Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/f3f17334-3c9f-37ec-a6b8-5440126b76c8.roa
File:                     f3f17334-3c9f-37ec-a6b8-5440126b76c8.roa (raw, json)
Hash identifier:          QIJNrYsOghG8Gan/ZPtt1VmjgkLqzBnuDcXaNX/qmP0=
Subject key identifier:   9B:42:27:B6:94:B0:1F:C8:F1:56:49:F7:AB:D2:96:5A:D5:51:40:E9
Certificate issuer:       /CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5
Certificate serial:       010D0C9F4328584F990305382FDFCC0FF1345900
Authority key identifier: 8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/f3f17334-3c9f-37ec-a6b8-5440126b76c8.roa
Signing time:             Fri 23 Oct 2026 13:00:12 +0000
ROA not before:           Fri 23 Oct 2026 13:00:12 +0000
ROA not after:            Thu 21 Jan 2027 14:00:12 +0000
asID:                     402799
IP address blocks:        2602:f32a:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:03:05:38:2f:df:cc:0f:f1:34:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5
        Validity
            Not Before: Oct 23 13:00:12 2026 GMT
            Not After : Jan 21 14:00:12 2027 GMT
        Subject: CN=9fdc8788-011f-46cf-a62c-7a23e18ab90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:b0:ca:c4:b0:50:57:12:0a:28:d7:19:bb:
                    64:91:77:46:6b:4a:65:cb:a2:e0:3f:a5:32:82:e9:
                    1d:01:aa:86:cf:cd:c8:82:ce:2d:44:46:e0:1a:b8:
                    c9:56:7b:d2:fa:3f:b9:e5:b1:6a:1d:40:b9:14:ee:
                    3c:2d:c2:75:21:6d:08:5a:b0:21:e8:65:8e:c3:4e:
                    9a:25:fb:cc:44:62:d0:a1:2b:30:29:bb:7a:09:87:
                    3b:65:e6:68:d0:56:a9:f7:cb:f2:d3:7a:d1:9f:63:
                    d8:9d:21:b3:aa:b9:22:33:3b:31:56:a1:8d:d0:d8:
                    da:69:6c:6d:66:c5:14:32:6f:86:30:ba:48:f3:16:
                    59:37:9b:75:a0:c2:82:d0:2a:a2:06:36:f0:4d:09:
                    4d:8f:d9:9e:b3:09:84:4b:b6:e3:8c:d3:fb:b7:01:
                    a9:40:fe:7d:1c:ad:82:5b:2b:70:4b:2f:4c:9a:c3:
                    5b:5d:d9:bb:99:7e:60:2f:95:49:68:9d:0b:8e:4a:
                    56:d5:b0:65:ef:40:c3:e0:89:ea:6c:0a:b6:3f:39:
                    d0:05:4f:a8:6c:da:d0:93:ba:38:3c:df:9a:88:56:
                    61:bb:52:3c:be:b6:c2:64:c1:8e:14:63:cb:1c:cb:
                    9a:e1:9d:3d:33:4d:b4:a9:c3:bc:25:6f:ec:cb:37:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:42:27:B6:94:B0:1F:C8:F1:56:49:F7:AB:D2:96:5A:D5:51:40:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/f3f17334-3c9f-37ec-a6b8-5440126b76c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.crl

            X509v3 Authority Key Identifier:
                keyid:8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f32a:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:9f:ae:bd:da:e4:bf:0a:56:8a:80:ff:cd:af:2e:2a:30:3d:
         d9:63:aa:1a:9c:23:ac:9a:50:3a:ec:a2:0c:d2:0f:60:3a:ca:
         8d:a9:dd:ac:0d:da:9d:a2:01:57:50:d7:2b:89:25:d6:03:e6:
         44:fb:8c:e7:6d:e7:67:d6:87:e0:ca:f8:53:fb:23:14:bd:ce:
         b0:da:e8:6f:77:6d:e9:a6:2c:f2:90:96:6a:36:f9:cf:ae:8f:
         88:1e:27:4b:5a:3c:e2:06:38:d6:43:e6:31:86:0a:6b:59:f0:
         c9:62:a3:1c:d1:ef:2a:25:18:da:79:87:58:e5:10:27:b9:5c:
         30:87:95:c9:1d:5f:98:35:cc:8c:90:7e:5f:d1:be:ac:fc:84:
         b7:28:e0:c7:58:13:ea:31:b8:c1:ba:5a:c8:a0:72:2e:d4:b3:
         66:9f:3e:9a:a2:89:55:fe:4b:7e:96:1d:f0:c2:51:49:08:52:
         a7:1d:14:ee:99:46:34:b3:83:ec:c3:e0:bd:e8:7a:4e:81:16:
         d0:65:3f:b7:df:25:1e:5f:2a:79:58:0c:16:39:49:58:10:ee:
         2f:97:bb:99:8c:53:42:9e:1f:6d:28:8c:38:89:41:12:91:84:
         66:b9:d8:49:f9:e2:86:e1:c9:09:1a:1e:31:5e:6a:f4:e5:29:
         31:2e:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:27:24 2026 by rpki-client