Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa
File:                     553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa (raw, json)
Hash identifier:          RSe0c0abykUeVMhnjx0s4eImXABW6iNQU1DofwO6Nos=
Subject key identifier:   86:4B:43:2A:07:E5:92:2D:A0:C5:08:A0:2E:01:8F:13:52:FD:C1:47
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584EC0A72913655BD34254986440
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     39618
IP address blocks:        2602:fd92:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:29:13:65:5b:d3:42:54:98:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=7769c4f5-95a7-4c68-afa2-393517de2651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:6d:42:15:82:88:10:31:fd:51:52:a6:c5:
                    4f:86:a5:fa:6a:8d:94:39:d3:93:63:59:39:b1:b7:
                    97:e5:cb:d6:be:46:83:2e:7a:42:1c:f2:8e:de:06:
                    92:ec:5b:29:86:b0:e3:ef:d2:05:92:5f:9b:8e:8d:
                    b9:0c:57:b1:00:50:ee:35:16:9e:bf:e5:ca:ab:54:
                    b1:c0:58:b2:aa:6f:31:1b:03:d3:d1:62:62:1e:1d:
                    ec:e4:ec:1f:f7:93:07:b9:c9:09:61:b5:85:d0:f8:
                    a6:34:56:63:3c:ea:f9:5c:e9:39:3b:10:11:52:dc:
                    7c:64:50:5b:6b:0e:a1:98:07:60:ea:40:a9:26:31:
                    b8:51:5d:b8:ff:09:a8:c5:f7:bb:0b:49:57:29:6d:
                    46:79:fd:69:7f:e5:5c:20:b2:50:8f:d7:16:57:9c:
                    07:2c:25:67:d8:4c:95:9c:fa:75:85:18:55:22:ea:
                    6a:f5:54:65:11:f1:b0:5e:f4:36:3f:ac:0d:1b:0c:
                    7c:54:80:74:53:04:55:bf:bc:5a:3c:24:5f:6b:8f:
                    7a:0f:b7:22:ab:b1:50:9c:85:e2:62:68:af:52:b9:
                    13:05:90:60:84:32:00:09:af:f6:46:e3:ed:cf:e3:
                    7d:5d:b7:f9:c7:c7:b1:84:9c:94:93:2e:a3:68:20:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4B:43:2A:07:E5:92:2D:A0:C5:08:A0:2E:01:8F:13:52:FD:C1:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:f1:b1:52:63:0d:38:2b:be:cf:b9:49:53:28:22:fb:14:
         05:f0:62:12:2e:14:5a:dc:51:6d:b9:70:6f:16:4b:70:8c:ec:
         df:85:22:1e:35:4e:ea:d4:b8:ee:42:1a:ec:4f:f9:cf:79:17:
         08:95:c2:ea:92:c5:e6:38:11:b1:ce:7a:4a:cc:84:0f:ff:6e:
         49:c5:3b:38:55:fa:17:3b:43:a7:38:79:ae:42:b7:06:15:01:
         2d:4f:ec:e4:bd:b2:6c:2a:19:ac:29:91:d2:2c:42:5f:7a:e1:
         5b:fc:c4:3f:e4:4c:18:ae:b3:53:c9:9d:d8:10:95:40:f7:4e:
         12:1e:dd:31:0c:1b:80:a3:8e:c1:d1:56:a9:e7:b5:9d:f1:48:
         53:2e:bb:20:63:89:24:5a:35:63:54:19:36:24:74:7b:13:16:
         d2:b6:01:23:c9:28:f4:29:91:c8:52:50:3a:15:a8:5c:8d:9d:
         cc:88:40:55:fc:98:b9:08:00:df:90:4a:76:47:2b:af:fd:d1:
         bb:52:1c:d7:c2:9e:44:ee:f8:35:ea:e9:25:b3:0d:47:d4:e9:
         ca:9c:42:c2:a6:5e:09:a1:74:d4:d4:68:b7:c2:12:68:af:cc:
         2a:16:61:75:fb:e0:3e:bf:d8:58:d3:b7:0a:95:9b:1c:ca:c6:
         c7:db:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:15:49 2026 by rpki-client