Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/09796def-962a-3429-91c1-8c53f08ae945.roa
File:                     09796def-962a-3429-91c1-8c53f08ae945.roa (raw, json)
Hash identifier:          EAHEDDFWf9bhqBWJXF88Ywuw9CcocOV19efZTFTkE08=
Subject key identifier:   68:C9:B6:0E:D0:06:8F:63:EB:61:BE:D9:26:EE:C3:77:7F:DF:E0:FC
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DDA4FCF07611FE05B4A80
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/09796def-962a-3429-91c1-8c53f08ae945.roa
Signing time:             Thu 06 Aug 2026 20:23:52 +0000
ROA not before:           Thu 06 Aug 2026 20:23:52 +0000
ROA not after:            Wed 04 Nov 2026 21:23:52 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3f7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:da:4f:cf:07:61:1f:e0:5b:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:52 2026 GMT
            Not After : Nov  4 21:23:52 2026 GMT
        Subject: CN=133bde09-515d-44c1-9cf7-a418f737dc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8f:54:c2:54:09:42:75:5b:b2:de:9c:c1:e1:
                    da:c3:d9:90:bd:50:fe:89:e2:3c:4a:f1:ef:b3:b6:
                    d7:82:01:03:b7:65:dc:80:1b:7f:8b:37:fe:6c:4e:
                    62:04:7f:8d:5a:bf:af:8f:76:1a:00:0f:22:a1:33:
                    9c:9f:1b:3c:2e:02:87:39:2c:b6:17:ea:4f:cb:08:
                    4b:bc:79:e0:e4:aa:7b:2d:68:33:86:2f:29:54:27:
                    ef:e6:bd:e7:da:78:ee:82:64:7c:f5:53:55:12:73:
                    fe:71:72:26:42:3e:06:3a:12:b6:24:79:ef:e1:13:
                    9c:51:fd:74:c1:ee:a9:ce:a0:e7:59:9d:ea:1f:de:
                    71:00:42:27:f7:d3:f1:d6:dc:e1:70:c3:fb:bc:bb:
                    5b:b1:7e:75:71:1e:91:1b:ba:99:c1:46:c0:6c:a4:
                    ed:c8:92:48:5b:5f:ff:06:dc:a6:f7:17:84:44:4f:
                    84:23:58:d5:6e:6a:f9:da:6d:08:58:b8:ff:a4:f4:
                    ac:2b:a1:65:00:91:73:3e:e5:01:3e:78:42:f7:77:
                    2d:7f:30:61:e3:4b:45:fe:aa:e9:45:6d:53:80:ae:
                    97:51:b7:15:d8:73:8f:a3:ca:e0:40:29:eb:b9:97:
                    66:ae:76:58:34:53:0c:03:06:2b:98:63:44:d0:8a:
                    dc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C9:B6:0E:D0:06:8F:63:EB:61:BE:D9:26:EE:C3:77:7F:DF:E0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/09796def-962a-3429-91c1-8c53f08ae945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3f7::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:66:9d:f4:7c:b3:7d:26:89:50:1a:4b:c4:bd:09:ca:e5:2e:
         82:d1:28:86:74:57:0a:27:5e:65:75:1b:33:40:84:9d:b7:f1:
         fa:49:4f:20:4c:e7:b9:0b:c6:e3:c2:38:08:c9:00:00:24:78:
         28:77:07:7a:d7:13:db:b1:ec:18:cd:dd:e8:f9:b1:d8:c0:09:
         30:31:a1:7a:af:3f:a7:47:9d:6f:9c:48:9d:3b:2c:a4:cb:84:
         c0:aa:50:03:e5:79:28:30:88:5a:b9:2d:41:b1:fd:85:ba:b1:
         fd:fa:17:ea:a2:0d:bc:49:e1:1e:0c:25:58:ea:f5:6a:da:fd:
         a4:bf:00:13:68:14:3e:b1:84:4b:b9:a7:6f:6e:52:1d:d3:ee:
         05:ec:86:70:07:48:c8:e8:5a:44:32:61:19:95:da:5a:4a:e1:
         ec:1e:df:d5:e7:7e:d0:8b:31:e2:52:25:34:87:79:90:0b:a2:
         76:c0:fd:da:7a:28:3c:1a:64:81:82:3f:0a:f3:b4:66:f7:34:
         d8:a1:b3:45:79:62:95:1c:7a:ba:5f:8d:12:6e:75:3c:a2:07:
         f9:a4:69:48:9c:8f:53:d9:87:10:22:9d:d7:36:52:e4:38:14:
         96:70:50:dd:b8:0a:1d:8b:a3:fe:35:be:88:72:cb:3f:76:7b:
         33:5e:2a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:58 2026 by rpki-client