Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa
File:                     123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa (raw, json)
Hash identifier:          HhDXJtNSQamV3yQehRIes7tTdLMxCCTFNDfPWltME60=
Subject key identifier:   AB:52:89:6E:8A:CA:C5:D8:96:06:A7:E9:BC:BE:13:B7:C2:0D:30:2C
Certificate issuer:       /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial:       010D0C9F4328584EE38CAB1D7F4E90216969AE80
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     13737
IP address blocks:        2602:f895:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:ab:1d:7f:4e:90:21:69:69:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=bb0198dd-f1b6-4e59-a8c8-dbe59068b589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:94:64:2f:3f:e0:f6:83:10:fe:59:fe:1f:
                    7b:e7:7f:f5:48:c4:67:85:87:e2:b7:c5:5e:23:85:
                    bc:2b:58:45:87:77:92:89:6a:1f:a8:f9:56:10:5f:
                    22:1e:a4:80:b9:2b:95:7c:04:ab:d9:43:08:22:ea:
                    f0:3e:56:fb:59:16:99:bc:6f:ff:af:e1:93:1a:68:
                    e4:59:f1:fa:7c:41:2d:8b:40:1f:a7:4a:dc:b9:de:
                    88:69:67:01:58:45:20:92:21:66:e4:ae:c4:bf:a4:
                    ae:86:4a:de:91:e4:72:60:59:02:f2:23:f1:e3:fe:
                    4e:94:d8:cf:37:63:58:07:31:10:3e:8a:02:93:5c:
                    3a:e1:c6:6b:f0:aa:1d:ae:8c:ea:ea:db:c3:5d:4a:
                    51:70:ef:03:19:95:fd:f2:bc:1b:c9:7a:cd:49:38:
                    a9:03:1e:24:f1:43:61:13:ee:55:be:fb:70:75:13:
                    0f:1a:96:02:0e:78:0a:93:57:73:d1:c4:8a:08:2f:
                    cf:84:20:b4:5b:5f:6a:af:3a:74:67:bc:8e:9e:2b:
                    6c:59:73:ae:9e:c2:7e:b7:c7:52:94:4f:c4:e1:b0:
                    96:a0:3d:28:f4:62:2b:ee:f8:cc:24:39:0f:c6:99:
                    27:e6:2a:cf:a1:6e:6e:05:5c:e1:83:ee:84:85:f3:
                    1b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:52:89:6E:8A:CA:C5:D8:96:06:A7:E9:BC:BE:13:B7:C2:0D:30:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f895:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d8:77:0a:25:30:9c:22:47:ca:b6:27:e6:51:f7:08:7d:a1:
         4c:32:f3:11:cc:9f:76:33:ea:f9:52:b9:c4:11:83:cd:a1:76:
         16:ff:8c:34:5a:e0:52:6f:6b:d8:1c:d1:02:a6:c0:25:7c:ed:
         e5:fa:06:cd:0f:73:91:99:15:49:2f:5e:00:44:1e:30:a9:b5:
         cf:51:2f:18:cd:df:10:c1:a9:c2:13:93:60:4d:1d:f6:98:4e:
         9f:70:89:6b:e7:e9:9d:0a:23:52:a1:7d:04:e9:87:e0:b0:b3:
         c2:a8:92:bc:bd:95:31:21:ad:14:dc:c7:62:c9:f9:65:9a:da:
         46:86:0e:3c:cc:8e:3f:8a:7f:de:a5:eb:67:bf:df:18:0d:a8:
         f9:e6:27:b3:16:ec:45:34:92:61:86:9a:1f:33:30:10:d9:a9:
         48:46:ed:de:18:62:ef:22:57:fb:db:49:1b:31:ca:c4:00:68:
         59:91:d9:01:e2:cc:7d:df:60:6a:bf:d1:03:24:3c:af:a7:fd:
         76:72:4e:6d:22:81:05:e5:9d:d3:62:d7:6a:59:4c:d0:bc:d3:
         31:cb:4b:a2:a7:37:3b:69:79:86:28:1a:4c:3a:cb:cc:99:d9:
         f5:6a:e8:39:bf:09:b5:c2:7d:82:f6:74:ba:c3:00:a2:d7:51:
         22:3b:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:27:03 2026 by rpki-client