Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af551ec0-d2d2-365d-ac95-d869b4c35812.roa
File:                     af551ec0-d2d2-365d-ac95-d869b4c35812.roa (raw, json)
Hash identifier:          zeMhLudZbsmhfzsUgC1FtUmu0TiEGRqLeuOZraG/pxg=
Subject key identifier:   9B:93:46:71:EC:22:D8:68:15:25:FE:E2:BD:44:A5:77:19:FD:05:EF
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584EA79339327F559104A3DBD990
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af551ec0-d2d2-365d-ac95-d869b4c35812.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16740
IP address blocks:        2602:f5c1:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:39:32:7f:55:91:04:a3:db:d9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a9d1d562-fcbb-4fe3-bf2e-0da5c4626e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:25:a4:ad:43:37:57:83:56:1d:ca:a3:4b:
                    ae:e6:f4:3a:9b:19:c4:37:17:77:9b:60:44:a5:91:
                    5a:d2:4d:56:9a:71:77:cc:16:26:e8:74:e6:cc:4c:
                    04:ed:c4:37:e5:2b:ec:ab:a4:f0:c9:f6:e2:c2:64:
                    45:a5:9c:a9:82:a2:fe:75:9f:7c:0c:69:ca:44:f4:
                    be:8c:20:e6:6e:2c:aa:e7:c9:7a:b0:28:43:09:9c:
                    2e:9d:65:d5:48:f9:b3:eb:fa:37:c1:a1:56:ff:e8:
                    a2:76:cd:cc:4d:f1:e1:0a:48:25:c5:6b:be:84:73:
                    06:ae:13:88:7b:43:72:f3:be:23:0f:19:1f:98:ac:
                    83:20:13:39:d4:6c:a5:01:0d:4c:fa:0c:74:12:a9:
                    24:4a:3a:c9:83:18:ee:fc:72:76:e0:d0:f0:a2:a3:
                    1a:be:75:d0:d9:14:d5:b8:04:f4:01:96:51:24:39:
                    95:7e:de:72:33:f2:78:fd:66:90:8d:24:ca:37:3c:
                    b2:6b:d5:a9:f0:0f:29:e9:82:ac:e5:6e:31:9a:f6:
                    d6:cc:da:87:cc:89:f8:91:16:f7:3c:58:56:a7:39:
                    3b:73:76:22:b0:d9:fe:a5:27:2d:37:8f:26:00:1a:
                    00:d7:fb:0d:32:b6:95:66:d9:0e:b6:07:20:58:26:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:93:46:71:EC:22:D8:68:15:25:FE:E2:BD:44:A5:77:19:FD:05:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af551ec0-d2d2-365d-ac95-d869b4c35812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e7:a5:cc:a3:2c:50:69:58:86:38:c3:60:4d:a8:47:46:53:
         5f:60:ac:bb:b4:68:71:2b:2a:f3:73:ec:9b:30:19:cc:b3:66:
         05:20:a2:46:c0:9e:cd:9e:f5:ad:45:6f:ee:33:a7:07:e4:3d:
         0a:d3:56:87:b7:ec:01:14:6f:ac:03:d3:ff:7e:13:a1:05:ab:
         9b:60:67:53:35:5f:6b:b5:1e:58:f1:d0:93:95:e9:79:04:ec:
         b9:46:f9:dc:10:d3:92:87:21:49:34:d0:8d:3d:9e:7b:15:4c:
         a1:be:1b:4c:27:0e:ec:59:e4:0c:e8:a1:40:ec:4f:29:41:f5:
         1a:9e:71:d2:6d:43:c0:31:43:7b:f7:a3:84:f3:25:15:ad:f2:
         8f:87:fb:e6:56:5a:fd:38:bc:05:61:94:83:3a:51:b9:e2:5b:
         ba:3a:b7:41:39:05:17:1c:03:cc:87:b9:83:89:40:70:a4:a7:
         3f:cf:af:bb:81:c6:40:a5:c3:8c:7d:0a:47:09:f6:ed:eb:d3:
         26:20:fd:3f:d7:37:f0:07:23:67:b1:ab:a0:b1:63:89:12:57:
         40:85:4c:15:6a:4b:dd:9d:ce:e3:cb:84:35:e5:b0:ac:a0:25:
         93:5b:88:51:6e:0e:62:3b:d6:e5:5c:38:de:59:37:91:af:e8:
         38:fe:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:43:27 2026 by rpki-client