Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa
File:                     aa7f7366-ce96-3420-b01e-2598209b268b.roa (raw, json)
Hash identifier:          Xt404A0GlQtQDUCB9oB+jf/GC1UuhFispysly98yVU0=
Subject key identifier:   CF:66:E0:93:93:3F:95:32:CD:97:54:3B:DC:0B:06:B7:7F:AC:20:5B
Certificate issuer:       /CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7
Certificate serial:       010D0C9F4328584F698D9B4F23EA0AF975400800
Authority key identifier: 4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     401449
IP address blocks:        2602:f7c3::/40 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:9b:4f:23:ea:0a:f9:75:40:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=e5221b7f-8aa8-4bc3-8c11-92d2cc27b930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:7e:09:70:71:9d:89:a8:61:91:27:b9:c9:
                    ca:0b:59:b6:83:23:01:c5:a6:34:3b:18:20:33:c8:
                    35:d9:da:00:e6:b0:98:39:05:a9:7e:4d:12:31:94:
                    27:0e:a9:3a:45:71:7b:d3:3d:9b:17:2b:99:6b:bb:
                    65:03:8e:23:1b:37:c7:4c:59:27:d9:80:05:df:58:
                    c2:9a:35:00:86:9d:ed:1a:6a:6f:59:71:17:1a:a1:
                    aa:42:2a:3b:dc:22:e0:1c:09:b4:f1:d8:97:4a:e8:
                    a8:bb:4e:c3:e5:c3:91:df:78:e6:00:64:a5:fa:2a:
                    0d:ef:17:76:67:da:a0:43:71:a1:b3:20:86:62:3d:
                    ef:29:d5:ee:13:6b:87:60:f8:85:fe:93:61:f4:3a:
                    61:47:ef:e4:f2:63:17:a7:ef:ce:20:20:2f:05:d8:
                    8c:9e:64:31:f7:ee:87:08:b8:4e:34:1c:8e:20:6e:
                    60:b0:91:91:10:63:3c:e8:a1:c3:e3:2d:b9:be:e6:
                    a1:42:db:a3:d8:0e:65:10:fa:b6:6a:79:2c:69:31:
                    df:4a:19:3c:5e:32:9d:06:6f:6b:9d:70:25:ec:08:
                    ab:01:20:d2:97:1b:c1:d2:0b:19:cb:90:ca:00:11:
                    61:d1:70:bc:33:23:4a:c6:f5:8e:b8:32:27:78:fd:
                    a9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:66:E0:93:93:3F:95:32:CD:97:54:3B:DC:0B:06:B7:7F:AC:20:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl

            X509v3 Authority Key Identifier:
                keyid:4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:6f:98:5e:52:99:20:23:49:f5:83:44:3d:b7:89:1e:b7:a6:
         59:02:7a:70:4a:b6:89:3d:41:c0:81:16:20:37:00:eb:fc:32:
         6c:5a:ec:b9:a5:2f:57:2b:88:0e:c8:38:b3:9c:7b:98:d3:45:
         0c:58:74:4d:9f:6f:73:38:1c:55:66:b8:00:d8:cd:87:0f:a3:
         bc:61:38:98:f4:34:ff:b1:56:3d:21:bd:33:d1:36:28:46:87:
         30:33:4a:34:5a:63:fd:32:0f:52:6a:9c:b1:96:37:8b:b6:fc:
         70:cc:2e:6a:17:0f:13:fe:21:95:27:db:da:a5:51:46:22:86:
         27:e6:44:1e:3a:2d:45:e9:37:09:90:f3:1f:6f:36:c0:48:da:
         72:6c:da:5f:ec:96:bd:fb:b3:d1:1b:f3:b9:84:22:a5:a9:08:
         fe:47:b9:e0:0b:5c:d6:fb:76:6b:45:f2:ab:6d:5d:ca:41:38:
         41:04:8d:f5:c4:13:17:81:f7:d2:9e:62:8f:e8:da:24:24:99:
         b9:82:d1:98:82:fa:31:73:09:c3:d8:42:a5:18:09:a7:e9:e3:
         eb:55:a9:0c:e0:06:27:40:78:be:ba:ae:b3:ee:3d:9d:e7:6c:
         2f:87:be:54:73:9e:bc:06:b9:b3:1e:52:94:47:0d:df:02:c6:
         08:c5:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:14:14 2026 by rpki-client