Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/815eb95f-c55c-393b-9d70-b5f74aa47bab.roa
File:                     815eb95f-c55c-393b-9d70-b5f74aa47bab.roa (raw, json)
Hash identifier:          ga8w91WcG3m8OWNMLzsU+VfLyA8Z4sN8Mzl3V62JnCg=
Subject key identifier:   37:D2:65:6E:97:7A:91:0D:3D:7D:31:7F:C0:FA:B7:C5:3B:B0:5C:F1
Certificate issuer:       /CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
Certificate serial:       010D0C9F4328584EAE81A60A4C21EE03A01C9100
Authority key identifier: 33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/815eb95f-c55c-393b-9d70-b5f74aa47bab.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     197841
IP address blocks:        2602:f822::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a6:0a:4c:21:ee:03:a0:1c:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=88d5dd99-996c-429e-8c01-f876422204eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:b9:11:ce:fa:70:b8:aa:ac:c3:e0:46:36:
                    63:2b:4f:2a:25:f2:66:92:20:d5:f7:b1:99:9f:9d:
                    b8:9b:00:e0:0c:4b:49:72:4c:4a:81:35:91:0b:e7:
                    ce:e5:6f:2c:1c:5f:b6:b6:bb:aa:8c:2c:b5:c7:b2:
                    61:60:ba:d0:c0:e6:52:86:ea:57:13:61:c4:cd:90:
                    1e:3e:27:e0:51:8c:77:21:bd:d5:ed:33:69:b3:96:
                    ee:3a:b6:05:5a:de:22:85:59:58:05:55:7f:7e:71:
                    1c:10:ea:2d:2f:5d:68:a2:22:6b:cb:0e:e7:9b:80:
                    a3:34:29:f4:3f:d8:59:34:e1:36:5e:d5:a0:a0:0a:
                    3a:eb:7e:4a:22:a9:f8:ff:bf:f5:91:bf:d0:bd:4e:
                    5c:3f:1a:6b:f1:94:ba:65:88:20:71:78:d3:b4:44:
                    25:e1:d9:4f:56:7b:1b:ea:39:4d:61:77:f0:63:8f:
                    bb:54:b7:45:55:19:d0:c7:58:1a:8f:02:a3:51:1b:
                    7c:47:c4:da:62:09:51:93:3e:4e:c0:76:18:58:71:
                    c9:bc:87:06:6e:9b:75:20:a5:1a:34:7f:46:e7:64:
                    b4:25:a8:e5:59:f5:1f:28:58:16:41:a0:de:a3:23:
                    8c:50:31:90:fc:d6:f5:da:e3:08:91:64:43:c9:bf:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D2:65:6E:97:7A:91:0D:3D:7D:31:7F:C0:FA:B7:C5:3B:B0:5C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/815eb95f-c55c-393b-9d70-b5f74aa47bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl

            X509v3 Authority Key Identifier:
                keyid:33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f822::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:99:62:07:21:7a:89:05:c6:65:45:5f:c8:a0:98:4e:4c:
         ad:d8:ff:ed:0a:96:d4:b1:e9:b0:bb:d3:30:5b:42:4d:6d:7b:
         9c:5d:73:d5:52:9e:7f:2a:6b:95:74:b1:41:c9:d7:e2:f5:39:
         ae:a7:d1:9b:b8:89:64:65:d1:3c:18:04:31:94:66:b0:68:09:
         e5:f4:19:55:d4:fd:35:d8:86:63:a0:6f:a2:39:91:1a:bb:cd:
         41:82:73:b6:51:2f:45:be:64:46:32:14:72:c7:89:9a:b1:44:
         58:8d:f7:ae:62:ed:bd:17:11:e3:97:f5:9a:9e:b9:e1:a3:cf:
         6c:3d:b8:d3:73:7e:8a:86:e0:86:c9:c3:4e:48:81:39:27:8c:
         77:f0:1e:b8:71:5b:10:8e:f7:8c:52:4e:cd:28:21:7a:c3:76:
         9b:e8:95:9a:71:c9:18:77:01:b7:7e:ea:54:43:7f:ee:af:66:
         f6:05:7f:e2:49:e5:6f:6d:0f:bc:a5:4a:73:d4:ef:58:41:d1:
         82:d7:50:4c:77:92:77:13:be:ee:7d:9f:83:c0:af:4f:95:e6:
         26:30:db:c2:d0:3a:29:3f:d7:4d:7a:9d:4a:39:5f:08:9e:5f:
         a8:e9:f5:9c:88:75:28:73:29:04:b5:56:1b:ab:84:1d:0b:a7:
         d4:ae:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:43:42 2026 by rpki-client