Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa
File:                     b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa (raw, json)
Hash identifier:          Jlt20drUBrruI05XysbS508QWOea+y9Z2IYc7fpEN2Q=
Subject key identifier:   0C:59:2E:10:94:85:73:D2:1B:D8:01:08:54:C2:76:2E:B2:56:02:E4
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584F497565CB594A2C92B4E72540
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16532
IP address blocks:        2602:220::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:65:cb:59:4a:2c:92:b4:e7:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=de821200-e774-4991-94e5-d04b3a2d1c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:2e:d0:4d:90:8e:ae:7b:5c:2c:29:98:ae:
                    32:d0:eb:00:d2:45:97:bc:38:e2:90:f1:b1:91:60:
                    59:07:e5:50:b4:79:f1:b3:d8:31:dc:2c:52:6a:e5:
                    1b:d4:6d:b1:8c:52:1b:7d:aa:ea:4b:80:b8:18:ae:
                    da:e5:d9:be:2d:cb:6c:c3:f6:b1:0b:5e:0f:3d:85:
                    80:1b:29:44:d3:f0:c1:b2:19:83:7a:b1:61:91:79:
                    f8:98:ef:45:aa:da:22:74:b2:0a:41:5f:df:9f:23:
                    2d:2f:a8:ae:d0:5a:7e:ff:63:6a:95:fa:6d:a1:e7:
                    a9:d6:93:7f:25:d1:e0:96:3b:2e:61:16:04:63:80:
                    60:50:30:5f:79:a1:d8:5f:3e:e8:a3:2e:70:a8:f8:
                    6c:59:8f:e2:ce:01:a9:43:ef:ad:00:c8:ac:b0:64:
                    21:27:76:4b:70:f1:a3:b7:b1:21:1e:05:bc:4b:72:
                    b4:4f:7f:6e:a8:b3:67:6d:f9:e1:34:6c:fd:17:1f:
                    e6:25:c8:e5:80:2e:1b:cb:1a:46:e8:21:e6:7e:cf:
                    dc:e0:f2:cf:01:18:a4:21:13:cb:99:d0:98:5e:a4:
                    e2:3f:73:9b:5e:f7:8d:9a:d6:a5:3e:c8:73:16:73:
                    74:14:17:86:35:04:8d:dc:b1:62:2e:37:b8:13:13:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:59:2E:10:94:85:73:D2:1B:D8:01:08:54:C2:76:2E:B2:56:02:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:220::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a3:19:38:eb:28:33:28:b3:44:76:9c:db:42:8c:76:19:e7:
         5e:b0:35:3c:3b:73:cc:e6:cf:58:db:ab:36:9d:a1:b2:29:e1:
         1c:2f:a0:4e:e6:69:d4:f9:22:7f:1c:e9:0c:6a:8b:25:a7:3a:
         41:b3:81:93:78:76:e4:d4:cf:47:98:f7:c1:ba:4e:4a:da:60:
         f1:c5:f5:2e:21:67:8b:94:9e:b5:de:02:9c:7f:c4:42:a2:e9:
         93:a3:7f:00:a2:78:28:cc:91:e3:81:ae:9d:a7:c1:5a:7f:63:
         4d:4a:e5:06:10:19:ca:21:40:d2:4d:fc:af:48:69:f1:e5:31:
         4c:47:05:7a:41:dc:55:ba:6b:41:ec:42:fe:67:5c:60:aa:97:
         69:cd:17:71:b3:84:39:5f:67:7a:26:51:c4:26:33:a4:6a:57:
         2e:85:9c:2a:1b:8e:0f:1c:7f:0b:5c:43:84:6a:4a:cb:b2:59:
         29:b5:e9:18:a3:3e:7f:b6:b0:10:76:15:cb:44:29:92:f8:83:
         06:30:17:0a:ca:a5:c0:09:23:5a:24:0e:e7:23:f6:7f:67:e4:
         b4:d4:2d:49:2b:9e:33:59:ec:69:b6:da:61:83:1c:4e:b0:50:
         b4:7c:3b:19:a7:9a:07:01:1a:7e:bf:9e:05:1a:27:1e:d1:1e:
         dd:e4:1e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:03:10 2026 by rpki-client