Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa
File:                     ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa (raw, json)
Hash identifier:          aMneYNtDw9bqoa0c9G/S6R3O4K2K/gTYRk5n8fLjptI=
Subject key identifier:   A6:61:CB:37:FC:EE:46:14:33:80:31:9C:CD:DF:32:6B:D3:FE:E5:CC
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584E7634D658A1BA7EA9290A8F00
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     199266
IP address blocks:        2602:fd6f:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:d6:58:a1:ba:7e:a9:29:0a:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=87a2d736-a0ad-4e63-add7-4f93ff19886c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bc:51:80:d3:44:44:e7:11:f3:5a:9b:7a:65:
                    9e:7e:c8:23:03:8d:15:76:f3:b2:17:05:0c:06:67:
                    ad:82:81:ca:0b:d9:9e:0f:83:c0:e2:93:43:1d:17:
                    a5:c5:b8:88:0e:7f:e7:4f:b2:e7:20:b5:1c:08:d4:
                    ec:48:a2:5c:4c:fc:2a:4d:c3:47:e8:31:a0:75:6a:
                    b5:17:62:91:9f:e5:1e:43:4b:71:d6:3e:2f:36:c6:
                    3d:d4:c3:7b:83:34:cf:94:0c:ea:94:d9:9a:09:e5:
                    26:fe:48:cc:4c:13:7a:26:44:68:1c:1a:d9:ae:16:
                    c8:00:a2:94:d1:d7:d8:2b:e2:4e:22:c0:5c:2d:e3:
                    f7:29:7b:49:f9:02:aa:28:45:c7:16:d4:2d:2e:fe:
                    bb:03:e0:80:50:de:e0:b3:1b:4f:29:13:82:c4:a2:
                    2f:15:0b:0f:3b:76:be:d6:65:9c:4d:56:ae:72:90:
                    d5:8a:21:f0:0a:88:66:67:41:c7:68:48:79:5b:d8:
                    53:d6:75:b2:a9:a0:94:cc:29:a8:3e:24:66:d3:88:
                    d2:2e:de:b6:17:74:2b:c6:f4:a9:45:64:59:18:9d:
                    a4:53:a9:e5:41:fe:d7:70:7f:0d:59:f6:15:56:ed:
                    36:45:86:5f:37:57:82:37:58:d6:24:ee:46:97:5d:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:61:CB:37:FC:EE:46:14:33:80:31:9C:CD:DF:32:6B:D3:FE:E5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:81:0a:fb:32:ad:1f:30:7c:7c:08:9e:8b:c8:da:80:d8:
         93:14:96:8a:e6:d9:bf:34:ff:4c:22:5f:6a:2f:0e:9e:16:09:
         cb:51:1b:e1:d4:2d:a9:e5:a8:15:1b:5e:e5:a1:d1:c7:cd:6c:
         1c:99:2f:17:4c:01:33:28:6b:4c:41:bc:d3:e9:f2:20:67:f6:
         4e:ba:11:22:08:6e:48:8d:09:18:8d:aa:62:e0:64:06:af:cb:
         08:3f:a6:d2:c3:a4:80:d8:f4:37:54:65:e2:d6:78:32:ac:46:
         e4:72:bf:bd:3b:d7:7f:fe:38:46:a7:ca:32:95:59:c5:e6:1b:
         3c:f5:ef:2e:14:e7:27:d9:ee:00:96:d9:15:ce:a2:43:ec:b7:
         04:22:e6:2e:20:66:52:d1:37:ad:24:ea:f8:cc:fc:45:fd:c4:
         1e:42:04:54:70:52:7e:6b:09:96:8e:b9:77:43:7c:f1:98:58:
         47:dc:d4:bd:d4:b2:0e:7a:59:84:c2:6e:8c:7f:02:f5:c5:64:
         fa:a5:a2:59:98:96:87:88:cb:63:7d:3e:2e:a9:59:21:23:bb:
         e9:c1:2a:25:59:dd:97:cc:bd:8d:e3:dc:c7:5f:30:dd:85:1f:
         b1:ab:ee:e3:6f:97:78:44:c5:3b:60:4a:6e:61:d0:f6:2a:b1:
         f0:ba:90:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:59:29 2026 by rpki-client