Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/d4064001-1a7a-386f-9235-181916e7aa4d.roa
File:                     d4064001-1a7a-386f-9235-181916e7aa4d.roa (raw, json)
Hash identifier:          USE7RoBxstHOO9p3FaF4CrLvxkduVpIuhH0lJ1HHUFI=
Subject key identifier:   A5:0C:02:BA:D5:0E:55:5D:EC:73:FF:EB:70:D9:D5:84:B4:56:21:B4
Certificate issuer:       /CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382
Certificate serial:       010D0C9F4328584EE22738E69A06BC7359E8B800
Authority key identifier: 5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/d4064001-1a7a-386f-9235-181916e7aa4d.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     402004
IP address blocks:        2602:f54e:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:38:e6:9a:06:bc:73:59:e8:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=06c4f7bd-62de-4800-a4f7-c88847e26ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:b1:8e:f9:45:31:32:1d:9e:4b:24:54:79:
                    d5:37:55:0e:09:a3:74:b6:5c:51:95:ca:c3:eb:8a:
                    1f:1d:72:92:f2:3f:3a:78:d6:ad:26:19:d9:d1:18:
                    3a:7f:a0:3e:1f:b3:35:35:a3:95:61:62:83:f3:f0:
                    86:79:4a:c6:ed:92:02:c2:eb:d5:ed:d1:53:46:2d:
                    71:8b:e8:4a:bb:41:6e:ca:00:a2:a3:4e:4c:4e:4b:
                    45:35:7e:95:03:fd:98:a9:55:98:a2:6f:ad:5e:30:
                    4b:3d:c1:17:fa:5a:f1:22:a5:22:90:a4:be:53:b2:
                    3b:d2:43:e3:86:2d:ff:fc:07:b1:c2:13:57:22:56:
                    ec:cb:51:7d:f2:54:f2:d4:69:b9:9a:4f:d3:b5:5f:
                    7e:11:55:ba:d3:ee:14:b3:58:0d:02:fb:6c:83:c1:
                    d0:83:d9:dc:59:bf:37:09:0a:b7:0a:50:c9:b3:b9:
                    d4:d5:51:65:32:89:65:91:a0:47:4e:56:04:70:cb:
                    42:1e:d7:07:f6:73:88:5d:11:e2:d3:39:48:ad:95:
                    bf:f4:82:95:44:ab:2c:ef:84:1d:c1:50:4d:b8:89:
                    cc:d3:ad:e7:1f:01:dc:03:29:84:62:21:fa:c0:1a:
                    63:e4:50:a0:7c:a1:04:08:a9:3b:38:c2:0c:13:2b:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0C:02:BA:D5:0E:55:5D:EC:73:FF:EB:70:D9:D5:84:B4:56:21:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/d4064001-1a7a-386f-9235-181916e7aa4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl

            X509v3 Authority Key Identifier:
                keyid:5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f54e:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:f8:09:05:62:a6:af:eb:86:dc:e0:28:e6:43:6b:b8:b9:
         74:7e:99:06:56:cd:96:39:9c:a9:d5:9e:81:12:be:16:00:71:
         07:92:91:78:a1:28:11:ca:f3:6d:91:b5:46:72:c9:1d:65:62:
         b2:b0:80:8a:a7:c8:76:93:d9:a5:12:ff:37:fe:bc:8f:3d:09:
         05:c7:79:87:82:7c:2b:d8:a7:84:2e:a7:27:d5:a4:30:27:03:
         39:0b:29:4f:be:e8:1e:8d:11:40:2d:b9:7b:a3:52:a0:9d:83:
         27:a0:46:88:bb:94:83:42:b6:f7:18:59:e8:9d:cc:78:28:b9:
         76:98:e1:d7:4f:ef:06:79:d4:af:b2:e5:ab:77:0d:6f:18:eb:
         cf:95:2d:56:68:54:89:47:fd:5d:20:e1:fd:02:4f:ad:7d:1e:
         20:96:54:93:17:f9:52:6c:eb:ff:e1:25:d3:27:af:3d:66:12:
         c7:ab:f3:9f:11:44:09:4d:82:95:e1:7b:63:89:ba:a0:6a:06:
         f2:9e:c7:cc:9e:96:2a:45:9f:95:67:47:2b:e0:12:ee:bb:cb:
         52:8e:18:6b:e6:42:c5:e6:84:6b:11:72:ce:27:19:0c:0c:8d:
         30:01:22:b2:04:c0:3f:e3:a7:30:39:d5:f0:f9:8d:61:45:68:
         b4:83:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:15 2026 by rpki-client