Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/56bd32e3-bf50-3eb8-9371-b737c6149dda.roa
File:                     56bd32e3-bf50-3eb8-9371-b737c6149dda.roa (raw, json)
Hash identifier:          7u/HOSbn0hOgJww31rV+VV8AtP6yWikbAGPJyPLe0RM=
Subject key identifier:   4F:7A:E0:55:D3:04:F3:53:FB:07:81:F9:E1:AF:5D:15:C5:48:3B:49
Certificate issuer:       /CN=2654343f-7862-4859-8638-b9c2008b3151
Certificate serial:       010D0C9F4328584EDB2C8182AA1FB5AECE9AFC80
Authority key identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/56bd32e3-bf50-3eb8-9371-b737c6149dda.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     13737
IP address blocks:        2602:f99f:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:81:82:aa:1f:b5:ae:ce:9a:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2654343f-7862-4859-8638-b9c2008b3151
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=4d46dde3-b3e7-459f-a9be-fc691c4f5988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:a3:3c:99:c8:79:80:50:93:98:17:a7:84:
                    17:49:36:99:8a:f6:47:9e:ac:ee:09:46:bd:3c:cf:
                    2d:a1:25:e4:f9:24:f8:c8:c6:b0:c7:e1:e9:de:4c:
                    c7:57:d6:73:b1:fc:dd:93:87:5e:91:39:65:90:6b:
                    eb:e5:13:d7:3f:2c:34:07:63:57:d9:ff:c1:2c:7a:
                    4a:92:6b:b2:35:38:89:58:7f:26:0b:3b:d1:e6:eb:
                    b9:68:ae:d3:d9:33:cd:63:fc:cf:d2:23:95:3f:14:
                    00:93:79:b2:17:cf:63:eb:be:82:20:8c:e2:d2:e6:
                    41:28:b7:b2:24:c3:d9:74:8c:94:99:3b:79:f5:31:
                    b2:ec:c2:0d:25:f9:22:99:62:e8:f8:0c:4e:25:fd:
                    6f:f6:38:b8:1b:e2:4f:e4:89:2a:7d:b9:a1:8d:d0:
                    93:63:80:0c:7d:7b:4f:53:eb:50:de:bc:df:90:b6:
                    45:3a:fb:9f:79:b1:81:73:09:55:fb:81:4c:dd:b2:
                    15:7a:ce:46:ab:9e:c2:5a:ba:c9:85:f9:bf:69:9c:
                    b4:75:05:4a:62:72:04:4f:45:cc:fb:8c:77:48:33:
                    27:2b:33:da:9f:a2:6d:76:2b:03:71:9c:53:8c:5f:
                    39:f5:5c:e7:4b:bc:f9:87:dc:23:cd:aa:a8:63:61:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:E0:55:D3:04:F3:53:FB:07:81:F9:E1:AF:5D:15:C5:48:3B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/56bd32e3-bf50-3eb8-9371-b737c6149dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl

            X509v3 Authority Key Identifier:
                keyid:9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99f:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:18:ab:04:67:45:68:ad:64:37:11:b4:b4:c2:ee:fc:95:
         f7:ff:1b:62:72:17:66:94:c0:a4:96:f9:6d:8c:48:92:83:d2:
         55:ec:82:e6:5d:92:d2:46:64:39:d6:5f:2d:23:56:48:66:1b:
         49:40:91:b7:2b:8c:91:ca:87:80:6a:f7:35:af:1f:c9:f5:d6:
         e2:5b:29:33:e5:72:a3:d9:0f:a3:78:00:33:9d:b8:87:71:80:
         84:33:d7:e7:92:7b:e5:bd:16:bf:99:94:16:b1:ca:bf:1c:e0:
         6b:d3:a1:b1:70:e8:11:e8:e1:6b:d9:29:7c:6b:7b:89:2a:ce:
         87:a3:9a:1e:93:09:98:f3:6e:5b:0d:55:04:25:59:4c:c5:8a:
         c6:88:76:0b:b3:2c:b5:09:fb:2a:c6:27:00:48:cb:15:3a:4b:
         d0:73:81:b2:52:3b:a9:df:49:58:30:71:70:39:54:3a:6e:26:
         c6:6c:01:65:fa:6f:ea:77:20:c3:90:ac:6e:44:f2:6f:89:fe:
         38:eb:73:9f:cf:6d:ec:2e:4f:9d:ad:e3:a5:7d:89:99:db:c5:
         53:24:1d:41:00:3f:2b:6d:50:46:66:b2:02:19:39:f5:0a:8e:
         48:bd:1c:28:09:d9:e2:dd:eb:c7:76:72:68:ad:9f:d6:f6:a2:
         dd:53:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:27:50 2026 by rpki-client