Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa
File:                     fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa (raw, json)
Hash identifier:          Y/DTiQ3yiehFYJUCk0UKSpMnmRANISwhk0s4mqaLtA0=
Subject key identifier:   70:5E:42:D1:18:2D:DE:1F:53:49:C4:08:29:51:33:EE:29:2E:75:7F
Certificate issuer:       /CN=aa34647f-3229-480c-9b05-3cf0b00fa173
Certificate serial:       010D0C9F4328584EBC770568B1BAC6A4909109F0
Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     26431
IP address blocks:        2602:f666::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:05:68:b1:ba:c6:a4:90:91:09:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=701296f1-36df-406b-affa-0c4bf1e8429d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:69:43:c6:95:df:e1:c7:48:5b:11:83:89:73:
                    0e:87:bd:d3:6b:28:47:43:94:00:60:42:48:d0:47:
                    ce:05:d6:92:63:18:55:a8:80:47:1b:7b:88:81:60:
                    81:13:b6:d7:a9:27:1a:3c:9b:d5:31:e7:7f:a3:7b:
                    f2:b8:a8:61:64:81:6f:5c:7f:54:6c:bf:01:62:05:
                    6d:5a:4a:74:93:b6:21:90:e4:e4:18:4d:dd:1e:62:
                    f6:4a:0d:09:74:b0:d0:84:0d:49:9a:76:9f:fb:34:
                    61:62:5d:79:c0:df:b4:d9:5f:bb:7c:1a:01:ff:ca:
                    94:4b:d1:5b:69:21:81:5e:05:1d:37:3e:fb:a6:dd:
                    c9:57:f8:c0:06:b5:34:80:1e:4b:c1:67:38:b5:94:
                    92:7e:0a:ec:bb:5e:fb:d2:ab:93:f3:64:a7:fc:92:
                    9a:8e:b7:82:4b:a8:21:ae:b8:b4:7f:94:f9:72:c2:
                    24:99:ff:c6:90:34:ab:82:03:22:b5:86:a6:8f:5d:
                    4d:82:d0:36:42:f9:03:47:ee:94:71:c6:d2:ff:0c:
                    48:b1:3a:0b:93:07:d1:cc:25:28:89:d0:33:e8:4a:
                    51:8b:ea:70:90:cf:43:c1:58:a1:78:4b:f9:db:44:
                    3c:5b:aa:f2:67:e6:08:ce:4f:b1:6e:34:1e:c4:d3:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5E:42:D1:18:2D:DE:1F:53:49:C4:08:29:51:33:EE:29:2E:75:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl

            X509v3 Authority Key Identifier:
                keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f666::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c2:7b:57:6b:3a:3a:12:ad:0c:a6:43:1f:16:c5:0d:f2:79:
         68:8b:e5:ef:a5:b2:99:3c:ac:c5:44:e1:c0:7a:56:c0:a5:aa:
         d2:38:b1:b4:10:b8:c9:b3:dd:27:cd:8b:0c:64:99:bb:09:25:
         e2:58:c2:32:4c:c2:31:32:16:0d:3a:2f:ef:a3:fe:62:19:09:
         8c:45:43:83:cf:19:d4:55:c3:04:90:0e:60:34:ca:c7:3f:31:
         fc:5e:a1:6b:85:30:dc:44:ea:57:37:c3:a1:5f:69:7f:ad:a1:
         91:71:c3:4c:47:b9:d8:f4:24:71:66:a3:f2:6c:0c:da:8c:e7:
         c4:1d:92:21:45:2c:4e:ce:98:dd:68:36:04:24:fd:50:1c:69:
         2c:98:23:37:07:2f:9b:61:71:f1:77:47:ca:67:e3:8e:dd:6e:
         af:7b:38:8f:5a:9b:e2:0d:54:56:6f:eb:f0:83:71:15:82:48:
         d3:71:87:46:9f:a2:b2:4d:4d:c5:be:c2:af:f1:f2:6a:23:4d:
         4c:51:a6:7b:31:6b:2b:d9:ef:28:75:ee:fa:03:a6:b5:c0:a5:
         47:9d:3f:46:ac:64:a3:de:00:7a:3b:37:49:43:9b:8e:15:55:
         03:01:71:6b:99:c8:39:48:46:96:ce:b1:b2:3d:ee:7b:a4:58:
         bd:a3:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:09:11 2026 by rpki-client