Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/a7bb83b8-57b1-3c19-ae66-1dd12c927356.roa
File:                     a7bb83b8-57b1-3c19-ae66-1dd12c927356.roa (raw, json)
Hash identifier:          6LyWx4MkE8C9q8z2UVyQs76ZNIPAg2V2qgDNvztKka4=
Subject key identifier:   A2:AB:48:69:CD:AD:DE:5C:F5:B1:D1:52:AA:19:0B:04:47:C5:A4:DD
Certificate issuer:       /CN=eb14eb3d-346a-447d-adfe-7256c1a87ce2
Certificate serial:       010D0C9F4328584F655D699119C062D78D9BA040
Authority key identifier: D8:E3:69:76:55:7F:03:3D:7A:D0:76:19:B0:5C:40:80:F3:92:5B:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/a7bb83b8-57b1-3c19-ae66-1dd12c927356.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     8075
IP address blocks:        2602:f7be:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/eb14eb3d-346a-447d-adfe-7256c1a87ce2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/eb14eb3d-346a-447d-adfe-7256c1a87ce2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:69:91:19:c0:62:d7:8d:9b:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb14eb3d-346a-447d-adfe-7256c1a87ce2
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=f144babf-c2f7-4008-8630-c03b4581f568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:0d:be:04:25:78:14:08:0c:76:42:6e:40:
                    2f:de:54:f3:0c:13:12:92:28:85:0a:99:70:d8:2c:
                    07:df:e7:70:c1:fc:33:f6:83:41:cc:eb:d2:a2:95:
                    85:6e:c8:d6:aa:9f:45:23:a0:c3:63:6d:97:90:c7:
                    45:a7:c3:74:bc:ec:a7:7a:08:32:a6:44:49:06:da:
                    e4:f1:9e:55:62:d3:eb:c4:c3:9b:13:83:1f:5f:24:
                    83:5e:02:a2:e2:34:c6:5f:b3:a7:ee:1b:13:d0:35:
                    92:4e:b1:09:00:e6:f3:98:e7:c6:ef:51:af:34:01:
                    fc:a4:13:25:bb:36:bd:e9:01:eb:cb:30:43:d7:bd:
                    bc:8d:20:a7:2f:72:12:cb:03:02:94:53:33:a5:fd:
                    df:9b:01:a3:50:9b:da:26:6c:41:95:5f:bd:23:a1:
                    42:f3:5e:37:7b:cc:32:39:9a:28:a8:c0:27:19:22:
                    65:44:84:35:86:07:6c:a3:d9:cf:e6:d0:28:d2:af:
                    c2:f4:47:72:e7:80:c9:3b:45:aa:cd:bd:b7:dc:eb:
                    55:55:cc:c6:be:3b:f3:ee:70:64:6d:2d:cd:b7:d4:
                    14:02:e1:5c:6d:d3:6f:89:f3:b5:41:87:6c:3d:8f:
                    ef:e2:93:8f:32:e1:bc:71:c1:a5:fd:20:3d:49:b4:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:48:69:CD:AD:DE:5C:F5:B1:D1:52:AA:19:0B:04:47:C5:A4:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/a7bb83b8-57b1-3c19-ae66-1dd12c927356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/eb14eb3d-346a-447d-adfe-7256c1a87ce2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:E3:69:76:55:7F:03:3D:7A:D0:76:19:B0:5C:40:80:F3:92:5B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7be:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ac:a8:c5:24:7d:c3:f3:38:16:2c:66:61:3a:d8:3d:cc:65:
         fb:e0:ac:e4:93:83:51:54:aa:95:97:6f:81:0f:c8:0f:dc:a1:
         83:86:bb:86:d0:a9:7f:6f:3a:34:c7:6d:cf:52:2c:06:ea:ec:
         2a:aa:a1:e4:b1:08:fb:e4:0e:82:ad:25:0e:52:49:d9:6f:b6:
         ee:a4:eb:d0:f2:8d:aa:ef:bc:1e:8e:05:ee:b5:c8:2f:59:9c:
         b6:0b:49:01:db:e1:6b:49:35:56:c8:02:98:6c:29:b4:97:17:
         ff:cf:7c:99:bb:8d:88:13:ca:a6:46:6a:3b:33:58:24:b8:60:
         b1:86:a0:a5:1e:c2:e8:76:bb:56:71:f3:7b:2b:8c:4e:aa:92:
         37:6c:77:97:e9:51:f6:ee:14:8f:2d:ad:0b:1b:b6:8d:96:10:
         2d:51:43:17:c2:ce:fb:d8:5c:8d:10:47:f0:c7:8e:5e:24:c7:
         fb:fd:ff:f9:99:52:95:ec:97:d6:0a:d5:5d:3a:53:5a:26:97:
         74:02:ea:cd:8e:35:1b:87:68:19:41:9b:7b:6b:89:e9:a5:1d:
         9d:c1:fd:ec:36:e5:a1:72:c9:a9:3d:d2:1c:9a:e7:d1:75:fb:
         e7:32:32:81:a9:f9:6d:0f:94:7a:b2:60:53:03:76:b2:fc:c1:
         51:47:af:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:59:10 2026 by rpki-client