Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/d12dbd8b-698b-3b83-9ff0-490aa642d39f.roa
File:                     d12dbd8b-698b-3b83-9ff0-490aa642d39f.roa (raw, json)
Hash identifier:          RNMljf9BJzNRd/IzxogOBjb9cYpoww5Nq/wevXJn1Co=
Subject key identifier:   3B:87:DA:4A:85:E9:56:E5:69:F1:8E:BD:E3:CC:6D:E9:F3:EA:E8:62
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584EE7BCA65B78514934CE5D6080
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/d12dbd8b-698b-3b83-9ff0-490aa642d39f.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     39618
IP address blocks:        2602:fd92:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:a6:5b:78:51:49:34:ce:5d:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=30eae8aa-8623-4c67-a57b-fc0dd0c31710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:ea:e8:f8:57:d5:c3:d9:82:7c:71:db:e3:
                    ec:1d:20:fd:57:9b:be:c7:50:b1:d7:74:79:0a:f8:
                    47:5a:28:a3:72:31:06:b0:34:67:70:25:18:fa:3a:
                    18:6d:a0:f2:ba:86:07:de:ae:c2:7b:b7:57:83:e0:
                    18:d5:e3:2e:6f:17:28:f4:8b:c4:eb:61:44:0c:1d:
                    60:74:0d:a3:f1:9e:39:19:ea:05:e6:31:a9:48:c8:
                    b5:3b:93:ba:09:45:3c:87:c8:1e:a0:9e:87:94:3f:
                    0d:a0:41:5f:82:04:c6:66:a0:4f:f5:d2:8c:43:c7:
                    15:a5:a7:35:ea:12:93:84:04:fa:41:cb:2c:8e:b7:
                    09:77:0a:cb:68:70:0e:2a:1c:b3:69:1a:1b:68:b2:
                    8a:24:d6:fb:b2:ce:05:e7:e2:0e:dc:68:b3:be:9d:
                    4f:d1:20:af:f6:54:5d:1b:a3:73:92:95:8f:6b:7a:
                    73:ec:18:ab:4b:82:df:6d:47:e6:81:fa:24:d4:26:
                    08:ff:c5:46:cd:a0:9a:36:a0:de:84:c1:c0:60:08:
                    d0:85:38:fe:3b:5f:b5:6d:43:47:c5:44:f0:f0:46:
                    b4:d0:48:7f:45:c1:47:aa:1e:ec:f6:d6:ee:44:ba:
                    9c:e5:3e:38:81:f3:a0:82:b6:56:41:90:0e:d2:37:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:87:DA:4A:85:E9:56:E5:69:F1:8E:BD:E3:CC:6D:E9:F3:EA:E8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/d12dbd8b-698b-3b83-9ff0-490aa642d39f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f5:44:79:a6:90:f3:28:00:2c:f9:2c:5f:8b:a1:5e:e0:d2:
         f0:0d:d7:d6:58:7e:bf:34:aa:ff:8c:25:4d:e9:27:2e:32:94:
         70:ac:df:7c:f1:37:95:f0:91:0a:29:e0:79:75:15:24:8b:ab:
         b1:f6:18:75:ff:45:ca:59:28:a1:a7:23:5e:c9:f5:cd:a7:86:
         40:ce:74:07:64:de:a1:28:85:5f:08:7d:bd:51:99:8f:ef:57:
         0a:4a:9f:52:7c:35:11:e5:4e:46:3f:b7:fa:00:79:87:5b:a2:
         3a:03:fd:7f:81:19:17:27:0e:70:f3:95:18:1d:88:1b:71:26:
         79:e5:b4:dc:3c:23:c3:d5:2a:7c:b2:b4:f6:39:c4:74:66:a8:
         2e:3d:21:84:e2:6d:87:05:e6:11:d9:2c:58:c2:79:c3:9a:69:
         cd:68:ed:d0:ed:15:35:c7:a9:fb:a7:8e:6f:7b:24:e3:de:94:
         dc:80:b8:88:26:7f:f6:e9:88:ef:0d:72:55:a9:b6:d9:80:71:
         4b:c9:bd:90:15:d4:59:14:e1:21:df:8f:52:30:6e:4d:01:04:
         00:fe:2a:96:4f:cd:a8:57:40:44:f4:8b:5a:3f:24:ee:c6:d6:
         28:90:91:da:91:09:e3:ba:f5:cf:64:bb:bf:b3:f1:67:16:15:
         fe:0c:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:29:28 2026 by rpki-client