Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/99a6120f-79f5-3510-b656-c65e64170adc.roa
File:                     99a6120f-79f5-3510-b656-c65e64170adc.roa (raw, json)
Hash identifier:          AAT2qu00kz9hIHZKpRZW9Y26eBuJZsY3uVd7cZk3ej0=
Subject key identifier:   3C:E5:30:AD:6B:78:67:21:D6:5D:D2:12:89:20:A7:35:10:DC:74:02
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584EE0C20886B10648D159D7FB80
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/99a6120f-79f5-3510-b656-c65e64170adc.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     401485
IP address blocks:        2602:f777:400::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:08:86:b1:06:48:d1:59:d7:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=9c030327-2a2c-449d-b29c-b3a4b7f4886f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:a5:12:30:f8:aa:66:ec:36:4c:ba:32:ec:
                    df:8c:b0:c4:04:f9:3e:c0:fa:b1:c8:fd:88:81:a4:
                    50:70:08:f5:36:9a:39:32:e1:c0:a7:95:89:1d:f5:
                    52:78:a2:fb:60:32:0d:20:18:77:3b:ca:5d:63:7d:
                    14:2c:fb:4d:55:1a:e7:ad:2f:3e:06:f6:40:c0:3f:
                    52:74:3c:c4:44:5f:63:0b:32:15:7d:5a:df:d1:6d:
                    32:a9:63:a3:dc:e2:c6:24:bd:b2:6f:37:8e:e8:fb:
                    54:8d:c9:d9:19:61:20:67:c4:b0:ac:16:ed:f9:70:
                    47:28:34:43:66:35:05:ff:13:cd:0e:22:43:18:6a:
                    be:f0:3f:e9:63:17:01:29:2e:ac:63:3b:a5:9a:64:
                    37:97:4e:ee:c5:72:0d:aa:90:92:7d:1b:f2:9d:28:
                    7e:99:97:44:df:42:cb:cc:9e:0d:71:ed:1c:0a:c9:
                    db:5b:3b:2f:aa:7a:f7:e5:18:d8:28:3e:8a:63:b9:
                    fe:b9:e6:08:a9:86:21:98:01:ac:ba:ba:f9:02:77:
                    d1:5b:db:5e:9a:63:8a:84:d0:c6:10:73:e5:0f:c0:
                    c0:59:2c:df:22:01:e5:f7:ca:e2:42:45:6d:ca:0e:
                    53:57:5a:e8:91:3c:83:aa:e0:dd:6f:e4:6d:4c:d5:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E5:30:AD:6B:78:67:21:D6:5D:D2:12:89:20:A7:35:10:DC:74:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/99a6120f-79f5-3510-b656-c65e64170adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:7b:73:82:3b:d1:16:7b:34:2c:04:98:d8:31:d3:6e:c8:19:
         b9:4e:1f:99:dc:b1:91:ac:94:ba:eb:c7:32:14:87:bc:e9:8b:
         33:30:22:a8:01:34:b0:97:e3:86:7a:9f:84:d4:b7:96:0b:b7:
         3c:d2:5d:b6:bb:37:bd:e5:c0:ae:95:83:5a:3a:b8:26:ec:74:
         8b:b7:63:0f:75:66:5d:53:22:00:e6:57:be:38:db:02:83:ed:
         df:66:2a:c1:40:6b:5f:46:c8:27:25:ab:62:ba:a0:72:b5:f8:
         3c:35:54:e7:dd:18:7b:62:b7:e4:ef:9c:14:7c:cb:2d:74:ef:
         4d:b6:ed:ce:f5:c2:3c:76:0a:16:14:5c:88:24:65:52:29:47:
         50:51:8f:c3:3c:4c:fb:06:d0:42:37:bd:82:cf:18:41:1a:7b:
         e8:14:a3:e4:50:e8:0b:74:e8:9b:2d:94:21:b5:19:73:d2:63:
         e9:80:f9:da:d9:7c:df:62:e0:ea:0f:cc:0d:9c:1d:60:e7:70:
         de:ca:e6:d8:49:ef:e6:2a:af:b3:be:5e:af:7d:ad:30:e6:38:
         fe:3c:c4:06:28:bb:d0:a6:13:1b:cd:f1:ee:61:63:5f:07:3c:
         c2:c0:76:3f:1a:0c:8b:e2:e3:d3:1f:23:23:4d:38:36:fd:60:
         ee:70:c9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:11:42 2026 by rpki-client