Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa
File:                     6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa (raw, json)
Hash identifier:          a19mguq9GnbyWeJcPX7TY1pQDu5t1IA5FnKnwRhhWms=
Subject key identifier:   5E:A7:31:E0:67:F6:B3:D7:F3:B3:E3:54:A9:36:2C:85:DE:27:38:1F
Certificate issuer:       /CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
Certificate serial:       010D0C9F4328584F497370757C1347140B77D600
Authority key identifier: C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     138997
IP address blocks:        2602:f7ac::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:70:75:7c:13:47:14:0b:77:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=78cecbb6-ab31-4f51-ba9e-dcfa7e4cccd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e2:11:e0:c6:97:49:da:b7:04:b6:90:b7:63:
                    da:e5:ee:8d:07:00:5d:ce:f2:0a:c3:c7:2e:0d:d4:
                    d7:f3:99:39:35:1b:c9:ab:33:43:00:d9:1b:c6:cc:
                    a0:37:4e:0d:58:4a:c6:5f:66:cb:c8:c0:5a:ac:53:
                    39:69:7e:25:8a:ee:aa:45:cd:53:ea:2c:66:4c:8b:
                    98:9e:2f:07:f0:85:97:53:5a:cc:e7:78:42:94:63:
                    54:22:54:3b:bc:7c:bf:59:0f:d6:71:3b:cb:d6:7c:
                    27:a8:fc:ed:6a:17:57:35:5d:9a:92:77:59:62:e1:
                    9b:5f:60:58:ba:bb:62:e6:39:e3:46:4a:7d:48:f7:
                    2d:ef:c3:da:bf:38:c9:97:04:7f:63:cd:4f:bb:cd:
                    29:fb:77:e2:58:ae:8f:8e:2e:2a:70:2a:8a:06:d6:
                    ed:76:44:de:4d:37:2c:1e:e3:42:c5:d8:85:87:9d:
                    32:2a:18:62:7a:e6:cd:2a:ba:64:f1:2a:13:e1:7f:
                    6a:3b:6e:e0:c9:a2:63:af:1b:ef:e1:ce:7f:db:07:
                    71:20:4a:b5:c1:d6:c5:dd:f1:26:37:05:98:7a:c4:
                    b9:74:7e:32:87:e7:7d:42:96:07:a1:db:73:dc:73:
                    58:72:a6:c0:d6:8b:e9:17:ba:ce:e1:bb:13:63:b0:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A7:31:E0:67:F6:B3:D7:F3:B3:E3:54:A9:36:2C:85:DE:27:38:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl

            X509v3 Authority Key Identifier:
                keyid:C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ac::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:04:e2:e9:87:fb:e9:8e:3f:a8:51:71:a9:18:86:f3:8f:3b:
         91:f7:1b:b4:6d:6b:ee:4e:36:f2:4f:5e:95:d1:a0:41:dd:78:
         42:ec:6c:2e:f9:66:91:37:32:8f:62:f0:90:e2:db:de:a8:76:
         94:ec:e9:14:f3:ce:9c:6e:8c:b7:1a:10:91:04:e4:a8:b8:43:
         64:9a:e8:55:2a:62:b7:0d:96:a1:69:a7:10:9a:0b:24:59:24:
         3d:4c:76:f3:90:21:03:f8:02:e2:de:90:5c:1a:84:09:97:5c:
         9f:25:20:86:3d:1b:55:90:58:90:50:bb:03:da:df:99:41:29:
         75:98:34:b3:4f:6c:dd:f2:ec:80:a1:45:3f:3d:2a:54:9e:51:
         38:9b:6c:67:8b:ec:a1:06:2e:3d:9b:88:0b:ef:37:87:ee:61:
         1a:d7:23:ab:94:b5:1c:cc:26:10:43:7b:0f:83:51:53:4c:82:
         17:65:ab:18:d2:c8:42:e6:b2:46:7d:a3:a3:94:e4:7f:94:c6:
         4f:aa:4f:52:45:14:27:14:2e:6e:45:b2:30:78:55:61:b7:32:
         c2:b1:07:5f:94:5b:6d:ae:c0:a0:64:64:c8:55:a8:b8:be:cc:
         c4:85:88:30:44:d6:94:7a:3a:8b:2e:d0:b0:1e:53:b1:b1:6d:
         6e:a0:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:49 2026 by rpki-client