Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/685bffdf-ca5d-3e68-bdd6-6b2ec2c7a863.roa
File:                     685bffdf-ca5d-3e68-bdd6-6b2ec2c7a863.roa (raw, json)
Hash identifier:          DKXSkMtir6YTnvwuYZx7yXzeKgtoDYyACesUvrnz6VY=
Subject key identifier:   73:C6:91:65:9F:89:80:1F:B0:5C:FE:43:22:8E:F9:1D:CA:49:03:D3
Certificate issuer:       /CN=ac0c72ee-a963-4924-8dd0-a48579578b1b
Certificate serial:       010D0C9F4328584F89A87DFC03A60B2849DA8260
Authority key identifier: 8F:35:48:6A:6F:2C:E2:E5:11:9B:D3:4E:C3:FB:F2:00:1F:EC:A8:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/685bffdf-ca5d-3e68-bdd6-6b2ec2c7a863.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     400042
IP address blocks:        2602:f7ca::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:7d:fc:03:a6:0b:28:49:da:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0c72ee-a963-4924-8dd0-a48579578b1b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=e28d81ff-3afe-4485-bc58-9df7d0e67fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:ed:61:c0:8a:d6:6e:c7:4e:b4:f4:1e:a3:
                    48:2e:c0:4d:04:b5:26:fc:4f:c5:d3:e2:db:dd:fd:
                    98:23:7a:61:65:e9:34:68:01:62:a0:c5:30:54:c3:
                    6b:c6:ca:9c:c3:28:3c:e6:f4:8e:29:f5:93:5a:a2:
                    9d:be:e6:ae:d5:cc:4b:7f:86:2d:d8:8b:fa:9d:fc:
                    02:48:49:6d:af:c9:52:6e:17:6a:31:28:a0:b7:b0:
                    94:53:2f:00:d3:50:6f:c4:17:05:d5:24:c4:7c:f3:
                    ce:05:80:14:83:c5:57:b1:ca:36:a1:55:10:de:75:
                    0f:da:3b:99:a9:27:c2:5f:3b:16:5a:b4:0f:2f:ad:
                    1b:08:b9:33:2b:85:e2:39:31:7f:c9:09:cc:c3:36:
                    0f:9e:bf:7e:35:45:a7:19:d6:7b:60:81:b0:3c:f0:
                    fa:5a:16:d7:46:46:21:f0:88:f7:d4:b0:54:1d:6e:
                    7f:a4:5d:be:10:db:43:8b:53:69:87:a7:ae:c9:36:
                    62:34:98:e0:3a:9f:34:37:f6:29:10:c2:22:3e:de:
                    f2:1b:20:4c:c8:25:da:8a:70:8a:58:75:3c:46:24:
                    b4:d2:df:dc:d7:b7:ee:74:e1:6f:45:22:e9:b7:c3:
                    e4:5f:9b:32:97:df:ca:25:c3:ec:ad:b8:67:90:ab:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C6:91:65:9F:89:80:1F:B0:5C:FE:43:22:8E:F9:1D:CA:49:03:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/685bffdf-ca5d-3e68-bdd6-6b2ec2c7a863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:35:48:6A:6F:2C:E2:E5:11:9B:D3:4E:C3:FB:F2:00:1F:EC:A8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ca::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:71:6e:cc:6d:a4:89:12:f8:12:c7:89:10:78:8e:b8:7f:
         fc:48:34:dd:46:68:f8:0a:54:34:eb:6d:61:0b:9a:91:6a:be:
         77:fa:f0:93:27:79:25:f3:7c:ba:e1:c5:9c:3a:43:6e:93:b8:
         dc:90:ac:e7:c1:25:4a:10:f1:0e:00:76:b8:a7:8f:16:41:f9:
         df:f8:ff:ca:42:24:83:cf:dc:ab:b1:66:f4:5e:9f:bc:27:9a:
         34:12:cd:4f:aa:2b:2b:62:9d:b6:8b:a0:2f:b4:f0:7b:12:83:
         df:26:f0:74:57:88:44:51:3a:d4:b3:67:b2:b4:91:8e:74:d8:
         eb:eb:10:22:b9:73:09:74:37:ab:78:4e:fe:c7:b2:f9:72:14:
         83:50:41:df:d6:b0:79:88:6d:d5:46:c6:67:79:82:f5:f2:f6:
         88:5b:42:4e:84:45:1a:5e:61:7f:32:31:53:9c:12:8d:c7:bb:
         d7:c7:4b:df:ee:c2:d3:96:30:ae:05:9a:1d:19:a7:32:b7:97:
         6e:8b:06:1a:35:7a:20:49:eb:ee:a2:52:d6:00:16:f1:d0:ff:
         04:39:94:5b:1a:6a:c9:c6:4e:82:62:a1:c5:58:2a:0f:78:4c:
         c6:8d:8f:ea:a1:6d:2b:6b:51:0d:33:ae:e3:3e:22:e1:c7:ec:
         08:e0:d4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:50:33 2026 by rpki-client