Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/03aaf92d-24a0-3b99-ad54-8dab66f216ae.roa
File:                     03aaf92d-24a0-3b99-ad54-8dab66f216ae.roa (raw, json)
Hash identifier:          2JuLoHIKN5AlXLqKCqWa+NlpdrPXd2sqJFK8/W/2RB0=
Subject key identifier:   D3:EA:22:88:A5:CC:48:F3:9E:B6:16:9E:06:B2:53:CB:73:BD:C7:79
Certificate issuer:       /CN=f0e38106-b42f-4661-8168-b943de3f70a6
Certificate serial:       010D0C9F4328584EF5B20AEB187727EA8C193880
Authority key identifier: 13:F5:EE:02:D8:EB:68:CA:7D:26:14:A5:BB:07:11:08:97:3C:7A:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/03aaf92d-24a0-3b99-ad54-8dab66f216ae.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     11187
IP address blocks:        2602:f993::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/f0e38106-b42f-4661-8168-b943de3f70a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/f0e38106-b42f-4661-8168-b943de3f70a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:0a:eb:18:77:27:ea:8c:19:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e38106-b42f-4661-8168-b943de3f70a6
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=c6ff1049-4b83-4bb4-918d-537e957a9c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:98:c3:c5:71:a3:8a:92:61:46:72:31:1f:82:
                    70:3a:0f:26:00:9e:59:9d:4b:f4:b9:71:31:2b:b1:
                    04:68:60:87:5f:a4:26:86:aa:e6:c4:2f:76:f9:b3:
                    ba:d8:c1:7c:c9:bc:d2:89:ea:42:75:72:7a:1d:06:
                    73:5c:aa:67:f0:8e:96:7d:d0:a4:7d:42:fe:29:9e:
                    be:31:23:b8:d8:e9:82:a4:e5:a5:b3:f8:f6:87:8e:
                    03:46:60:b6:92:9a:70:bc:33:86:db:e2:80:6e:c7:
                    a3:7c:d5:e0:64:15:7f:fa:28:4a:c6:7c:5a:5e:1c:
                    cd:ea:8c:35:a3:76:39:14:1b:5a:ec:9d:a5:3d:44:
                    9c:6e:36:2d:c6:fa:41:51:83:8b:b4:74:18:57:08:
                    d8:3e:cf:64:a1:78:3c:51:53:35:4e:09:49:fe:a4:
                    2a:e9:4f:44:41:19:d7:bb:a9:24:30:cd:d0:ac:a4:
                    a9:e8:8f:13:b9:a4:40:5b:70:7c:4d:c2:81:01:a2:
                    c9:85:8f:9c:df:e6:87:df:d1:c1:62:31:92:b1:19:
                    fb:07:4f:7d:cc:32:f4:fa:e9:f5:87:42:a8:6c:90:
                    8a:b3:d1:fb:74:bd:60:1b:1a:37:19:f3:22:5a:87:
                    9b:8d:19:de:2b:c1:d2:fa:94:9f:1e:dc:9e:8f:ba:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EA:22:88:A5:CC:48:F3:9E:B6:16:9E:06:B2:53:CB:73:BD:C7:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/03aaf92d-24a0-3b99-ad54-8dab66f216ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/f0e38106-b42f-4661-8168-b943de3f70a6.crl

            X509v3 Authority Key Identifier:
                keyid:13:F5:EE:02:D8:EB:68:CA:7D:26:14:A5:BB:07:11:08:97:3C:7A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f993::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:5b:6a:c9:6c:c6:bd:60:a5:02:a6:96:d9:ae:bc:20:38:
         4a:24:45:e3:65:84:00:4d:6e:f4:f2:00:e2:5a:9a:3e:9e:1d:
         be:4a:53:89:f7:f2:73:dc:0c:ae:4a:08:e8:3c:a6:42:18:ab:
         e8:75:ea:9a:27:47:82:d7:c5:dd:3a:04:11:d8:28:19:b0:41:
         83:f2:42:f2:08:73:a1:c0:91:72:e7:67:4f:37:8c:5b:f9:c3:
         8d:1c:4b:52:94:bb:09:2c:38:f7:10:62:73:3d:85:a7:7b:0c:
         03:94:0a:bf:0e:38:5e:50:b4:bc:8f:7f:01:c6:a6:06:6e:21:
         8e:b5:ae:a7:47:8f:a7:51:93:d6:85:40:7c:cf:82:25:15:59:
         f6:90:07:dd:9d:e3:03:4d:b7:e1:94:37:3f:9d:cb:71:99:dd:
         5f:9d:13:44:83:40:44:82:d6:99:f7:ab:b2:d3:d2:ea:d7:35:
         e0:cb:a7:f6:9b:7f:70:4b:04:cd:35:c1:9e:a7:e9:f9:f5:0f:
         02:3d:82:cf:3a:68:44:c4:b0:f3:90:8d:c9:d2:b8:25:65:e8:
         b6:03:cf:1a:97:4b:8e:ad:c5:e1:88:cd:06:46:25:ae:89:be:
         68:5e:b2:da:a4:9a:ae:dd:6e:f7:40:2f:fc:77:b5:3b:fe:8e:
         c8:ff:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:53:27 2026 by rpki-client