Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa
File:                     bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa (raw, json)
Hash identifier:          3lkGjISTFqVBq0P3ew7vMkHRJ4HepGfvdFrdbp1BbEc=
Subject key identifier:   7A:EB:CF:CD:D3:12:47:BE:FD:9A:6C:80:F9:FF:3D:0C:35:18:91:C7
Certificate issuer:       /CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Certificate serial:       010D0C9F4328584EB8473F529272F5FA0F42EF80
Authority key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     53356
IP address blocks:        2602:f90c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:3f:52:92:72:f5:fa:0f:42:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=85f12e65-4e7b-42ed-83f8-64ff2b59d67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:5c:30:86:f4:a3:77:6b:20:4b:42:9c:d1:
                    54:f8:ad:c6:71:d6:ed:a5:3c:5d:7b:bc:5b:d0:81:
                    2e:a6:39:1e:d4:59:e2:1a:3b:6f:85:82:45:04:fc:
                    9d:2a:c9:fe:06:f4:c5:93:b9:b1:5b:dd:89:74:14:
                    89:c1:3c:2f:72:51:55:c1:38:ee:f0:48:c2:cc:15:
                    e3:0d:80:8c:0b:6e:45:7d:52:65:df:2a:f5:f5:25:
                    6d:3c:fc:12:0c:e0:c4:9f:22:11:29:5c:a6:b2:c6:
                    a7:92:cf:0d:13:f7:b0:0b:18:e9:e3:26:ec:b0:60:
                    5f:06:52:78:f5:79:29:50:cb:b2:9a:d0:5a:53:d6:
                    5e:3a:9c:a4:09:db:23:1e:fa:5c:50:2c:18:16:b7:
                    a7:15:44:d6:a7:43:03:3c:9d:d7:82:44:b9:8d:87:
                    50:cc:ec:33:36:7c:97:f7:37:98:d7:af:d7:b8:fe:
                    27:41:39:a4:56:2e:a8:47:ef:80:eb:6f:e4:dd:8e:
                    f7:d3:d6:b0:c4:2a:b5:51:74:82:af:bd:fd:5b:14:
                    85:2a:7f:dd:8a:ed:af:a1:ab:12:88:ce:20:07:0e:
                    ff:bd:75:d0:7f:52:28:a9:3a:b1:be:b4:76:fc:8d:
                    db:21:5c:bd:c8:f5:fa:0d:40:90:40:37:bf:51:d6:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EB:CF:CD:D3:12:47:BE:FD:9A:6C:80:F9:FF:3D:0C:35:18:91:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3d:55:99:c8:df:32:e5:42:7f:c2:de:60:77:48:28:ca:c8:
         ef:15:74:c7:db:57:98:5e:17:cb:f4:8e:99:ce:59:29:34:2b:
         54:07:6d:e7:7a:77:cb:76:78:3e:f3:89:40:f1:c3:c4:33:e7:
         34:bb:a6:ca:3b:81:f4:c9:ad:12:fa:a3:3f:bb:17:5e:b2:3c:
         ff:ef:8f:80:87:20:3d:49:c7:e2:22:8f:8d:06:00:10:e5:2c:
         93:e7:0e:ff:32:0b:b8:fc:c2:53:4d:82:30:64:43:21:76:57:
         0c:cd:f2:d2:4b:e5:a8:6c:20:6b:14:0d:6a:4f:1b:de:f4:37:
         87:2e:a3:cc:6e:93:03:33:08:7a:bd:dc:b0:64:40:56:a5:6e:
         00:99:a3:c8:f8:24:22:ea:be:e7:ab:95:ee:d7:22:b5:12:6b:
         ea:5d:ee:d6:02:21:81:d8:4b:b8:dc:43:fc:03:41:d2:35:60:
         29:ed:10:91:22:d5:37:4d:70:2c:36:70:03:12:72:ba:9d:ba:
         0b:c3:2b:f0:a8:90:cf:f4:93:75:49:9a:2b:55:82:0f:98:b1:
         4e:94:5a:1d:a9:62:a9:b4:76:f1:17:49:a3:a4:c9:61:8d:a8:
         04:25:8a:dd:66:8a:60:0f:00:01:45:1a:81:2b:23:b6:19:e9:
         6b:52:a8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:23 2026 by rpki-client