Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/7f37b900-7a4d-3d11-83e4-9a77945d7855.roa
File:                     7f37b900-7a4d-3d11-83e4-9a77945d7855.roa (raw, json)
Hash identifier:          E9cPI0WHDlX/eQLKWNl+70RI4BBTDUKiWNZ2dK42WD0=
Subject key identifier:   F8:E5:B8:0F:BA:F5:8A:2E:B1:A1:16:18:7A:C9:B6:8D:BF:2A:F5:0B
Certificate issuer:       /CN=2b41a59d-bac0-456f-82a5-a12979543eff
Certificate serial:       010D0C9F4328584EE6573F77B684F10667351480
Authority key identifier: 72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/7f37b900-7a4d-3d11-83e4-9a77945d7855.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     64515
IP address blocks:        2602:f4fb::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:3f:77:b6:84:f1:06:67:35:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b41a59d-bac0-456f-82a5-a12979543eff
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=60740302-ab5d-4567-a8ae-2c301a03b2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:09:8d:95:fb:c5:39:c4:24:33:c2:d7:d3:
                    32:9d:5e:30:46:3b:68:d1:9a:ae:8d:75:62:fc:3d:
                    82:bc:83:40:11:62:db:02:4c:b5:28:17:d8:da:b2:
                    9d:2b:f3:65:5b:7a:cb:fa:ed:05:b2:a9:c5:34:69:
                    e3:d8:8d:8b:76:c6:c7:87:be:86:25:b7:6d:6e:56:
                    b7:3f:18:4b:ca:bd:98:f8:21:12:72:c5:7a:47:7a:
                    89:1c:4e:a4:f2:c7:57:0e:6d:c8:a4:3e:17:d5:7a:
                    e4:ea:11:5d:f3:2c:c1:fd:3e:d6:b1:3c:90:3b:11:
                    aa:43:a8:b4:f4:2a:61:69:63:b7:6b:7b:57:5d:b6:
                    ad:32:6f:4d:57:d6:1f:da:d7:9f:75:79:4c:76:76:
                    76:9a:b3:bb:2d:b3:76:26:d3:c7:8e:e2:6d:b7:60:
                    28:f4:ba:ea:74:9d:15:57:9d:4f:0c:12:b3:61:12:
                    ac:b4:f7:d6:c4:94:f2:38:bb:ae:ac:25:7b:ac:a4:
                    9b:cc:90:4f:8d:c2:4e:c2:1d:00:77:c5:13:a2:21:
                    37:a3:01:e6:be:3e:91:49:cf:85:99:34:a5:0d:fd:
                    c6:3a:79:75:98:b7:fc:ac:a5:4d:0d:b2:39:35:a0:
                    4d:e4:cf:e3:9e:08:5f:ba:4f:79:2c:c3:89:f2:cc:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E5:B8:0F:BA:F5:8A:2E:B1:A1:16:18:7A:C9:B6:8D:BF:2A:F5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/7f37b900-7a4d-3d11-83e4-9a77945d7855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4fb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:89:ea:51:8c:89:21:78:5b:28:03:3e:51:65:e4:47:8d:d4:
         ba:57:11:f6:9d:4d:0b:96:e0:08:0a:6a:e6:0f:b7:c9:16:47:
         a3:43:a1:8f:15:c7:37:26:0e:5f:71:a4:cf:74:33:94:c1:e0:
         89:cb:c4:27:8d:d6:ee:33:de:11:60:86:c0:b7:68:73:bd:82:
         9d:36:a0:22:ee:b8:69:c2:f3:3c:cb:a2:6e:61:16:df:01:05:
         f1:2d:35:5b:3f:83:df:f5:9b:bb:af:e1:bd:d2:dd:95:92:14:
         f9:bb:e6:d4:48:61:08:fe:10:ba:0f:6c:91:b6:04:8b:ef:e3:
         40:26:a1:d1:35:66:68:43:57:dc:91:8a:7b:f3:c6:f2:2b:31:
         0d:5e:9c:09:5c:c2:60:9a:fa:7c:32:86:dd:64:de:a0:2e:69:
         4c:7c:50:e0:58:05:e0:10:4d:fa:4b:31:9e:c5:4d:52:47:39:
         8e:a0:63:ed:fb:fe:1c:1c:11:70:32:11:7e:27:1e:b9:0f:e4:
         75:82:05:f0:e5:d0:b1:5f:ce:31:0e:76:00:e2:87:d3:ad:3e:
         d5:b7:70:b3:3b:be:35:d9:37:fb:46:5e:89:bd:2e:20:16:30:
         5b:29:07:23:5a:4e:5a:d1:ed:01:f5:ff:03:8a:91:27:d2:d9:
         34:c4:46:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:51:08 2026 by rpki-client