Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0770ace2-fcb5-3db3-8bb4-ba539d1213b3.roa
File:                     0770ace2-fcb5-3db3-8bb4-ba539d1213b3.roa (raw, json)
Hash identifier:          N8mN2gxZE3MiNrHXmlsUb+puWqiFl5rVx9Yn7damFcY=
Subject key identifier:   DC:2B:F1:49:33:20:51:F5:21:9B:7B:6F:88:7C:B0:4A:0B:52:2C:98
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584F0D6CEA1D2A3B2E6A76ADB460
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0770ace2-fcb5-3db3-8bb4-ba539d1213b3.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     38047
IP address blocks:        2602:f83b:a203::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:ea:1d:2a:3b:2e:6a:76:ad:b4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=69d92489-ce2c-4ce5-938a-aedf4f464528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:f2:d5:13:c0:37:1e:77:8d:ca:e5:77:f7:
                    d8:fe:78:e9:5b:ab:41:48:32:96:c5:58:84:f4:d7:
                    61:c3:63:c4:9f:d9:75:7c:06:0f:23:ca:c6:85:1f:
                    34:36:ff:4e:12:f2:5c:e0:0c:28:61:69:62:ec:f5:
                    0c:8c:70:f1:9e:e1:21:48:80:3a:a7:62:fa:53:e8:
                    4c:6b:f3:ff:aa:48:08:8b:e5:9e:f5:ef:87:69:d1:
                    d5:a5:3c:49:92:f3:8f:b0:10:02:5b:7e:b9:c7:96:
                    2e:97:7e:15:1a:0c:46:5b:fd:7d:73:27:c0:39:f1:
                    e7:cb:3f:61:0e:27:58:dd:b4:50:a1:a8:39:c3:cf:
                    f4:0b:9d:d7:46:ea:64:b9:de:0d:be:27:7f:65:77:
                    7b:db:5a:ac:3d:94:37:44:5a:8b:7b:6f:2a:8f:93:
                    ec:dc:98:40:ab:47:17:e7:44:30:ec:21:ea:1b:cc:
                    e1:3e:d8:49:30:ed:04:e1:cb:12:7e:7f:12:7d:6e:
                    56:1f:cd:be:1e:fe:0c:da:8d:ff:f6:1d:0b:bb:37:
                    32:2d:43:9a:43:94:a0:67:ff:64:24:16:ff:a0:20:
                    7e:b4:b1:d6:3d:06:a4:de:c3:d4:85:e4:d2:18:00:
                    38:e0:2b:b9:26:f9:f8:9a:0d:07:2a:5f:cd:aa:a6:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2B:F1:49:33:20:51:F5:21:9B:7B:6F:88:7C:B0:4A:0B:52:2C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0770ace2-fcb5-3db3-8bb4-ba539d1213b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:a203::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a3:f8:1c:40:97:11:5e:9a:e7:c4:5b:ad:13:f8:60:84:40:
         fc:bf:1e:4c:a2:08:b2:37:29:5d:3e:d6:81:a0:22:4e:16:12:
         46:c0:6c:80:90:84:dd:c9:2f:bc:b6:a9:a1:22:43:e2:f9:a8:
         cf:41:56:2d:6d:43:27:a5:2b:90:23:74:2b:1c:3a:34:8c:4f:
         e0:30:7e:a0:10:3a:12:a9:5a:20:c1:e9:f7:b2:47:d9:31:41:
         f9:b1:8d:5d:f0:03:e6:a4:49:a3:89:94:13:07:ca:60:e9:f4:
         60:c4:09:f3:7f:dd:65:77:0d:c6:27:46:f4:09:40:5b:ef:ef:
         e6:14:bf:e1:78:9d:99:77:23:50:2c:6f:c1:2d:7d:f6:b1:ba:
         9b:bf:8c:64:e6:7a:e9:89:f5:d7:2a:6d:85:4d:1e:3b:01:06:
         91:8b:24:17:3a:0d:c0:0d:ea:c6:47:9a:7a:59:b8:5b:d1:bf:
         1e:eb:de:74:2b:aa:05:17:56:c8:c2:9e:3f:29:4d:96:b7:69:
         9a:23:f6:5c:90:06:f6:89:ae:fe:20:8d:af:02:bd:94:99:b8:
         ff:55:76:4a:04:8c:58:ee:54:8d:70:32:a4:b3:a9:5f:93:bb:
         80:af:88:b1:28:d0:b9:f6:25:95:51:0c:d2:de:5f:09:86:42:
         5c:1d:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:07:49 2026 by rpki-client