Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa
File:                     49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa (raw, json)
Hash identifier:          kRXee3OVvfVRyzySLYkx4PSjwf6CQl6OMwM4FpRo6Jk=
Subject key identifier:   D6:3F:2F:8E:47:9A:A7:DF:4C:BB:61:D8:FF:02:C3:C4:9B:F0:E2:92
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584EE0C20E9C2415F6AA5706D400
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     54613
IP address blocks:        2602:fd9a:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0e:9c:24:15:f6:aa:57:06:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=de4dd67d-9b30-49b2-aa0b-555dea55cf9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:08:d6:37:6e:16:42:8e:a4:db:2b:8d:ac:
                    3d:46:18:b7:ce:4b:53:23:81:55:d3:77:04:49:5a:
                    10:7c:04:81:27:a3:31:10:6d:21:95:7f:b1:c7:39:
                    92:bc:5a:f3:90:38:0d:43:5b:5d:48:98:d5:f9:be:
                    94:c6:7a:5a:0d:53:3c:07:59:67:81:f3:32:7e:1a:
                    bd:14:06:0e:11:67:ee:ce:07:e1:83:f4:49:cd:54:
                    9b:a5:4c:ce:10:0c:2b:8b:ea:17:b2:91:71:2a:e4:
                    90:df:c1:8f:79:f9:92:f9:e6:3a:84:3d:ed:b5:f9:
                    e2:15:7b:13:7d:01:72:24:61:a0:7d:dc:ee:81:77:
                    22:36:76:39:cb:fa:62:58:bc:c0:72:61:7d:7d:9e:
                    54:d2:76:92:c9:18:c4:04:12:17:90:bf:54:77:fb:
                    ab:4e:9e:18:74:63:21:8b:2f:a0:2f:2b:8d:73:a9:
                    12:7b:36:4b:f2:8f:06:ab:f9:b9:05:ef:2a:6f:42:
                    4b:4c:e7:e3:52:bf:05:62:e6:60:17:7e:46:da:fe:
                    93:b8:e8:88:52:0c:75:35:28:27:b7:57:d9:4b:9a:
                    71:66:34:8d:9f:44:ae:d3:c8:32:19:2c:51:69:a6:
                    7f:f9:95:ce:17:00:66:63:70:07:e2:8e:3a:f2:89:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3F:2F:8E:47:9A:A7:DF:4C:BB:61:D8:FF:02:C3:C4:9B:F0:E2:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:59:40:b7:72:ae:15:1f:92:1a:68:53:6e:73:25:92:a4:b6:
         90:fb:34:26:bb:3f:8e:25:c1:49:ca:5d:4a:bc:bc:75:83:68:
         72:b5:fb:cf:38:ef:b1:2d:19:6a:f0:3e:8d:87:f2:c8:26:82:
         62:68:0b:5e:10:c2:09:78:58:4b:71:23:d9:42:22:cf:36:0f:
         fe:06:2c:04:cd:32:cc:53:2c:fd:d9:7d:73:13:75:7f:f4:46:
         be:23:47:da:68:2c:fd:6e:2d:f4:7a:d7:a8:6f:58:62:da:84:
         43:03:4d:23:fa:3d:cd:f4:65:9a:4c:26:bd:ec:e8:29:25:30:
         5c:7b:93:36:be:a0:06:0c:8f:8d:11:28:a8:33:62:26:a5:7c:
         dc:37:c5:ad:7d:c7:69:38:78:ac:88:2f:e2:95:be:54:46:f9:
         5d:d1:1c:b2:d5:b0:38:75:7c:b1:d2:c3:be:54:66:9c:24:bb:
         3b:5f:cd:6c:16:a9:a4:58:f6:60:2d:fe:9b:d6:d6:f7:9e:eb:
         6a:59:50:17:29:89:56:fc:5d:f0:dd:01:c8:17:5c:40:b5:99:
         29:82:67:de:f9:d7:8a:7d:8f:44:cd:99:77:39:32:d0:fb:ff:
         fa:8e:29:90:0f:c7:4e:df:c6:39:63:4a:52:1c:42:b6:84:bf:
         17:12:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:54:11 2026 by rpki-client