Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/d0378387-a0be-357b-8116-7c390e43d55d.roa
File:                     d0378387-a0be-357b-8116-7c390e43d55d.roa (raw, json)
Hash identifier:          +16O22xKjGrnRfk9MIoWMtLfhWqTKi3ZOi9Ns0E79JA=
Subject key identifier:   B8:1E:40:CD:AC:09:41:F9:AA:D7:FC:B1:28:62:24:13:A3:29:31:B7
Certificate issuer:       /CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1
Certificate serial:       010D0C9F4328584EC7A1D03028BD8DA79797F60C
Authority key identifier: 68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/d0378387-a0be-357b-8116-7c390e43d55d.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     398310
IP address blocks:        2602:fd4f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d0:30:28:bd:8d:a7:97:97:f6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=7e721e0d-2cb8-4af8-97a1-1f571dcde05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:93:5c:1f:ba:cc:d5:6a:60:91:3c:6d:f5:
                    7e:d2:32:a9:66:13:51:8d:c5:ce:93:73:34:42:c7:
                    40:bd:0e:cf:9a:81:ce:4d:45:ff:75:00:69:ba:ef:
                    90:92:36:4e:07:94:0e:0f:7b:05:78:7e:36:35:9a:
                    01:ed:3c:cd:60:5b:38:8d:4d:d0:b1:cf:a4:9e:b7:
                    d2:15:60:8f:e3:2b:68:10:a2:35:b1:5d:3c:73:18:
                    a8:84:6e:f6:f0:79:8a:04:ac:88:fe:dc:64:2a:fc:
                    1b:3d:ab:93:81:6a:63:b4:cd:fa:f8:44:41:2b:d2:
                    52:b4:ef:aa:8e:90:0f:52:2d:b9:ec:1f:52:5a:3e:
                    f6:b2:a0:4a:5a:b6:6b:5e:b9:3b:c0:e5:70:a3:66:
                    cc:07:d6:8a:02:2d:ac:be:19:9c:14:a9:97:f0:6b:
                    cf:d0:3b:5a:dc:a8:ea:c5:67:b1:ac:f6:22:83:6f:
                    83:f6:58:9a:ec:22:15:de:ae:ca:50:19:a7:32:6a:
                    dc:cc:8b:91:ec:ae:5e:90:d2:60:04:b3:ce:23:0d:
                    33:57:7e:62:82:dd:e3:c5:2b:ca:76:80:4d:b5:51:
                    94:40:39:d8:ec:34:da:1c:1e:76:f7:e4:5d:05:39:
                    93:f6:14:75:2f:30:d8:c4:9b:3b:fb:d3:57:4e:ff:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:40:CD:AC:09:41:F9:AA:D7:FC:B1:28:62:24:13:A3:29:31:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/d0378387-a0be-357b-8116-7c390e43d55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl

            X509v3 Authority Key Identifier:
                keyid:68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd4f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2c:b6:10:2a:46:7b:23:7d:c0:50:93:cd:1d:19:ef:b8:58:
         fc:0a:15:62:48:8c:9b:6e:1f:0b:fe:c7:51:8d:92:15:63:db:
         fb:7f:ba:9b:8b:12:0d:49:65:6e:e9:c8:64:fe:e0:1a:a2:53:
         e1:59:cb:57:d7:12:26:cb:ba:bf:21:da:af:64:83:73:6f:80:
         c6:f0:02:c2:20:bc:74:b3:e4:52:1a:ff:44:d5:1c:19:cc:86:
         64:8e:14:f0:22:85:dd:ef:58:d5:d0:43:b7:82:30:50:90:78:
         08:94:6e:7e:61:ab:03:67:f7:f1:06:c8:05:a6:bd:b5:93:27:
         3d:b4:14:ec:6a:39:cb:59:f4:f9:3d:cf:17:c3:2e:de:2e:04:
         6e:37:0c:3e:16:2f:c4:79:1f:ac:ce:94:b1:f2:16:7a:18:8a:
         a6:2f:34:c7:aa:a3:20:6b:1d:d6:3a:35:8f:41:60:57:b7:b5:
         11:21:37:2e:aa:b9:a9:cf:74:6f:a4:3d:91:08:59:35:93:c5:
         d4:3b:0e:a1:8d:f6:54:96:db:33:d9:ed:8c:41:49:0f:2e:99:
         79:18:d7:8f:86:c5:2c:6d:64:49:e1:ff:07:c7:3e:19:35:65:
         ac:85:b4:55:12:87:d5:81:47:6c:e4:2a:a5:a6:49:49:5f:00:
         b3:c3:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:56 2026 by rpki-client