Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f12df19f-2c2c-3fb5-8556-a6f7093ee922.roa
File:                     f12df19f-2c2c-3fb5-8556-a6f7093ee922.roa (raw, json)
Hash identifier:          EQVqhd1zvMUyR8hiS/jHIdItVfKmkMU2Kh0a8VhEqto=
Subject key identifier:   3A:F6:A3:CC:11:D4:DC:71:C5:BD:6E:EA:DC:2D:D7:FD:76:AB:CC:E1
Certificate issuer:       /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Certificate serial:       010D0C9F4328584EA78837023904E952A1244500
Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f12df19f-2c2c-3fb5-8556-a6f7093ee922.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40806
IP address blocks:        2602:f4d9:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:37:02:39:04:e9:52:a1:24:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4c1d86c7-9b98-4f05-bc30-839d1af25ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:ec:ca:86:24:0d:c6:b9:38:cf:2c:03:c4:
                    d3:f2:27:e3:fe:ff:04:9b:79:c7:95:51:78:d7:0d:
                    3c:0e:79:e5:5e:30:7e:85:3b:70:02:f0:fd:a4:95:
                    db:8f:5a:ca:a3:1d:df:11:3e:c5:cb:10:a6:b6:d0:
                    6b:8a:83:90:ee:1d:5d:32:86:4c:04:b4:6b:6c:53:
                    c2:22:62:13:91:fb:00:c6:3b:4a:69:3f:4d:2d:61:
                    02:72:14:27:b0:30:26:65:59:1e:0b:e3:92:26:d5:
                    dc:41:ce:75:ad:b3:68:73:9e:eb:44:83:21:e5:6f:
                    d9:42:2a:1d:44:3c:d8:6e:fd:7e:53:96:bc:6d:8b:
                    df:e9:eb:74:56:0b:1b:04:f6:73:56:38:c9:79:41:
                    2e:b8:de:82:60:46:5c:e8:2c:3d:20:9a:89:d1:a6:
                    ba:33:63:47:80:ef:2e:27:e0:d7:84:40:aa:f1:f9:
                    06:16:7c:3f:23:ec:3b:5e:fc:69:0b:b5:88:d1:ae:
                    75:79:77:b8:2c:a1:17:33:36:a2:4e:d5:c3:f4:dd:
                    98:a2:90:a7:27:46:16:9e:2a:de:0c:f5:25:43:c9:
                    b4:df:3d:b8:eb:59:a7:a3:28:7e:59:cb:d1:2a:ce:
                    bc:1a:0e:a5:c9:f2:e1:72:81:d3:fe:5e:8e:ef:84:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F6:A3:CC:11:D4:DC:71:C5:BD:6E:EA:DC:2D:D7:FD:76:AB:CC:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f12df19f-2c2c-3fb5-8556-a6f7093ee922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4d9:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:18:b0:b3:44:ed:77:98:56:e7:5a:40:00:4c:38:0b:2b:70:
         18:ff:d5:44:2f:03:1a:a2:37:48:e7:40:69:36:67:9a:7b:2e:
         ca:ab:99:c5:c5:fe:c6:68:79:0f:cc:42:34:bb:dd:37:ad:f6:
         8d:2b:c6:ba:86:4b:cd:1b:8d:8e:0a:8b:02:82:da:bc:57:59:
         61:da:01:cd:8c:e5:ca:01:7a:b9:26:09:52:c7:4c:5b:3b:f4:
         6b:35:54:a2:b3:8e:ea:1c:84:e2:8a:4f:53:45:17:34:6e:9f:
         d7:3d:ca:0c:1c:d6:a8:a2:49:54:0a:1c:a5:4f:34:46:54:53:
         81:9e:3c:ed:30:ad:c6:d2:da:73:cc:30:4c:b3:bc:85:cd:fd:
         03:eb:b6:58:f9:bc:e6:86:ee:a8:1e:49:ae:21:1f:c1:8e:ed:
         1d:57:66:af:09:9f:70:1e:bc:f3:b5:1e:82:e1:12:05:82:51:
         5a:46:45:f7:21:a7:fd:fa:45:e4:ad:7a:22:e7:45:c1:53:4f:
         f6:bb:6b:86:52:62:bc:25:63:cd:27:85:14:2a:24:37:cb:d3:
         1b:2b:21:ac:a8:34:cf:36:68:f2:e0:24:d1:1c:b5:8d:b4:00:
         0a:38:3f:f1:af:57:12:43:e5:e9:3f:10:15:87:b3:ec:f5:b8:
         29:c4:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:06:11 2026 by rpki-client