Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/897e5bf9-2680-3976-86db-3f623fa56f40.roa
File:                     897e5bf9-2680-3976-86db-3f623fa56f40.roa (raw, json)
Hash identifier:          iOhHkCu3dnU4J5DsgUOB/XzwLr+n1VNQ3vgQYbxoYX4=
Subject key identifier:   D0:16:AB:25:5D:54:4A:09:01:43:DD:B6:5E:F9:78:39:4D:7F:D8:7C
Certificate issuer:       /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
Certificate serial:       010D0C9F4328584F093CE2004C6559380588AE40
Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/897e5bf9-2680-3976-86db-3f623fa56f40.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     6517
IP address blocks:        2602:f5b0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:e2:00:4c:65:59:38:05:88:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=4d0f9880-f7ae-41cf-829d-3f38491b4b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:ee:65:6d:1d:86:66:5f:20:b5:be:be:28:
                    e5:55:52:24:df:86:bf:e5:62:1f:d4:c6:b3:4e:99:
                    86:71:ad:09:ba:5d:58:60:fd:b8:85:bd:87:46:2a:
                    26:24:cf:dc:43:07:88:e0:fc:87:70:5b:49:eb:1b:
                    65:26:93:94:a1:69:7d:19:73:2d:5c:6f:70:03:6c:
                    7c:2b:38:59:a0:5d:98:82:ec:9b:b6:2d:02:3d:5f:
                    a2:14:8f:6b:6d:7e:85:1c:8e:34:56:f2:1d:94:23:
                    38:9d:8a:8e:e8:01:b6:08:55:a1:f8:6b:03:5e:79:
                    2d:7e:68:01:c8:21:00:fe:a6:de:af:29:e2:e3:90:
                    7f:41:1b:cd:bc:51:e3:06:c8:63:2f:23:0a:39:f9:
                    8b:cb:4f:b9:68:3f:8f:e4:31:9c:e9:99:46:87:7f:
                    8b:1f:4d:50:cf:e2:50:c1:e0:27:5c:ce:57:f0:ad:
                    85:a7:dd:eb:db:4e:79:22:f0:33:0d:d0:dc:fe:20:
                    46:6a:c8:7c:4b:ce:6a:d0:99:54:60:0b:73:44:3a:
                    2e:73:9c:04:ba:6b:58:68:8a:59:73:98:73:11:9d:
                    db:47:93:17:cf:88:9f:6b:f1:86:0e:51:b5:9c:63:
                    c0:c6:a6:cb:ec:57:b2:60:7a:4d:e6:cf:e6:97:58:
                    df:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:16:AB:25:5D:54:4A:09:01:43:DD:B6:5E:F9:78:39:4D:7F:D8:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/897e5bf9-2680-3976-86db-3f623fa56f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5b0:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:80:66:c4:79:38:9b:e5:81:4e:24:b1:58:1f:2c:20:6c:
         cf:38:c3:c9:33:13:4b:ba:92:10:9c:88:f6:51:5b:36:91:02:
         ea:b6:ff:05:b8:54:df:58:45:e8:fd:b5:d8:9c:eb:3c:df:2d:
         2c:b6:eb:f2:d8:a0:d6:af:70:53:f5:0c:22:35:18:c5:5d:15:
         e9:37:88:1d:b6:ae:54:7f:af:42:63:d2:97:2c:6d:b4:90:ba:
         a8:dd:e7:96:19:32:83:9a:1e:0b:66:83:f4:8f:24:5d:20:7b:
         d3:c9:52:55:0f:a1:e0:ab:51:88:c7:ff:c3:0f:1e:92:47:66:
         98:3d:96:14:6c:1c:ec:fe:7a:79:c0:3d:2d:3a:fa:3e:8f:6b:
         d4:55:18:fa:4b:24:cc:c6:46:25:91:41:17:c0:fb:b8:70:0a:
         97:79:eb:9c:f3:b0:8b:6e:4a:3e:99:0b:73:ac:8d:5e:fc:f7:
         9e:02:a6:e2:ec:31:62:68:47:cd:0c:d7:a6:2f:17:5a:6d:14:
         1b:99:63:5b:41:da:2c:76:98:f0:37:6f:d0:9c:c8:d7:25:c1:
         ad:dc:94:de:bd:42:33:bd:b0:95:c1:b9:51:91:5c:90:e7:04:
         01:41:11:a6:bc:ca:26:0e:25:6f:2d:cf:64:cb:cc:c5:80:b7:
         4a:3b:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:45:41 2026 by rpki-client