Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/be9e6cbb-3d6c-340e-9b82-9b3733f64690.roa
File:                     be9e6cbb-3d6c-340e-9b82-9b3733f64690.roa (raw, json)
Hash identifier:          /LtqRbb2VYue3u7CQ+KxHrZ9hFRLRo2bO+wKIiQhg00=
Subject key identifier:   22:32:69:C6:61:D2:48:BB:3B:B7:6A:58:11:15:68:60:07:44:EA:25
Certificate issuer:       /CN=da900f81-3070-4c79-8343-f14ceb8ddb3a
Certificate serial:       010D0C9F4328584EA787668C200DB0BB3E7373B0
Authority key identifier: AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/be9e6cbb-3d6c-340e-9b82-9b3733f64690.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        2602:f4ab::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:66:8c:20:0d:b0:bb:3e:73:73:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da900f81-3070-4c79-8343-f14ceb8ddb3a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=14f32ec9-b51d-496d-8484-48773857671e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:66:20:ec:2e:6e:db:84:4d:7a:a8:cd:3c:ee:
                    70:e3:bf:a8:57:48:ed:23:14:55:61:a0:a7:bd:38:
                    77:f6:d1:a4:56:6f:ea:23:e8:58:40:3c:2c:6f:d3:
                    02:63:d4:39:a0:6a:62:bc:87:3b:9d:cf:06:85:2d:
                    6a:40:57:4e:fc:e3:0e:cf:f7:b3:cf:6e:9c:2d:e4:
                    d0:8a:23:57:db:cd:b3:a6:ef:f8:0e:6c:88:fb:2f:
                    42:e0:70:2d:80:2a:ef:50:e0:a8:d9:c6:f5:78:9b:
                    a6:4b:6d:02:6b:ed:42:65:70:19:13:31:52:01:17:
                    d8:0b:79:35:95:f5:58:b5:29:53:be:a9:11:2c:ca:
                    21:cb:3f:8f:44:e0:40:32:0b:7a:72:f2:4d:0f:b1:
                    d1:bf:4c:cb:d9:1f:66:6d:e8:0b:6c:f4:7b:c2:39:
                    e4:89:b8:4a:ae:ef:c1:31:89:8f:f3:31:e2:22:15:
                    75:d7:e2:7e:64:12:3e:e2:43:b3:65:c5:07:eb:95:
                    45:29:f0:cf:74:27:6b:ae:5b:c2:24:37:c2:63:39:
                    fc:66:34:c8:5d:af:62:72:3e:56:05:19:ce:c8:f4:
                    95:53:90:18:93:e8:7d:f2:4f:70:1f:af:3c:5f:b6:
                    75:9a:f9:47:f2:cc:69:db:b4:61:b9:40:c9:46:51:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:32:69:C6:61:D2:48:BB:3B:B7:6A:58:11:15:68:60:07:44:EA:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/be9e6cbb-3d6c-340e-9b82-9b3733f64690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4ab::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:50:f0:80:6c:f0:66:6e:a0:a8:bc:e5:77:9a:56:ed:a3:
         b9:59:9e:5c:39:aa:cb:cd:25:17:0c:e6:f8:9c:f3:32:81:c4:
         27:82:96:ab:c3:b2:9b:de:13:b7:3d:fb:67:76:cc:c9:42:fa:
         98:01:fa:1c:ef:b9:90:26:f0:1b:bb:60:ec:e9:b1:ab:e2:7b:
         94:18:cf:1e:83:0e:ab:9d:9a:a0:76:21:3a:3d:19:db:d2:cb:
         76:8e:78:ab:99:1d:44:db:f6:61:3f:a6:60:44:32:79:33:96:
         96:54:c1:cb:b0:e7:aa:02:02:a3:f2:f7:58:86:57:f1:e8:28:
         96:27:64:77:29:d9:10:6a:1f:e3:e6:22:b6:ff:e6:2e:db:cb:
         1a:ad:6f:6c:14:df:9c:28:05:f6:f6:cf:b0:b0:aa:51:ab:4a:
         76:15:15:01:a1:11:53:d4:5f:26:8f:27:6e:1c:29:37:db:55:
         a1:9a:44:ea:e1:27:ab:f4:dc:ff:1e:bc:e7:7c:3c:7d:15:4d:
         8c:d5:5c:80:b5:93:97:a6:ed:1f:2e:a3:1c:ba:59:0b:3b:08:
         e8:1d:72:59:cc:29:e7:aa:50:33:1c:4a:ba:34:ec:9d:5f:c5:
         7c:0a:73:4c:f3:28:c0:b5:89:99:4a:5d:ff:67:4b:76:60:68:
         db:94:3f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:39 2026 by rpki-client