Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa
File:                     2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa (raw, json)
Hash identifier:          DwMq4VET2BEk5C2tZRUd/l4MmYJDfdXpD0wKyvMLiiQ=
Subject key identifier:   98:35:D3:45:3D:3D:36:60:56:DA:EE:0B:8C:5F:9C:00:65:85:7E:EE
Certificate issuer:       /CN=42c666c1-a603-4b7f-a5b1-8292a815144e
Certificate serial:       010D0C9F4328584EA787F1FCFC30BFCE698C5300
Authority key identifier: 9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401605
IP address blocks:        2602:f72d::/38 maxlen: 38
                          2602:f72d:400::/38 maxlen: 38
                          2602:f72d:800::/38 maxlen: 38
                          2602:f72d:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f1:fc:fc:30:bf:ce:69:8c:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c666c1-a603-4b7f-a5b1-8292a815144e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9203d8cc-484b-40e9-bfb1-448a0e3e9af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ab:6b:38:8c:97:28:87:96:bd:bd:3c:5e:27:
                    7f:6c:ce:98:2b:66:c3:20:9d:5e:47:1e:af:2e:b3:
                    f4:a0:c7:f6:34:a5:c0:2b:b6:fe:9b:af:8f:f7:c6:
                    fd:f4:1e:db:62:20:ad:04:f4:d4:8e:50:7f:fd:df:
                    28:69:a2:a1:bf:4c:09:3b:d7:4c:0e:1e:8b:13:a1:
                    d1:87:51:1c:ac:d3:e1:85:da:88:fd:c7:69:71:93:
                    f3:7a:0b:f4:31:5e:da:55:37:75:df:da:3e:b6:d4:
                    b3:ed:08:4c:fe:ec:b2:de:19:65:e6:62:52:c3:6f:
                    8e:9e:77:f0:f0:14:e4:da:01:2c:f9:bb:a0:8c:4b:
                    26:fc:bd:07:2c:b3:de:ee:31:bd:80:5b:bf:07:10:
                    3a:3d:a1:82:ba:63:ac:b1:39:21:4a:8c:0e:30:4c:
                    da:91:e2:07:ec:dc:24:97:91:7a:c6:c2:cd:a3:5f:
                    53:7c:1b:d0:8a:8d:77:62:3e:8e:6c:df:eb:c1:1b:
                    3e:84:8b:39:3c:79:e4:2c:8f:5c:3d:dc:d9:c8:e6:
                    e0:3a:7d:a0:fb:d5:65:75:93:82:7a:ec:58:7f:ff:
                    bd:e2:be:80:52:bf:62:19:41:0f:32:4a:d3:b3:7d:
                    d5:a2:84:06:b2:5d:b6:7b:6e:aa:13:fc:0e:18:f3:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:35:D3:45:3D:3D:36:60:56:DA:EE:0B:8C:5F:9C:00:65:85:7E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl

            X509v3 Authority Key Identifier:
                keyid:9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:30:56:77:a4:1b:f9:2f:16:5a:12:aa:6c:2e:80:49:ac:e4:
         7b:13:0b:27:74:d2:1c:78:26:7f:38:d4:84:e9:87:d8:ba:e6:
         a7:0a:11:5a:83:0b:9c:34:af:35:a3:55:82:c9:14:83:9e:34:
         13:ee:b9:01:5a:20:12:88:ad:b7:7d:ae:7d:9a:b8:84:b9:0b:
         ff:da:e9:64:82:e6:66:0a:6e:15:94:98:8e:2a:d4:4c:36:39:
         dd:d8:e9:23:82:b8:25:5d:47:95:a7:60:e9:23:bc:ec:06:8a:
         69:b7:4a:84:b3:34:b5:c9:c7:54:0d:c2:79:68:44:5a:36:9a:
         52:e6:84:54:c1:f8:66:e9:26:43:49:91:e7:d4:5b:85:fd:96:
         13:4c:e3:ae:60:29:23:19:ba:d8:c2:f3:e9:cb:31:4a:76:f0:
         7a:0d:74:1a:03:ef:b5:e6:f8:8a:7f:4f:2e:97:5b:6d:33:6e:
         57:d8:3c:f1:6d:0f:a5:8f:6b:c7:b8:cb:7d:15:d3:98:e0:72:
         1f:89:b4:fd:83:1d:fe:6d:7b:5c:ce:b6:8a:fb:78:c9:60:ca:
         a7:6f:34:40:6a:aa:cf:c2:56:4a:d4:9c:3a:68:67:a1:6d:aa:
         a6:c6:1e:28:6b:ba:7d:5c:15:21:79:92:1d:e3:02:1f:e3:0b:
         77:c3:34:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 02:57:48 2026 by rpki-client