Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
File:                     0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa (raw, json)
Hash identifier:          8XigZ8Tz+FRdpGhazjfq4zpV0Eiyzge7lFvFZiHUf7w=
Subject key identifier:   7D:2C:60:29:2D:08:F3:22:4C:4E:CF:85:A8:82:2A:AE:1A:DC:C8:38
Certificate issuer:       /CN=1fb5932e-f862-443b-a719-26a612c2f112
Certificate serial:       010D0C9F4328584EA790923623EB7C9E93C24040
Authority key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     17326
IP address blocks:        2602:fd2a::/36 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:92:36:23:eb:7c:9e:93:c2:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5932e-f862-443b-a719-26a612c2f112
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2d34b4ba-7041-4ed9-b636-79cc875ad650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1c:c6:03:7b:bd:e8:b6:99:7c:15:90:ff:74:
                    85:1a:0d:e4:40:6c:c2:df:95:65:14:da:2c:b1:40:
                    1e:86:5a:85:90:75:9a:85:80:65:ee:60:9a:dd:ce:
                    7d:b6:81:e2:78:93:83:bc:5a:c6:4f:7f:d1:20:f1:
                    6c:66:94:91:c3:bd:d7:3d:d6:9c:aa:0e:00:30:b3:
                    27:77:38:d9:5e:a8:2c:f2:6b:2a:dd:cf:96:82:04:
                    4d:08:68:d2:93:37:3a:0e:22:63:bd:b8:32:e6:b6:
                    55:52:bc:a6:b7:5a:44:a2:c2:c9:ed:45:6f:23:39:
                    d0:5c:6c:ea:e4:1e:b2:66:74:4c:5c:a9:55:76:c6:
                    e6:6f:06:03:52:d4:bd:3b:6e:08:81:aa:79:26:aa:
                    37:8c:89:20:f8:c3:5a:84:c7:e0:af:d3:69:2f:e8:
                    08:f0:2a:03:c2:bc:37:c6:bc:59:57:a8:24:80:18:
                    66:4d:25:42:45:2e:b9:63:da:54:6c:50:c5:ac:35:
                    ef:9d:62:1a:db:35:cd:97:4b:5f:59:ac:3b:67:4e:
                    36:90:90:b9:67:38:88:1f:a1:55:3e:76:d0:f6:c6:
                    c5:4a:4d:78:db:2d:b0:df:a0:c1:5c:91:10:45:12:
                    5e:1a:85:83:7a:40:19:a8:eb:95:29:64:7f:a5:85:
                    dc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2C:60:29:2D:08:F3:22:4C:4E:CF:85:A8:82:2A:AE:1A:DC:C8:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ae:2a:01:69:06:52:7a:7c:fb:91:e1:4e:08:94:87:b3:c4:
         b8:cd:58:cc:34:d8:21:e8:01:27:45:98:8e:cc:05:87:d4:f2:
         e9:f9:6f:2f:85:3a:9a:1b:76:16:2d:c0:6c:31:23:90:cd:57:
         5d:0b:df:4e:94:2e:a2:bd:96:ab:f3:0f:b9:a7:29:c3:48:bc:
         1f:6c:f2:5c:06:2e:1d:40:05:51:7f:70:e2:d9:c8:60:e8:da:
         73:d8:83:82:d1:60:dd:f6:88:12:8d:fd:05:62:db:37:e5:96:
         b6:e2:84:81:1c:d4:c0:49:9a:e2:00:7b:50:48:d0:79:36:46:
         93:ec:ec:bd:44:db:60:9b:48:4e:06:fa:61:53:c2:44:51:a6:
         fe:16:3e:2a:98:4b:14:05:f0:4b:bb:d5:79:8e:ec:8a:11:5d:
         7d:5a:3b:af:37:32:bc:94:c9:f1:4f:c7:80:bf:df:ce:b9:41:
         74:9a:b3:2a:7a:e6:1a:40:9e:dd:75:5c:de:f5:65:89:8c:04:
         53:51:ea:78:a8:85:58:54:04:7e:1a:d2:ab:2f:eb:3d:ee:71:
         70:d6:99:2b:e2:fe:53:6d:a4:ab:61:95:a4:98:27:99:97:18:
         4e:b5:6c:62:f6:c6:f1:b7:8c:09:d8:4b:8d:a0:6d:6f:5c:24:
         be:62:9d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 19:13:10 2026 by rpki-client