Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3a150253-546d-3466-be6d-b98a368a2cdc.roa
File:                     3a150253-546d-3466-be6d-b98a368a2cdc.roa (raw, json)
Hash identifier:          g3MFu0KthDrWW7ykLGemR/w0AwuC6QNglTaHah2x7Xk=
Subject key identifier:   ED:F6:E0:D4:07:65:7A:5B:FC:25:1D:9A:53:5D:9A:6F:89:6A:8E:83
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584EA79A1059594D382927BD55C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3a150253-546d-3466-be6d-b98a368a2cdc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c89::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:10:59:59:4d:38:29:27:bd:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a93d4337-6943-4e2d-8a69-5bc8fc01b9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:af:3d:6a:d4:c8:d6:84:0a:22:75:be:e0:3e:
                    18:22:49:c8:62:94:4a:38:a3:11:85:2e:13:c0:35:
                    19:fa:69:5e:16:c0:7c:9e:e9:c4:e6:fc:ba:eb:28:
                    a7:05:84:a1:c3:95:35:10:f4:92:6f:16:08:d4:d9:
                    49:d6:cd:f9:66:26:f1:ca:0a:b1:f1:5f:8d:c0:46:
                    95:82:04:67:89:b6:6f:d9:bd:e3:00:da:a4:9d:49:
                    c5:8b:fd:b8:fa:5d:7b:76:96:c1:3d:8b:00:d2:5c:
                    f5:56:74:38:d4:d0:47:db:4b:46:7e:03:e8:9c:b8:
                    41:16:b1:c9:b7:af:71:9f:44:ea:83:5d:f4:63:94:
                    a8:76:fb:0a:d2:bc:d9:ff:bc:77:96:72:87:18:0f:
                    5b:ad:15:d5:9d:07:17:01:97:39:99:cb:df:05:d0:
                    cf:7a:a4:4a:d6:6b:90:a6:1d:b7:93:8f:36:3a:05:
                    42:a5:b5:7c:4a:44:49:e4:3f:6b:87:7d:82:d9:dc:
                    30:fe:00:f0:ef:b7:7e:b0:e6:eb:fb:28:0e:cc:a5:
                    be:41:8a:97:ed:b9:c4:2f:5b:b5:f7:cd:0d:f2:55:
                    94:7f:92:06:bf:64:ab:1e:2a:fe:76:22:30:35:3d:
                    98:be:4a:e3:92:1b:b9:fe:83:7a:c1:ce:9e:fe:54:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F6:E0:D4:07:65:7A:5B:FC:25:1D:9A:53:5D:9A:6F:89:6A:8E:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3a150253-546d-3466-be6d-b98a368a2cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c89::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:70:69:13:56:4d:a0:9e:c8:15:5c:da:88:09:46:3e:a8:
         9a:86:6b:38:fb:ec:bc:45:a3:5f:60:21:03:01:72:20:f7:f6:
         df:a2:86:9f:bd:51:ee:ca:ac:fb:45:f6:8d:d8:84:f4:c3:62:
         90:80:52:4c:ed:a5:f3:9c:2e:55:ac:60:f2:3b:38:47:34:4e:
         3e:e0:2b:8e:71:bb:2e:5e:54:00:e2:23:77:51:8c:0b:75:24:
         70:1d:f0:9c:0a:f7:62:a3:3f:6a:cc:2a:04:73:14:8e:3b:85:
         1f:85:10:1e:5b:26:0b:2f:78:91:9d:6b:02:79:e8:7c:1a:29:
         cd:e4:3e:67:b7:a8:fc:41:35:e5:c4:69:04:40:11:d3:71:8b:
         47:67:1b:8d:1e:fc:1f:f5:37:c3:6a:f1:8b:f6:a5:bc:5d:71:
         a8:a7:2a:5b:74:ea:c3:81:0a:53:c2:da:54:a6:1e:06:7d:81:
         58:ce:b7:60:8d:6c:14:9a:28:92:48:c7:a7:94:12:ea:4f:f4:
         41:e6:0c:18:d7:81:bb:4b:49:38:d5:56:33:10:8a:8b:0b:0d:
         8f:88:33:fa:23:77:9e:c2:8e:d8:04:a5:7f:14:ef:f1:d3:5f:
         de:ba:ff:a0:36:d8:92:8a:19:49:4f:b3:e8:91:a8:9d:46:7d:
         22:7c:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:14:19 2026 by rpki-client