Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/1b24bd60-12a9-354d-86a2-a173c4a0ed83.roa
File:                     1b24bd60-12a9-354d-86a2-a173c4a0ed83.roa (raw, json)
Hash identifier:          dJzrBHu9fdZ2jlNoB3vexmL+0Srkd5neiEk89v4UT4o=
Subject key identifier:   7F:AA:B4:82:2C:88:A5:79:B3:3A:AD:E4:7E:71:A5:D5:89:0D:38:9A
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584EA795C66BAED6A3991B84AFC0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/1b24bd60-12a9-354d-86a2-a173c4a0ed83.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16740
IP address blocks:        2602:f5c1:23::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:c6:6b:ae:d6:a3:99:1b:84:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f99adc6b-5689-4d89-8304-0167501e308a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:21:14:8e:01:6c:4b:2a:77:5e:7b:5a:92:dc:
                    fc:bc:9c:17:df:91:2f:ae:bb:02:e0:1b:53:33:3e:
                    9a:4e:44:9e:fa:0e:66:ee:3f:6e:24:4d:11:a1:3a:
                    65:ef:46:bf:45:69:62:5f:b9:7e:bd:c3:3c:05:01:
                    6a:8c:10:1e:c4:46:d9:da:30:55:20:6c:f7:4f:b8:
                    a7:73:4a:3e:7c:c7:b9:3e:0c:a6:b0:ef:c4:f7:a2:
                    ce:7e:83:02:83:50:62:30:b6:0e:c5:13:c5:4e:da:
                    37:e0:6c:40:68:4f:66:90:fc:71:9c:1a:97:9f:26:
                    99:ba:f8:d0:97:92:f9:2d:c7:94:67:11:fb:55:0f:
                    9d:ff:b2:60:bc:35:80:be:38:1e:a7:1d:61:83:e1:
                    ab:f7:a3:74:f6:46:1b:44:f3:b6:34:1f:99:55:94:
                    05:8d:68:ce:43:ee:ed:5f:1b:27:39:2b:2f:e3:b4:
                    21:f6:f7:74:a8:ab:df:76:e7:9c:d8:41:3d:7a:62:
                    66:25:bf:45:ae:d5:f5:cf:54:94:a5:33:70:7b:8d:
                    84:97:1e:d5:a4:ed:f5:0e:68:bd:4d:54:1a:9a:f6:
                    9f:3a:87:47:ff:b7:8e:31:a7:c0:a8:ce:0f:f4:92:
                    fe:d8:0b:53:04:17:21:cb:be:6d:a4:0f:19:22:20:
                    fd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AA:B4:82:2C:88:A5:79:B3:3A:AD:E4:7E:71:A5:D5:89:0D:38:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/1b24bd60-12a9-354d-86a2-a173c4a0ed83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:23::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:96:e8:27:64:1e:12:83:33:84:5a:07:d3:40:28:47:08:f6:
         ac:33:34:b4:72:78:35:2c:64:05:99:b2:bd:a0:fb:99:ac:47:
         89:0b:f2:60:34:38:6c:42:c4:c4:d6:4c:e3:69:af:53:93:f8:
         63:59:74:57:45:c4:8f:c5:93:87:53:6c:97:0c:1c:7d:a5:65:
         74:98:99:95:32:b0:32:b0:54:33:78:99:6f:12:20:e3:3a:47:
         ec:ce:b2:c8:71:12:af:a5:3d:4d:96:3c:11:20:fe:10:e3:d3:
         02:61:22:95:8a:00:4f:f4:e0:cf:4e:17:6d:18:23:e0:eb:1a:
         b9:e9:df:7b:41:0d:3a:70:75:6f:8d:d1:3d:66:7c:14:32:32:
         70:5c:e2:bb:2b:fd:24:82:2d:09:21:fc:c9:fc:ac:77:76:8a:
         47:40:e3:e1:8b:8e:ee:81:f5:39:b8:46:21:c4:7f:e7:7c:df:
         42:a5:7f:b7:a6:89:2d:e4:89:81:0a:f3:9c:4e:a2:72:12:1e:
         8d:60:00:f9:cc:30:f2:77:0f:d5:96:b8:86:20:7e:85:16:49:
         b2:bb:01:29:0b:4f:64:ac:43:4f:fc:60:74:fd:25:33:87:07:
         c0:65:43:87:df:10:01:81:2d:10:47:df:a7:62:91:2e:ba:8a:
         7e:e0:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:49 2026 by rpki-client