Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/d21b8c42-c53f-3da9-81d5-7475d3bd1836.roa
File:                     d21b8c42-c53f-3da9-81d5-7475d3bd1836.roa (raw, json)
Hash identifier:          jjffWgP5FVbjf1SwYSEcy2QomOtPlEnWHHgrrh5nBkE=
Subject key identifier:   86:A7:AA:B7:7D:6B:C6:94:97:9B:03:4C:A1:EA:25:1E:C2:EA:89:3C
Certificate issuer:       /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial:       010D0C9F4328584EE65741F42470103449CD2D00
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/d21b8c42-c53f-3da9-81d5-7475d3bd1836.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     401106
IP address blocks:        2602:f40a::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:41:f4:24:70:10:34:49:cd:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=67e78958-e9fa-4bca-a8ec-bcf458a1d999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:5a:5f:01:da:1b:3b:e8:13:d7:4f:aa:ce:
                    66:d2:f3:5f:93:c8:fb:bc:56:a1:0e:28:f3:ac:dc:
                    df:bc:8e:b0:75:9e:90:c6:7e:fd:96:29:43:60:09:
                    b2:df:2b:75:dd:30:ec:0c:e0:40:3c:b3:16:f7:3d:
                    84:85:eb:5d:3f:a9:de:b7:ca:ea:8c:9f:9c:2c:d9:
                    60:c5:ea:8d:3d:7d:ed:1c:8b:57:04:78:1b:46:a9:
                    67:4f:20:3a:f3:a8:e9:b6:7a:74:b0:da:00:18:5f:
                    c2:f6:06:aa:1e:cf:bf:e5:a0:fa:c9:be:8e:33:9c:
                    39:00:14:96:73:c2:b6:47:25:65:ac:0f:7e:54:05:
                    12:69:0a:6e:ac:97:92:fc:d6:21:9d:cc:00:a5:9f:
                    2d:8c:78:fb:6f:a6:17:d3:76:8e:7f:fb:d1:05:6f:
                    57:07:0a:f9:6d:34:8f:87:03:47:33:47:f0:a9:5a:
                    a4:50:7d:ab:45:fd:a1:8c:f5:65:d8:d8:b8:59:16:
                    1b:48:fd:51:b2:c7:fb:2a:a6:1a:d7:1a:cd:df:b2:
                    ea:98:e3:23:65:2a:19:68:fd:2e:35:25:ce:1b:25:
                    90:5b:f3:e5:74:17:d7:06:62:1a:49:e5:b8:e0:55:
                    e5:6c:09:15:b2:dd:d9:1d:84:cb:78:53:ad:ad:f0:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A7:AA:B7:7D:6B:C6:94:97:9B:03:4C:A1:EA:25:1E:C2:EA:89:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/d21b8c42-c53f-3da9-81d5-7475d3bd1836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl

            X509v3 Authority Key Identifier:
                keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f40a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:89:7f:f5:b3:3a:6a:d1:3b:16:bc:60:c3:fb:ae:c2:ef:98:
         1e:53:1f:17:fd:a3:37:d5:5d:85:05:f0:ee:8a:5a:07:bf:f9:
         83:df:54:9d:63:79:b1:d0:af:8e:19:88:0b:b1:6f:02:1b:60:
         e7:03:eb:1b:ce:87:80:0d:82:66:12:6a:0a:89:34:44:6b:48:
         99:df:85:63:ac:44:17:b6:c8:7f:fe:df:c2:f8:1d:ce:e5:38:
         f0:31:e9:8e:3b:e0:a5:d9:b2:0e:6f:4c:47:91:de:15:0f:e0:
         cc:62:0d:88:a7:be:b0:11:f1:70:ff:3e:09:89:12:a9:34:ac:
         96:7d:87:f4:60:c1:19:8b:5b:36:13:e2:ad:9e:42:90:9d:78:
         0b:45:28:92:22:7b:79:7b:54:7f:64:f6:a4:93:17:58:8c:78:
         ca:10:71:65:9f:40:b0:f1:36:06:f1:0f:23:47:f6:74:43:57:
         c4:d8:af:44:29:c6:64:75:17:aa:a7:d4:fb:21:93:e7:78:1d:
         93:3f:75:48:86:78:32:a5:b6:64:c2:33:96:57:87:03:86:7f:
         f3:87:9c:b3:bd:d6:44:ab:76:f3:65:24:d5:1c:49:0b:85:b7:
         6a:48:9a:70:2d:09:55:6e:c6:3c:05:26:9f:86:33:25:ad:6e:
         36:e2:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:27:38 2026 by rpki-client