Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/ea78be86-fff9-3139-a5aa-b3df5ede0542.roa
File:                     ea78be86-fff9-3139-a5aa-b3df5ede0542.roa (raw, json)
Hash identifier:          R59qURaXVsRcx/YgrmzCzxx+515m56ZFB5SJxb1LicY=
Subject key identifier:   99:69:12:E4:96:80:BD:37:CA:CC:C3:97:7A:80:44:8E:17:A6:F0:14
Certificate issuer:       /CN=8faa25dd-2ba9-4d53-af3d-8717d35fed4a
Certificate serial:       010D0C9F4328584EBB8C9BA6A5709F60C755CC60
Authority key identifier: 58:99:27:19:76:18:DC:03:54:15:C3:88:3C:2F:AE:E1:71:0A:0C:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/ea78be86-fff9-3139-a5aa-b3df5ede0542.roa
Signing time:             Wed 05 Aug 2026 05:07:59 +0000
ROA not before:           Wed 05 Aug 2026 05:07:59 +0000
ROA not after:            Mon 02 Nov 2026 05:34:24 +0000
asID:                     53366
IP address blocks:        2602:f9d0::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:8c:9b:a6:a5:70:9f:60:c7:55:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faa25dd-2ba9-4d53-af3d-8717d35fed4a
        Validity
            Not Before: Aug  5 05:07:59 2026 GMT
            Not After : Nov  2 05:34:24 2026 GMT
        Subject: CN=0b54a983-798f-4fcd-93fc-96512332037c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:57:6d:2a:e5:dc:98:72:ab:5f:f1:89:69:a7:
                    cb:ea:c6:ee:6a:45:e9:b0:f1:da:3a:3c:ac:70:4e:
                    ad:6d:40:b7:7a:37:e8:3f:16:69:96:e2:69:0c:19:
                    d9:6d:9d:bf:29:86:53:a4:9f:d3:dc:3c:6b:89:ea:
                    99:21:00:b1:45:f2:1e:d0:23:43:57:4b:ae:8b:ea:
                    6e:02:fd:05:72:6a:28:93:df:f9:21:b9:6d:c8:4b:
                    1e:07:66:3d:4e:0b:b2:b0:ea:a7:d6:45:05:77:4c:
                    cc:14:1d:c6:1b:9f:e9:5c:10:58:4f:8e:66:a4:94:
                    e7:98:eb:24:5d:da:07:b6:60:5c:45:1e:0f:cd:8d:
                    0c:8e:27:be:b3:d9:15:90:47:4a:5d:9d:07:31:43:
                    c2:49:9c:6d:2e:cf:67:3c:6d:8b:17:eb:f8:53:47:
                    60:86:e8:55:61:9f:fa:29:63:e6:f1:b1:8e:67:be:
                    f9:97:20:eb:70:07:64:3e:9f:00:85:74:41:3b:59:
                    ac:cc:92:c2:ce:7c:7d:36:f2:4d:f5:03:53:bd:d8:
                    f4:17:f3:7e:45:87:70:8f:3b:d2:9a:f8:91:95:e4:
                    a3:bf:f1:da:91:18:12:81:12:ac:b2:bd:7b:24:78:
                    57:4a:39:ab:94:d7:d6:b4:6c:1d:11:bb:94:74:2a:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:69:12:E4:96:80:BD:37:CA:CC:C3:97:7A:80:44:8E:17:A6:F0:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/ea78be86-fff9-3139-a5aa-b3df5ede0542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.crl

            X509v3 Authority Key Identifier:
                keyid:58:99:27:19:76:18:DC:03:54:15:C3:88:3C:2F:AE:E1:71:0A:0C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:31:d5:6f:3f:a8:1f:e6:a5:6f:73:c5:dc:1c:e4:b5:b8:
         9b:85:75:ae:ce:26:35:2d:eb:b6:c5:d9:1d:b2:18:f8:44:5a:
         c3:2d:5f:f7:f0:d4:30:47:ce:19:bb:45:61:f0:48:d8:37:5f:
         cc:5a:e6:cf:40:3e:85:c5:69:97:75:4c:9c:26:14:c4:13:4a:
         e7:ac:3a:7c:12:c6:0e:69:8f:57:81:b3:8d:a4:9b:3e:c0:9b:
         11:17:7f:77:fc:8e:a7:b7:7d:cd:86:a4:71:de:e9:05:2b:d2:
         2e:f3:29:d4:8c:2c:3b:47:d0:93:5e:b9:26:3f:d1:11:6f:7f:
         bc:51:0c:88:3c:c8:95:37:2d:5f:5e:ea:64:28:da:1f:4a:c4:
         40:b8:32:dc:38:97:4b:ab:98:74:f7:55:c6:ae:14:33:63:9c:
         d9:62:a4:f3:8e:3d:9b:94:69:c8:8f:58:6e:cd:80:0d:d1:6e:
         e1:7b:bd:4a:85:8c:da:d7:9d:70:e5:6b:af:7d:d1:54:51:51:
         86:0e:eb:4f:21:41:4c:4a:5e:bb:5c:87:b9:f8:9e:52:ea:72:
         d0:ef:c3:81:a0:f3:fd:db:95:5d:8f:e2:12:47:c9:a7:50:3b:
         be:a0:c2:51:27:be:f5:fa:fb:6d:68:0d:b2:11:85:8e:27:18:
         bf:10:03:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:50 2026 by rpki-client