Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/c8c6824b-e09a-3761-acb0-ab3727ecd853.roa
File:                     c8c6824b-e09a-3761-acb0-ab3727ecd853.roa (raw, json)
Hash identifier:          itbXBdv1qwRcBXQ7tnjyEBr/R4DA3MF2y4XGOSKpxEQ=
Subject key identifier:   DB:AA:1E:27:3F:11:87:2D:13:71:82:80:B7:24:AF:B1:79:45:77:E2
Certificate issuer:       /CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
Certificate serial:       010D0C9F4328584EC20C711CBBC32FEADD819500
Authority key identifier: 8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/c8c6824b-e09a-3761-acb0-ab3727ecd853.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     1030
IP address blocks:        2602:f9c4::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:71:1c:bb:c3:2f:ea:dd:81:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=e0435239-611f-4bd9-8568-8512a6a2b6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:26:67:9f:b9:53:cd:10:c4:29:89:f5:c0:
                    44:0d:b0:72:44:7a:aa:ca:43:aa:d1:d1:58:a4:7f:
                    bc:a3:60:59:a7:07:1e:67:75:f4:a3:82:14:dd:79:
                    a4:16:4d:af:fa:fd:1e:f2:62:16:84:ef:84:50:d5:
                    27:e0:27:65:e1:d5:26:8e:93:52:e7:72:a6:4a:fa:
                    37:76:c2:95:af:5f:9d:1b:6e:6c:9e:b8:37:bc:40:
                    d9:81:2f:a8:af:fa:73:40:e2:57:97:1d:02:c8:5b:
                    9f:8d:60:26:a3:bd:d4:1d:17:be:23:aa:4e:83:ca:
                    52:56:8d:ea:88:8e:58:7e:15:1a:21:42:1a:6f:0e:
                    10:28:8b:46:0e:59:9f:47:eb:cf:37:33:1e:29:a2:
                    b7:5b:b7:3b:9e:c7:7f:82:e4:3a:fe:c0:b9:2e:2c:
                    8a:e6:a6:a1:b5:cf:52:20:3d:08:41:3d:63:8e:62:
                    56:40:38:5d:8b:04:d6:c9:ce:9e:86:62:17:d6:21:
                    da:3f:0a:43:af:72:ee:07:f9:9d:34:c5:14:7d:27:
                    8f:f1:65:01:ef:79:18:18:f7:6e:bc:8d:83:7f:8f:
                    20:d0:de:df:8a:68:a1:59:73:3f:85:bd:10:c9:fc:
                    d5:3c:fd:fc:b1:bc:54:17:fa:be:d7:db:28:54:be:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AA:1E:27:3F:11:87:2D:13:71:82:80:B7:24:AF:B1:79:45:77:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/c8c6824b-e09a-3761-acb0-ab3727ecd853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.crl

            X509v3 Authority Key Identifier:
                keyid:8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9c4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:dc:23:1e:09:d9:78:34:1e:91:58:a8:ac:31:09:5e:e3:20:
         7e:2d:62:c8:6a:9f:8f:bf:ec:53:b8:f0:2d:e3:e3:c8:01:16:
         54:79:c1:d7:4d:b4:0d:a5:60:31:bf:13:6c:b2:8f:d5:71:0d:
         f6:ae:46:2d:14:0e:4c:0a:70:5e:91:68:f7:78:bf:16:43:77:
         17:ff:77:59:05:73:c5:8a:07:a7:51:7b:47:0f:5f:14:4b:02:
         ab:24:d5:44:da:92:bc:8a:21:9f:f2:f7:a1:35:49:ed:67:79:
         01:67:d1:12:c1:5c:30:42:cd:18:e7:f6:aa:d5:82:66:42:ac:
         8c:06:4e:a8:d3:26:58:7d:91:a6:1d:1f:22:53:e6:de:11:f9:
         b1:e4:17:f7:61:67:fd:3a:bc:45:f2:ec:17:62:68:bf:d1:1e:
         62:49:88:0e:1c:26:ec:f7:bd:d2:6c:c0:a0:b7:a1:8d:e3:9a:
         e7:48:4b:79:30:4c:29:f7:ab:d9:b3:77:48:bb:66:05:65:bf:
         72:67:0b:4f:18:38:ba:53:33:5a:a2:32:71:cf:a2:35:86:53:
         c2:25:e9:4f:c7:18:ed:56:2c:36:36:ac:3e:2c:9a:65:be:49:
         62:67:63:eb:02:6e:e2:44:52:e2:25:a6:ae:6d:82:8b:31:57:
         65:48:67:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:05 2026 by rpki-client