:EF:3A:3D:BF:A4:10:2A:7F:43:B7
Certificate issuer:       /CN=70ecbbd8-f88e-4306-9c9f-72852fe7f658
Certificate serial:       010D0C9F4328584F3B7D273ECE30E87A6A1C3B7C
Authority key identifier: 18:8A:2E:D4:DE:05:C5:C4:47:14:BF:5C:AC:9E:D3:43:E5:15:21:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/f57882f8-b089-3205-9f20-b520c9b8e3a9.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     402573
IP address blocks:        2602:f388::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/70ecbbd8-f88e-4306-9c9f-72852fe7f658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/70ecbbd8-f88e-4306-9c9f-72852fe7f658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:27:3e:ce:30:e8:7a:6a:1c:3b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ecbbd8-f88e-4306-9c9f-72852fe7f658
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=c44b456b-b285-4fbd-9373-dba20f85ad4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:e1:2f:81:a0:a2:65:bb:17:17:9a:a5:79:
                    86:8a:d0:d5:02:73:7f:ee:02:57:67:7d:65:e7:0d:
                    7a:92:20:f2:ef:3e:b8:79:77:ae:33:bf:0b:f2:2e:
                    79:1c:9c:3b:8b:08:14:25:b5:aa:92:6a:f5:46:fb:
                    50:cc:c5:b5:4e:03:a1:e6:26:0a:10:f4:72:e4:17:
                    aa:a6:01:f6:dd:2a:d3:ab:e6:87:ce:cf:cb:5c:94:
                    36:29:e0:07:dc:62:7a:15:1b:9a:49:b7:c3:fe:8f:
                    19:9c:7f:0b:a0:73:90:2f:5b:be:6c:79:50:d4:50:
                    fc:4e:4e:6e:c8:59:2c:a6:ee:f1:15:97:f6:c0:e9:
                    e0:f5:25:1a:dc:a8:37:7b:ab:da:33:df:3b:c8:7c:
                    38:74:6b:b5:3b:97:c7:06:06:ef:97:eb:3b:90:2d:
                    5c:e6:fa:62:ff:cd:85:18:51:9e:f7:1e:04:f8:41:
                    6a:24:ec:3c:0c:3b:ec:59:f3:83:7d:7d:27:6c:6f:
                    cf:89:72:7e:6f:5c:c8:9c:bb:75:79:f2:d3:2b:c5:
                    64:f3:55:7e:cc:3d:c6:ac:7f:a2:a4:a1:5f:67:c2:
                    1d:d3:b0:4d:bf:8a:31:c9:11:32:d9:8b:4f:09:d0:
                    95:50:7a:5b:9b:b7:56:74:f1:43:04:8e:ec:04:36:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:18:FB:E0:ED:CB:95:22:08:EF:3A:3D:BF:A4:10:2A:7F:43:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/f57882f8-b089-3205-9f20-b520c9b8e3a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/70ecbbd8-f88e-4306-9c9f-72852fe7f658.crl

            X509v3 Authority Key Identifier:
                keyid:18:8A:2E:D4:DE:05:C5:C4:47:14:BF:5C:AC:9E:D3:43:E5:15:21:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f388::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:5e:8d:89:97:ea:d5:b3:90:88:ec:cf:ff:26:25:e7:e3:06:
         95:aa:15:ca:b2:b1:29:d6:3e:ce:25:6c:b0:56:b8:9d:48:ca:
         90:e6:ab:86:d4:81:8f:59:fe:3c:2d:ae:dc:91:e5:72:6b:b2:
         8a:78:2d:90:5e:cf:a2:06:05:ba:7e:45:dd:88:93:1b:39:c6:
         1d:fe:4b:67:52:76:4b:e8:f1:8c:c5:0c:d9:b3:08:84:79:32:
         da:a7:c2:78:39:f9:0a:53:f2:fb:39:e0:a0:8b:88:0b:09:61:
         ad:b4:4d:b1:0f:7e:45:6f:00:f0:ae:e3:7d:78:98:8f:be:73:
         3d:4b:bd:f9:7d:85:f4:da:09:d7:c2:3d:8f:a4:88:5b:ec:7c:
         a3:dc:70:b5:58:88:ca:69:8c:46:52:2f:6a:60:43:17:4d:33:
         fd:4e:cd:d0:82:f1:4b:d5:f4:7d:70:00:cc:0c:43:0e:e7:03:
         09:a9:98:80:8c:fe:5d:62:a1:c4:ee:23:29:a0:04:40:f9:ef:
         fb:d2:db:ae:88:fb:38:f2:76:30:80:fb:02:38:76:cc:34:bc:
         02:4c:c6:07:f2:e0:00:df:53:45:73:7c:00:76:a6:28:72:b2:
         0b:91:85:cb:f4:6e:3e:35:49:0e:47:28:63:09:4e:f9:0f:d6:
         b0:ed:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:50:52 2026 by rpki-client