Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/428c46a9-c7ff-352c-b7a9-747ed2bd11a9.roa
File:                     428c46a9-c7ff-352c-b7a9-747ed2bd11a9.roa (raw, json)
Hash identifier:          KC2NYm4qAERvvtjydq5oiHiLaUfYbnXdn056S9VojFM=
Subject key identifier:   9A:46:33:59:31:8E:15:FC:71:B3:AD:D8:55:3A:BE:7D:F0:27:AF:57
Certificate issuer:       /CN=68da87f2-77b1-4965-8477-aac285a6686d
Certificate serial:       010D0C9F4328584F4973E612D5411ACF0EF25CA0
Authority key identifier: 07:2F:90:16:22:7C:01:82:FD:C6:7D:1B:FC:AD:C6:85:4E:C3:F8:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/428c46a9-c7ff-352c-b7a9-747ed2bd11a9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400812
IP address blocks:        2602:fadb::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/68da87f2-77b1-4965-8477-aac285a6686d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/68da87f2-77b1-4965-8477-aac285a6686d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e6:12:d5:41:1a:cf:0e:f2:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68da87f2-77b1-4965-8477-aac285a6686d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=897366c0-c07f-4967-8aa3-b45de0dec4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9b:c6:47:fa:f5:c0:03:37:2d:e5:f1:61:72:
                    ac:fc:1d:6a:26:32:f3:00:98:0c:ca:22:97:ff:b5:
                    02:cb:81:46:7e:4a:26:e5:0d:e6:e3:33:c4:8d:ff:
                    cd:4d:88:da:b7:7a:0a:85:16:41:f6:fc:9f:d6:1d:
                    59:d3:7c:17:4d:b1:ae:d7:be:d9:05:7e:fb:c5:0e:
                    11:32:93:27:9d:0b:23:92:fc:64:72:20:74:44:ec:
                    6f:f5:d6:7f:e5:9f:02:17:c0:86:e8:5b:3f:8e:aa:
                    f1:5f:7a:46:85:73:85:5f:9d:7f:9c:ca:f5:d4:71:
                    8b:02:fa:82:1c:2a:4a:7d:a6:4b:bd:c9:3b:cf:d6:
                    2c:79:51:fa:91:b2:c3:eb:aa:56:10:b0:f7:ee:06:
                    60:6b:93:35:62:c1:d6:56:e4:ea:16:f1:76:99:10:
                    9c:d1:94:c2:ed:bd:98:00:19:bc:24:43:31:35:3d:
                    6e:16:1c:a6:0a:f8:32:54:d8:1e:fc:1b:f7:e0:40:
                    a3:31:c8:9a:75:24:f7:52:0e:45:2c:60:7a:c8:9a:
                    55:2d:c8:f5:67:08:24:01:74:fc:40:27:80:81:8a:
                    60:ac:78:24:9b:76:67:08:69:6f:70:02:42:a8:a6:
                    42:8d:0f:4b:e9:9f:10:ca:64:4d:c0:55:4d:cc:00:
                    ae:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:46:33:59:31:8E:15:FC:71:B3:AD:D8:55:3A:BE:7D:F0:27:AF:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/428c46a9-c7ff-352c-b7a9-747ed2bd11a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/68da87f2-77b1-4965-8477-aac285a6686d.crl

            X509v3 Authority Key Identifier:
                keyid:07:2F:90:16:22:7C:01:82:FD:C6:7D:1B:FC:AD:C6:85:4E:C3:F8:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fadb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:b9:f7:91:e9:09:4c:c7:1f:98:af:18:31:87:c6:33:44:
         47:77:38:c2:72:8d:7f:5e:55:34:c1:25:ac:bf:a0:fd:d5:13:
         89:bd:f3:75:c3:6e:8f:7d:0c:2e:c4:50:f7:26:84:26:b4:39:
         aa:03:8d:87:f4:9d:55:c3:73:01:32:89:5d:60:14:7a:c9:df:
         d3:90:4c:47:40:dc:67:52:39:44:9a:01:ba:f5:c1:c2:29:e0:
         e4:20:a0:b7:c9:f0:09:e6:c1:13:59:0f:cb:8a:62:d0:1a:b4:
         6f:25:5e:fe:ab:9b:00:d6:ce:f0:33:4c:c7:db:a9:87:5b:5b:
         e1:52:c5:ae:6d:82:71:43:54:98:ad:05:e9:28:c0:a9:b0:db:
         94:04:52:0b:f2:cc:f4:82:5f:e4:62:e0:01:ee:f0:b4:a4:22:
         3f:e5:4c:c8:4b:75:bb:73:11:4e:2b:c6:cc:26:67:bb:e7:9e:
         8c:1c:61:7d:ac:c9:87:a0:82:ae:57:08:e7:50:0e:8a:cd:d1:
         3c:bf:cb:6a:1e:1f:87:0d:b5:71:e6:89:33:a0:80:ad:c1:20:
         fd:0a:a0:a9:e5:8d:7a:b2:b6:1f:7a:6f:69:d6:d4:b7:d7:29:
         b1:d2:22:ce:a3:00:3c:02:6d:fd:2e:04:5c:52:d9:fc:d5:a1:
         10:39:a9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:19:53 2026 by rpki-client