Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/bbc3d1e9-6d80-3d72-bafc-7664c1daf77d.roa
File:                     bbc3d1e9-6d80-3d72-bafc-7664c1daf77d.roa (raw, json)
Hash identifier:          rGg1bJG/ONtkhodwVYxpVgz+/QsFmEKPLXbb5Yd4kyc=
Subject key identifier:   D6:69:34:64:72:FA:AC:74:55:55:CB:4C:74:18:AC:B7:82:8E:35:4F
Certificate issuer:       /CN=1073152b-033a-4ad5-ba98-45c1d65704d4
Certificate serial:       010D0C9F4328584EEBECA406A639BBB0313EC200
Authority key identifier: AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/bbc3d1e9-6d80-3d72-bafc-7664c1daf77d.roa
Signing time:             Sat 22 Aug 2026 13:00:12 +0000
ROA not before:           Sat 22 Aug 2026 13:00:12 +0000
ROA not after:            Fri 20 Nov 2026 14:00:12 +0000
asID:                     401389
IP address blocks:        2602:f7ee:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:eb:ec:a4:06:a6:39:bb:b0:31:3e:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1073152b-033a-4ad5-ba98-45c1d65704d4
        Validity
            Not Before: Aug 22 13:00:12 2026 GMT
            Not After : Nov 20 14:00:12 2026 GMT
        Subject: CN=f3e82392-4d06-4f2f-bf51-9e92261f8239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:ec:9c:b2:f9:b2:9f:4b:3e:41:fe:ef:59:
                    47:f1:89:29:0a:a9:8f:7a:90:1e:cd:98:97:07:1c:
                    2b:f6:60:80:59:8d:38:a3:32:b3:0d:af:07:ca:35:
                    65:ac:9b:03:0a:59:34:34:89:4b:b9:6a:ec:d0:2f:
                    48:02:10:0e:ea:81:30:14:8b:e5:7c:f6:08:0c:b8:
                    c4:9a:36:a5:54:4c:cc:90:28:2a:02:b9:04:8b:da:
                    c5:8a:3f:ec:7b:9f:c4:bd:fb:89:16:33:c9:10:ce:
                    ed:6b:7a:c9:8d:a9:f0:ab:53:c7:e8:7d:f8:cc:06:
                    f3:3a:2c:f8:68:f1:14:f2:d9:ca:87:6c:c5:11:77:
                    b5:b0:30:92:5d:d3:77:a4:f1:90:da:41:c3:71:73:
                    9f:6d:da:be:4e:19:cf:fb:ed:d0:c1:57:e3:91:ea:
                    6d:79:fd:db:24:23:18:fb:3d:06:ba:99:8b:b4:17:
                    00:0c:0c:43:27:cb:dc:d8:db:33:81:2e:a0:e1:38:
                    2b:31:fd:04:e1:d6:b2:1a:ca:5e:6a:04:13:36:1f:
                    b8:5e:fa:d3:75:aa:8f:0b:f4:a7:e1:a0:33:12:55:
                    33:40:85:58:b0:b2:46:ca:75:7d:de:a4:04:dd:c1:
                    71:02:93:72:8d:7a:dd:65:7d:2e:17:c0:b7:45:38:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:69:34:64:72:FA:AC:74:55:55:CB:4C:74:18:AC:B7:82:8E:35:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/bbc3d1e9-6d80-3d72-bafc-7664c1daf77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl

            X509v3 Authority Key Identifier:
                keyid:AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ee:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3c:5a:1e:78:20:5e:b7:35:d6:1e:92:1e:da:c3:52:0d:f5:
         78:7a:ee:e1:d8:ca:92:57:8f:2b:6a:56:fb:27:ec:d5:3d:2d:
         fa:a5:db:99:7e:57:40:cc:50:40:a8:ef:07:35:61:8e:f7:e0:
         76:7d:35:ee:98:44:d9:91:ef:3d:39:60:44:dd:8e:98:a9:87:
         28:d3:d5:95:89:60:7a:0a:70:9a:06:b7:73:7e:ed:19:8d:b1:
         c0:8e:27:fd:c1:87:e0:29:ea:b4:e8:ab:d5:df:a2:88:29:68:
         c7:bb:f7:c9:f6:f8:87:c8:db:b7:69:03:f4:74:58:57:00:a3:
         50:ea:f3:55:37:1e:d1:90:7c:eb:20:1c:8b:6b:ef:ad:3a:48:
         d5:6c:42:81:66:d4:66:5b:b4:83:d2:a0:35:7b:cc:bf:6f:62:
         9e:37:24:14:1a:1b:9c:9c:72:56:ff:99:76:c6:49:fa:6c:a4:
         7e:5b:a9:93:eb:0b:9a:f2:83:c5:31:2a:11:8c:a7:f4:12:3f:
         6a:30:e1:be:40:84:ee:3e:d5:42:d0:31:fb:7b:f0:2b:86:bc:
         86:9b:44:4a:f0:02:db:fb:da:12:d9:d8:67:d1:32:ec:a7:a6:
         dd:26:4e:bd:ac:54:db:95:2a:26:65:f5:00:54:95:f0:69:46:
         83:b0:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:39:47 2026 by rpki-client