Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
File:                     8772ccd6-b189-3648-86b4-02b297d28b4d.roa (raw, json)
Hash identifier:          kEieWiJjGgVq8zDs9cec2L8K/IMYvkWEK3T9tNFD51M=
Subject key identifier:   EE:2D:20:8A:4C:AD:36:2B:D0:68:16:E3:64:AB:27:30:20:95:C6:60
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584EE0C1EB9E722DDFCAB22CBBE0
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     19168
IP address blocks:        2602:fd23:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:eb:9e:72:2d:df:ca:b2:2c:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=5a0741ff-6782-4ce9-b31c-b38372c2e4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:4d:6b:4f:0c:e9:34:93:4e:83:22:8e:03:
                    d7:56:e8:6d:14:50:4e:0f:c8:5a:1d:07:50:88:59:
                    b2:05:b8:c4:34:64:a4:48:77:d9:85:19:ae:6f:e9:
                    05:d9:8c:63:ef:e0:78:49:73:44:32:17:54:e3:9b:
                    15:59:03:fc:a0:8b:8c:b3:a7:34:2d:8e:70:60:e8:
                    3d:e7:84:a5:70:82:ec:8c:1c:e4:f0:68:3e:29:9b:
                    25:53:91:72:62:3b:58:29:96:12:7b:af:c8:88:36:
                    0c:f5:d2:3d:61:d8:92:05:14:87:71:78:73:ac:2f:
                    ce:74:36:a6:71:ae:74:00:33:e8:18:db:0d:7a:e9:
                    8e:24:ae:4e:c9:3f:f0:8c:97:f6:40:69:ec:f7:02:
                    a8:78:d7:cd:8b:0e:44:75:7d:e4:06:d7:7c:90:37:
                    f7:6b:3d:16:4c:e3:4e:d2:92:eb:c9:d6:6b:93:bc:
                    1e:29:3e:b2:cd:11:8e:09:ed:a3:7c:fd:90:e1:af:
                    62:ba:49:3a:00:5f:d0:76:b7:ad:b7:01:a7:11:d8:
                    0e:76:18:2e:72:71:26:17:0f:93:f6:ab:ea:29:5c:
                    d1:69:1a:ba:7a:14:92:c4:4f:2c:21:fa:70:91:2e:
                    28:be:ab:c1:5f:53:13:40:e3:f6:44:e1:9d:ee:c7:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:20:8A:4C:AD:36:2B:D0:68:16:E3:64:AB:27:30:20:95:C6:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd23:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:cf:97:a5:ce:c9:c9:9e:22:00:1b:77:91:8b:36:9e:a9:d5:
         20:92:6c:48:0f:c4:b6:a3:0b:50:cf:7c:12:4e:cf:3d:bf:79:
         83:58:5b:9b:fc:10:16:5d:4e:31:6e:d0:73:cf:3c:7b:12:96:
         5b:fb:bb:c0:4b:64:2c:33:55:35:73:c7:7d:e5:93:e5:b6:c3:
         33:71:e2:8b:9f:4f:30:27:c8:64:b4:ca:8a:30:8a:71:ac:44:
         67:63:e8:c7:b5:07:da:29:a3:cc:20:7e:a5:a1:85:e4:1d:4b:
         d6:36:be:5c:2a:61:34:36:51:be:4f:fc:df:1f:47:5f:88:72:
         fc:c0:21:fb:27:79:e7:99:f3:d1:9b:4c:5e:e9:1f:be:17:ce:
         3d:6e:08:ee:e5:22:76:ba:a1:83:e2:c8:9e:0b:44:84:5e:7f:
         d4:d3:66:78:66:4c:7b:d7:9f:1f:65:37:27:cd:12:dd:04:cd:
         28:f2:cd:37:fb:9a:bd:ce:c3:c6:c0:d1:b2:a1:86:9b:6b:92:
         a3:c9:20:f1:3e:0d:07:c1:86:bf:21:6e:61:e2:a9:32:7d:21:
         af:ac:c5:06:d8:9c:73:5f:2a:81:ef:5e:b2:c8:c0:5c:af:01:
         4d:db:1e:16:6e:27:a8:04:30:cc:c2:53:ad:9c:69:c4:7c:9b:
         30:ff:d4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:48:56 2026 by rpki-client