Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/cf00814b-3880-32eb-88c4-c73e3f030f73.roa
File:                     cf00814b-3880-32eb-88c4-c73e3f030f73.roa (raw, json)
Hash identifier:          rP/9eoUbMb0ZkYdZoZKCcCE8xouRmRQaeQJgNFbr3Fk=
Subject key identifier:   D7:28:CF:64:98:DA:A9:F7:2A:78:6C:9F:EE:B1:BB:3A:C5:9D:7D:99
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F4328584F225D01670D4674D6D985B000
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/cf00814b-3880-32eb-88c4-c73e3f030f73.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2602:80f:9002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:01:67:0d:46:74:d6:d9:85:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=1e6796b8-e672-4c8d-9f23-1c48a7460788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d9:4e:64:56:17:9e:0a:d3:92:70:a9:8a:47:
                    58:47:80:ce:c9:7d:33:84:60:c6:2d:aa:52:65:95:
                    12:af:71:b3:45:2f:f9:1b:cc:de:e5:8b:ca:d4:d8:
                    ee:77:52:a8:bf:6e:59:4e:11:6a:64:81:e7:f1:3d:
                    74:26:a6:a3:b4:c9:c3:d0:81:90:d4:28:af:21:3d:
                    6d:63:b3:00:36:17:b5:1b:9e:2f:b5:5d:b6:8b:06:
                    73:78:8a:08:70:f6:2d:b7:56:80:1e:7f:76:83:a8:
                    be:da:3e:17:82:3b:21:5e:cf:f4:93:31:7b:66:e9:
                    cb:41:5f:60:cf:03:13:0c:a9:5c:e6:57:bb:32:bb:
                    00:f2:cb:e6:b6:81:b0:48:bb:2e:3d:94:16:30:7f:
                    88:2a:70:8b:13:74:da:95:7c:f4:cf:da:80:cf:f0:
                    b4:b0:dd:0d:f1:85:32:ad:5f:2b:18:8d:7d:df:51:
                    21:3d:21:3b:d1:5c:28:66:1f:c0:b4:95:ed:6b:f2:
                    e3:2b:1d:b2:30:50:ae:3c:1c:09:be:33:cd:7b:89:
                    20:e8:4f:1c:ab:b3:e5:e5:e5:92:09:7c:ff:49:ce:
                    ff:31:08:ae:b1:5f:42:6d:21:4e:d8:19:8b:87:1b:
                    e0:52:66:31:88:4d:3d:37:41:ac:b6:9a:d4:eb:ac:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:28:CF:64:98:DA:A9:F7:2A:78:6C:9F:EE:B1:BB:3A:C5:9D:7D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/cf00814b-3880-32eb-88c4-c73e3f030f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:9002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:6f:54:6e:93:52:00:23:6a:51:7f:9f:b8:78:63:97:84:
         31:b8:23:04:79:a2:50:db:aa:c0:c8:27:26:50:88:84:d0:52:
         8c:d4:76:bd:b8:55:f0:74:8d:bb:eb:dd:f3:a6:bb:17:f2:11:
         5a:2d:46:89:5c:da:ee:d3:67:29:1e:99:0e:8b:90:b7:fb:c3:
         21:c3:24:29:c3:8d:dd:c7:c9:b7:3c:f2:6a:55:bd:04:9b:95:
         26:2d:27:f9:54:85:95:58:f4:24:09:ee:b5:6f:f6:27:5c:34:
         d9:b3:c8:e0:6b:f1:0f:a6:ef:1f:2b:12:4d:7e:87:a7:66:04:
         7d:f2:52:22:fe:c4:1c:15:f3:5b:9e:be:db:00:6d:3a:ba:40:
         8b:2a:7d:c8:4f:6d:82:ae:02:b1:65:cb:36:a1:a9:35:bb:ea:
         94:1e:57:5a:0d:ad:14:15:76:dd:33:c3:fa:85:4f:21:76:6f:
         61:31:e9:cf:ed:a0:2e:f2:aa:f7:19:75:a2:2f:7c:51:bd:40:
         62:91:84:f6:32:e8:cc:55:37:ef:e8:3e:56:9b:c7:23:4f:77:
         97:31:22:fe:05:39:99:59:4a:24:c7:80:56:85:21:59:11:a7:
         ff:bb:04:2b:11:1f:1b:ec:2b:99:49:53:12:82:38:67:79:95:
         18:63:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:09:20 2026 by rpki-client