Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/1c8c64bd-803d-3a13-a65b-2dc9f6558fd0.roa
File:                     1c8c64bd-803d-3a13-a65b-2dc9f6558fd0.roa (raw, json)
Hash identifier:          M5RhRrUZPrCujk37etPCRHN1SFq4uePXMz4ERMpbVzc=
Subject key identifier:   A6:01:42:43:0F:A5:C7:46:95:84:FD:15:2E:86:97:D2:58:E4:D7:76
Certificate issuer:       /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial:       010D0C9F4328584F1F92480967E05580695F0400
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/1c8c64bd-803d-3a13-a65b-2dc9f6558fd0.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        2602:fb00:e6::/48 maxlen: 48
                          2602:fb00:e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:48:09:67:e0:55:80:69:5f:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=fbe2b673-cedc-4e70-ab45-55ad309e512d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:dd:1b:a6:5d:ff:7d:19:3d:c6:3e:72:a1:
                    60:41:a9:b4:6a:81:d0:ed:fb:9c:eb:52:6a:44:5f:
                    3a:ac:7a:a1:f8:52:b7:e7:0e:71:f6:0c:dc:a8:60:
                    3e:26:1c:12:e7:b4:6a:63:2d:c6:4d:6f:40:61:71:
                    f8:d5:31:bb:1b:4a:47:93:77:3a:95:06:f6:cd:7b:
                    64:d8:ea:c3:b2:d9:29:c0:34:28:e5:d8:ec:12:8e:
                    26:a6:94:8a:10:95:47:b6:d3:d7:bd:39:b2:ac:ca:
                    83:67:9b:40:40:f4:46:a0:98:58:94:8d:de:e3:1d:
                    8b:7a:7b:c1:34:22:14:f0:6a:f8:03:aa:6f:2d:c1:
                    98:ee:b5:e4:33:17:5c:5f:8c:89:1c:a1:f6:9f:b5:
                    19:25:d0:0c:17:75:5f:46:1b:d9:e5:bc:ee:95:0f:
                    c0:25:ce:c5:28:45:ba:43:5f:74:f8:df:01:d1:2a:
                    b2:54:a1:c4:c6:86:06:e5:44:6c:d5:6c:5b:63:1e:
                    bb:3c:a1:40:f0:40:b2:cd:e1:75:ae:6c:62:10:b3:
                    bd:62:d6:ff:ee:d9:50:26:0b:80:a8:9d:09:5d:6a:
                    3b:d5:b8:61:41:54:3f:db:fa:4f:d2:24:6c:de:45:
                    7e:86:c0:3c:19:1f:78:68:e8:49:60:ce:ec:95:91:
                    a9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:01:42:43:0F:A5:C7:46:95:84:FD:15:2E:86:97:D2:58:E4:D7:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/1c8c64bd-803d-3a13-a65b-2dc9f6558fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl

            X509v3 Authority Key Identifier:
                keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb00:e6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:7a:c7:a0:6e:6a:ba:cf:25:a0:2a:29:f1:b9:c2:94:5f:90:
         5a:22:78:33:2a:f3:db:fe:62:5f:1f:5d:d8:74:c7:e9:84:20:
         42:70:01:4e:01:fe:26:17:41:3f:01:0d:2f:1d:36:8d:e3:c8:
         a6:f4:73:10:87:38:f3:f7:56:a1:e6:3d:07:f4:db:82:85:1e:
         6e:12:8e:b9:40:f5:53:1b:42:6d:28:6f:7e:db:b0:ff:e3:af:
         75:eb:02:22:b9:c3:a8:a3:54:4b:4c:2d:3f:1d:45:24:4c:c7:
         81:6d:1d:c2:aa:61:b6:28:aa:73:d0:6a:3f:61:19:44:9d:2b:
         ca:ca:f0:a8:48:0c:44:5f:10:01:0f:f0:b4:19:58:a9:8e:e6:
         c4:ba:22:c1:e4:fe:86:19:53:e9:0f:f4:43:88:85:5f:5d:91:
         cf:0f:d6:5c:e7:e5:45:8e:db:86:77:98:a1:49:48:d9:c7:c7:
         0e:d1:f4:81:c8:45:ad:8c:c8:c2:44:fd:a5:ee:39:08:4f:2a:
         1d:c3:74:d1:db:63:74:48:63:29:88:33:04:e7:b4:28:17:84:
         e1:78:99:46:7d:1c:6b:94:a1:6a:12:93:63:3d:1d:3b:6f:17:
         41:da:57:4f:0c:b1:53:a9:de:1b:1f:c4:ba:0a:12:89:3a:45:
         1e:7f:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:52:34 2026 by rpki-client