Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa
File:                     c2382f90-9013-3121-a9e6-6335e705e8d0.roa (raw, json)
Hash identifier:          Fo3TKqtWbLKpJHdLdWsPy3aAW0h00Ubh2b+t2U5XwfY=
Subject key identifier:   04:CD:7B:4A:4B:71:ED:43:84:21:CA:C6:76:7D:55:67:5C:92:0E:81
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584EA79BFCCC92D4146AFFF2D260
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18526
IP address blocks:        2602:fd6f:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:fc:cc:92:d4:14:6a:ff:f2:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=22149c40-4c6d-4849-bbfa-4ee8b264f9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:0e:fc:f5:f3:5c:df:c7:99:ed:30:69:4c:
                    6b:bb:66:a1:c4:2a:03:0d:41:5f:e1:61:99:cf:13:
                    74:1e:90:ae:a7:cd:5f:84:ca:5a:7a:a6:c8:de:14:
                    fe:cf:84:67:23:43:73:fb:72:e0:e6:80:ee:24:35:
                    d6:d1:8f:82:b1:a6:b7:88:85:2c:00:a0:d1:ea:95:
                    16:6b:d3:e6:3c:90:6f:88:6c:d9:04:60:b4:1f:e0:
                    dd:b9:ee:a6:ed:2e:8e:09:3f:33:dd:fa:9a:5b:f1:
                    c6:b7:e5:ca:23:f5:a1:58:80:b4:52:15:95:81:f8:
                    73:9c:2f:14:c1:90:11:af:79:c6:e1:c3:18:da:03:
                    60:6c:75:83:50:d3:59:d0:13:7a:80:db:95:20:ba:
                    d6:10:d3:e6:70:cf:0c:c4:f9:c1:ad:e5:8f:46:72:
                    97:11:56:fd:e6:eb:b7:96:80:fc:09:c4:23:d5:5a:
                    cf:b2:54:cd:ca:55:a1:dc:49:7c:f4:9a:e6:27:ae:
                    67:30:64:98:62:14:5e:fc:83:3d:3b:8b:70:58:f8:
                    16:d2:2d:09:27:37:69:01:53:ac:14:e4:db:91:e9:
                    33:74:79:12:4e:37:51:b6:ab:4f:68:42:ac:9a:cb:
                    6f:45:e6:0f:07:c8:ac:b6:df:19:8c:5d:69:26:ff:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CD:7B:4A:4B:71:ED:43:84:21:CA:C6:76:7D:55:67:5C:92:0E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:0e:41:57:40:b0:ad:38:92:45:77:69:c4:b2:89:35:dc:01:
         29:4e:48:a8:43:26:55:19:0f:28:57:a1:ce:ba:d9:1f:89:e5:
         d4:44:04:1b:ff:fe:9b:6f:5f:24:3e:0e:af:e3:70:f6:9d:5c:
         91:fb:e4:c4:d5:76:50:28:e6:af:41:c7:40:07:87:11:22:b3:
         1c:f6:d1:23:45:ee:63:b1:c1:6f:c3:92:32:cf:80:57:68:b8:
         8c:f4:b7:de:ab:9c:d1:10:0d:48:12:7a:be:48:49:57:1e:5d:
         55:f0:0f:8f:b7:26:13:0e:87:c3:3f:c0:d5:79:e8:b0:ae:d1:
         5c:42:3a:2c:05:0a:d5:9b:85:c9:44:d7:69:c2:be:12:e4:2e:
         de:bb:fc:26:be:cd:69:ce:05:c1:b3:0d:49:d7:cd:53:a1:8c:
         e5:51:b2:fc:bd:d7:7b:87:2e:fc:6e:82:bc:53:39:0c:41:c6:
         8b:01:02:0f:cb:04:7a:b7:26:fe:c1:29:5f:a1:63:50:42:49:
         0f:e3:05:77:41:ac:1d:19:92:84:c1:59:d4:5b:f5:c1:9d:c3:
         6e:5b:39:92:1d:82:a7:db:65:93:50:77:e5:54:f0:e3:c1:1f:
         7f:95:19:3b:da:1b:88:5d:60:8c:7f:5a:85:98:d0:0d:1e:5b:
         c5:74:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:27:47 2026 by rpki-client