Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa
File:                     8afe2b44-aeed-3635-96f2-699b9e5360de.roa (raw, json)
Hash identifier:          6gV3ezq7coIZxepXqMFaSqq7gZPOHlN/NOlc1Mnf8TQ=
Subject key identifier:   2D:8C:D9:84:C1:6D:94:0D:A8:64:23:85:02:2D:F1:C3:AC:0C:90:53
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584E3069B06F5158B1ACAC1AB980
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa
Signing time:             Tue 16 Jun 2026 09:00:12 +0000
ROA not before:           Tue 16 Jun 2026 09:00:12 +0000
ROA not after:            Mon 14 Sep 2026 09:00:12 +0000
asID:                     38047
IP address blocks:        2602:f83b:1886::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:69:b0:6f:51:58:b1:ac:ac:1a:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jun 16 09:00:12 2026 GMT
            Not After : Sep 14 09:00:12 2026 GMT
        Subject: CN=cefc1699-466e-4699-9122-fe59bb68cd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:12:d9:1c:02:f7:8f:97:18:dd:92:6c:88:
                    87:52:68:f3:e1:cd:73:d2:ec:d8:b1:cd:1f:e7:ed:
                    35:bd:bd:08:c3:fe:2e:8d:29:86:d2:15:66:bb:f9:
                    c5:15:2a:b5:7d:d7:6a:03:04:48:39:9c:03:87:65:
                    24:1c:8f:68:43:18:85:5b:fc:43:67:17:7b:fa:24:
                    c8:21:aa:0d:af:26:a0:a7:14:6c:5e:6d:6e:36:3e:
                    1d:f3:40:21:95:8a:7a:15:bf:c2:83:4a:9b:85:02:
                    a3:6d:c3:92:3d:2c:b3:4b:11:ff:7c:4d:62:d8:5f:
                    ca:fa:59:4f:71:f2:9c:84:1d:d3:fc:bd:c7:d1:d7:
                    fa:23:55:4e:01:c0:40:9b:eb:ba:d6:b2:33:69:9f:
                    0d:1d:21:49:03:65:ab:b3:62:19:2d:57:ae:a5:37:
                    24:a4:11:16:b6:16:6d:1c:ba:10:86:eb:af:8f:47:
                    8d:4c:e1:af:4c:81:c7:4f:65:64:34:30:5e:f9:38:
                    1c:52:fe:4f:61:bf:70:62:b5:58:d9:bc:96:a4:ff:
                    8d:43:d7:72:c7:f8:d9:bb:77:d7:e7:70:a3:06:e9:
                    b7:8b:82:a1:34:68:a2:50:ae:cc:45:35:e7:f7:70:
                    d8:dd:36:5f:72:70:63:d2:07:5c:43:c1:24:83:15:
                    bc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8C:D9:84:C1:6D:94:0D:A8:64:23:85:02:2D:F1:C3:AC:0C:90:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:1886::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:1e:e9:21:9b:f1:5f:01:70:01:77:94:7e:07:4c:21:5c:
         9e:b8:a4:7f:65:ca:d3:e4:9c:93:3e:36:e3:5e:72:de:bd:a7:
         e7:bb:69:2e:07:77:85:a4:80:37:67:64:e0:69:ae:84:eb:46:
         3d:33:e1:8f:63:ec:f5:cf:be:8c:9c:9c:d8:f7:75:69:3f:0a:
         e3:35:bb:73:de:45:41:5b:c5:3a:32:65:e9:56:05:80:0f:c0:
         05:6c:aa:31:80:39:40:d3:76:83:98:7a:f1:6e:15:54:9e:30:
         d3:d1:44:10:ab:51:84:ef:99:2b:d9:a0:67:6b:6f:d7:ad:40:
         c3:f7:5a:9b:4b:06:f2:ea:c6:e6:d0:28:79:ac:cb:d7:83:c7:
         fe:13:8c:10:5a:b0:a2:13:cb:df:dd:a7:14:a8:12:46:e6:59:
         b7:13:c6:dc:a1:41:8b:6e:5f:b8:97:ef:9b:ae:51:5c:bc:41:
         03:9c:d9:01:a4:10:51:06:0e:8f:02:f7:2b:3c:57:f0:ef:06:
         14:da:9d:71:7f:45:dc:c2:35:99:5a:5c:83:61:aa:a8:8f:68:
         05:b5:4b:ff:c0:f7:62:47:02:f4:ba:9c:93:f9:e4:b1:c7:eb:
         7f:8e:3c:b0:79:d7:92:a5:3d:19:22:2e:e3:46:27:6c:5e:eb:
         a4:a2:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:45 2026 by rpki-client