Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/de729757-d1f3-3f58-b959-e88723f84fab.roa
File:                     de729757-d1f3-3f58-b959-e88723f84fab.roa (raw, json)
Hash identifier:          froqiqn9nORg1184sgH6O4L45jjnIonuHhqmvsFa/oU=
Subject key identifier:   07:6F:F2:BD:96:47:FF:7B:BD:92:A5:ED:ED:6E:C4:9E:BB:F1:AB:93
Certificate issuer:       /CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
Certificate serial:       010D0C9F4328584EAFE6F8173B905B15310ACF80
Authority key identifier: C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/de729757-d1f3-3f58-b959-e88723f84fab.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     40448
IP address blocks:        2602:fa83:b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f8:17:3b:90:5b:15:31:0a:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=a940c765-dcb4-4249-9e51-973eee855b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ac:d1:12:43:24:c9:55:b8:bf:c5:8d:a6:17:
                    0c:97:ba:89:47:53:83:71:c4:8f:51:0c:6f:9d:01:
                    17:72:50:99:11:14:19:48:9e:3f:6f:cf:f7:2a:87:
                    82:66:30:ca:e3:11:ff:d8:ad:7e:fb:c4:03:e4:1a:
                    68:0e:48:dc:1c:54:98:0d:a7:9f:9a:66:45:80:a5:
                    48:47:18:eb:2f:45:60:ae:78:0e:88:b9:34:7b:4d:
                    31:d6:cd:13:2c:7f:99:06:52:61:01:e2:68:70:93:
                    9f:90:ba:83:15:ab:a3:3a:ad:e5:8f:31:f1:44:47:
                    02:db:d2:1a:fb:60:1a:da:3a:6a:ac:30:0b:77:63:
                    19:f0:ef:0f:88:b4:40:f2:88:b6:01:7f:ed:63:55:
                    cc:36:99:1a:e2:dc:78:0b:8b:d1:02:79:f6:7e:31:
                    ee:43:40:d2:a5:fe:23:e7:90:94:51:c5:9b:af:11:
                    5c:26:6a:32:59:22:15:4f:19:07:00:89:d1:21:72:
                    df:f1:aa:0a:3d:cf:7d:6e:34:81:20:80:05:3c:20:
                    d5:8d:02:a2:5a:33:b6:33:77:d9:81:bb:39:e4:ea:
                    ba:62:84:8a:6f:83:34:75:51:11:b4:d4:46:db:a7:
                    5d:3d:c8:98:95:71:33:be:97:b5:5a:5b:76:97:62:
                    e6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6F:F2:BD:96:47:FF:7B:BD:92:A5:ED:ED:6E:C4:9E:BB:F1:AB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/de729757-d1f3-3f58-b959-e88723f84fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl

            X509v3 Authority Key Identifier:
                keyid:C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa83:b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ba:8a:2b:cd:bc:97:10:a3:2e:53:21:d9:4d:61:31:66:ad:
         b2:86:c2:41:e7:23:d4:fa:b4:11:25:bb:8a:11:b2:f9:fc:aa:
         f0:79:ec:69:eb:2f:23:18:5e:2b:83:a4:6e:3f:a3:d6:58:f0:
         44:2a:aa:fd:c5:d7:a6:37:0d:44:65:be:86:56:c1:7f:f5:fd:
         44:6b:62:2e:90:f2:b1:fe:b0:16:0e:9a:43:c2:8a:96:c2:0b:
         db:03:da:30:dd:c1:9e:94:c9:21:01:b8:8d:2d:7a:65:71:32:
         09:4f:ca:b2:16:42:40:ef:68:4a:6a:cf:79:c4:ed:30:87:48:
         49:2a:08:39:a3:e0:e5:15:7a:7f:97:bb:00:5b:2e:04:d8:1e:
         56:d8:24:33:cc:c7:f9:a9:e7:8f:d5:6e:2e:69:69:f9:e0:01:
         ea:f9:26:1a:e0:80:c3:34:05:0d:7e:68:9c:80:a6:d6:77:ed:
         a8:42:3e:6e:35:2d:55:96:9a:6b:b2:49:7e:95:33:5a:01:3a:
         30:3f:23:58:c5:98:d2:a3:bd:0d:a8:49:f5:41:0e:f2:32:63:
         81:ba:23:d6:81:37:23:37:59:83:03:07:8c:7e:c6:c2:7e:1f:
         e1:a6:3f:8d:06:ae:07:06:ff:2b:21:ea:70:86:59:b3:d7:9b:
         23:67:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:51:05 2026 by rpki-client