Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/4ab593c5-f646-305a-af56-97081a91bc7a.roa
File:                     4ab593c5-f646-305a-af56-97081a91bc7a.roa (raw, json)
Hash identifier:          QAA6XOGUPAbfz6eX5HK3j3eyGgbvIajL/RUF4ZI6y98=
Subject key identifier:   FF:99:83:23:D1:FA:BF:BB:8D:90:DE:1D:76:1B:F3:C5:B4:AD:B2:77
Certificate issuer:       /CN=81b6f65d-ba30-4275-b918-46ded7381174
Certificate serial:       010D0C9F4328584F119CEB4F004C0FA97C109480
Authority key identifier: 08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/4ab593c5-f646-305a-af56-97081a91bc7a.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     399214
IP address blocks:        2602:803:7000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:eb:4f:00:4c:0f:a9:7c:10:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b6f65d-ba30-4275-b918-46ded7381174
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=85c0644d-8816-45d2-b611-043e2afba4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:67:9d:57:45:1c:49:cd:15:05:28:96:72:43:
                    cf:e3:9b:40:55:2b:cc:9c:7a:b8:33:ca:85:f5:04:
                    dc:b9:d8:49:44:3b:7c:8f:c8:f5:7d:0b:4a:db:e7:
                    0d:43:29:6b:ea:fc:ff:8c:e0:0f:8c:5d:5a:1a:a2:
                    2d:b7:b1:56:c2:06:75:73:c5:0a:b0:57:ef:10:8e:
                    33:d5:a7:bb:4d:96:cc:7a:49:32:d5:1d:32:6d:25:
                    c1:90:1b:e9:41:d6:bf:b6:a0:e6:6d:29:4b:38:33:
                    33:87:48:db:c0:5f:0e:9d:ea:a4:e8:71:00:25:f0:
                    21:48:20:a5:a8:95:23:57:5f:46:3a:24:1c:80:f1:
                    f3:aa:7c:c6:fe:c8:77:18:21:c2:e2:41:ee:2c:87:
                    e5:5c:ec:f9:ad:a4:b1:09:45:0e:8d:31:e0:65:8e:
                    49:4b:06:c1:67:73:39:00:59:02:fd:28:83:4a:7d:
                    35:b6:c2:51:f5:1e:26:11:92:64:ee:e5:b7:e3:f9:
                    8b:72:9c:8f:1c:f0:aa:55:44:68:64:12:99:b6:54:
                    87:30:38:a7:9a:65:57:a6:f6:08:87:43:8f:27:6b:
                    d4:0d:ca:f9:63:3c:cc:28:2b:a1:9d:10:f4:5a:e8:
                    41:13:93:04:b5:5e:f4:eb:14:71:7c:b0:5e:e2:76:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:99:83:23:D1:FA:BF:BB:8D:90:DE:1D:76:1B:F3:C5:B4:AD:B2:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/4ab593c5-f646-305a-af56-97081a91bc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl

            X509v3 Authority Key Identifier:
                keyid:08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b8:d3:4a:f5:26:ef:57:0d:d5:a4:ab:f9:47:de:ad:c3:b1:
         ab:63:57:77:42:83:51:c5:38:c6:92:c2:48:82:d2:6a:43:e8:
         e0:d6:5d:9f:b1:25:95:32:bb:8d:d8:17:6b:ff:4e:17:12:d7:
         cf:76:fa:a0:f9:5c:c7:29:97:49:7e:25:c2:14:4a:29:f9:8a:
         ed:11:1a:08:aa:22:3d:41:78:af:17:02:62:f2:c8:d1:e8:e4:
         5c:67:f7:a8:61:84:78:46:6d:9c:d0:4f:d5:18:1e:1e:e2:99:
         7f:da:29:5a:c8:65:b2:53:9a:03:8e:49:6c:51:66:1c:e0:45:
         db:76:81:04:95:88:64:50:fc:c1:ab:2c:ba:a8:55:c0:40:7a:
         00:fd:60:61:37:74:4e:2c:f4:5f:c4:9a:eb:e5:e2:96:26:cb:
         bf:44:66:87:f5:d6:62:f6:a4:c2:d0:d5:bf:94:96:d4:6d:3c:
         da:5e:21:42:08:08:7f:c6:13:ce:cc:33:6e:78:15:95:d5:b8:
         1f:3a:9a:75:e6:e8:50:a2:99:0a:99:76:88:77:20:1d:72:72:
         af:b2:8d:eb:83:5e:15:21:99:16:99:95:ec:ff:cd:cb:89:08:
         20:e6:b8:ed:4f:59:c2:e7:32:a1:1c:54:24:7c:ac:cb:3f:37:
         88:69:e0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:27:30 2026 by rpki-client