Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/f644288d-539b-3b46-be54-fcf23c27884c.roa
File:                     f644288d-539b-3b46-be54-fcf23c27884c.roa (raw, json)
Hash identifier:          8HOhijzqxKY4qhr61nuuQ8FTiTPK3dXprmK0IwT31ZM=
Subject key identifier:   82:71:D8:4E:7E:77:AB:14:2E:B1:87:A2:CF:C6:D5:0E:D8:9C:25:5D
Certificate issuer:       /CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
Certificate serial:       010D0C9F4328584F1467914BDFF9BBE057EB1400
Authority key identifier: 7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/f644288d-539b-3b46-be54-fcf23c27884c.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     402239
IP address blocks:        2602:f973:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:91:4b:df:f9:bb:e0:57:eb:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=50120fe6-f4c3-4430-b734-1daf1243fa41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:9a:8f:52:2f:2b:db:fb:4d:eb:bf:dc:d5:
                    1f:6b:b7:bf:8c:43:48:4a:0e:a3:d4:43:eb:26:7d:
                    96:af:15:45:78:0d:bc:b4:78:24:74:a8:dd:ec:3e:
                    7e:df:50:22:ad:55:46:b5:57:74:72:e0:a5:33:86:
                    22:80:dd:c2:da:fb:bb:a4:75:d8:3f:9c:08:6c:9c:
                    97:cd:6c:5d:09:1e:78:52:02:cb:27:b8:71:a0:b6:
                    43:23:cc:9b:56:41:db:7e:07:fe:e9:a2:a5:a4:82:
                    d0:b8:c6:b2:e4:03:00:ce:08:87:df:11:33:26:06:
                    b9:05:3b:b1:66:8b:a7:a4:76:e9:98:84:21:35:14:
                    00:6a:35:af:da:ed:51:b3:86:5c:0a:d8:69:61:c6:
                    25:c6:73:f0:f1:dd:08:ca:d1:d6:e9:f1:11:8a:95:
                    37:55:85:a4:22:6e:78:95:ea:fb:f6:1c:00:b7:0e:
                    46:bb:bf:9b:fb:c7:a6:a2:3e:be:8d:ed:b4:60:0d:
                    da:3a:a8:2a:53:5a:6b:4f:2e:0b:5a:32:76:14:2c:
                    60:5c:33:5e:00:1b:43:5f:9d:fa:f7:4d:b3:fe:fe:
                    8c:e3:e4:f6:7e:c1:d6:1d:8c:e5:ef:c4:bf:0f:2d:
                    d6:2f:13:ab:64:c5:10:8c:06:e1:fa:ac:e8:77:52:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:71:D8:4E:7E:77:AB:14:2E:B1:87:A2:CF:C6:D5:0E:D8:9C:25:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/f644288d-539b-3b46-be54-fcf23c27884c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f973:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:21:2b:b5:0c:67:ab:1e:a9:7b:7a:94:cc:6c:d2:9a:c5:f8:
         bb:96:3c:c8:66:93:f9:6e:d6:91:e9:0c:fe:89:74:64:35:77:
         78:da:bc:5e:20:4c:d4:20:b7:66:d9:d8:44:cf:5b:3d:d8:db:
         55:5d:1d:3e:35:c9:88:c6:ac:d5:e0:26:25:89:ce:a4:8d:d7:
         03:62:87:3c:85:2d:e6:64:70:4c:c3:30:d9:e5:58:ef:b6:c0:
         f7:1d:27:51:83:54:91:ae:eb:89:5f:81:19:96:bc:54:c1:e1:
         a1:5c:66:8d:3e:b4:4f:41:a1:24:e1:a6:cf:03:16:df:a6:e7:
         a5:9a:25:e0:86:7c:f3:3f:94:5b:fc:8c:65:3f:fc:8d:4d:68:
         c9:aa:ef:ef:2d:51:66:c7:2b:66:6f:cb:68:23:fe:97:e8:0c:
         e1:c7:cb:98:6f:53:55:43:1d:6a:f0:4b:35:be:8f:6b:3e:96:
         73:ad:54:a4:ea:c5:41:c9:3d:6b:c9:27:83:1e:9f:17:5d:8f:
         02:8e:5c:73:ab:d1:c3:3e:2e:b4:0b:81:c5:1b:26:ad:c1:4b:
         9e:30:bb:76:05:f8:53:e9:74:15:4c:9d:55:cf:a7:34:d7:8b:
         00:9a:df:ce:3c:4e:f8:86:07:6c:ba:7c:83:19:fb:7a:a5:52:
         04:69:ec:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:56:21 2026 by rpki-client