Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/bd58e240-dd72-3172-9a5a-36319cc7a8b5.roa
File:                     bd58e240-dd72-3172-9a5a-36319cc7a8b5.roa (raw, json)
Hash identifier:          J67aaTfJpMaRDYQSAHotqc2M70y4lnYasVd77sX3xyM=
Subject key identifier:   29:94:65:90:AA:32:0A:EE:38:32:6C:66:E8:A3:07:4A:EB:36:8E:39
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F4328584F4973F9D38D58CEB3BA44C940
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/bd58e240-dd72-3172-9a5a-36319cc7a8b5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     49707
IP address blocks:        2602:fba2:1::/48 maxlen: 64
                          2602:fba2:2::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f9:d3:8d:58:ce:b3:ba:44:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=988a330a-096e-46af-89d0-edd5de9726a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:79:84:65:96:b8:b3:1b:90:db:a9:6e:65:
                    f3:31:23:be:60:ae:3b:a3:53:97:88:12:a6:9c:c3:
                    49:0d:18:da:03:3b:53:1d:05:e8:59:98:ed:68:8e:
                    e2:55:50:ff:76:48:3b:7a:e2:0d:52:b2:8f:85:76:
                    2a:c0:e2:ac:19:65:b1:c8:34:f6:3a:8b:3a:d5:fa:
                    68:81:22:b5:49:dd:43:5f:da:43:f3:41:cb:99:69:
                    70:3d:eb:73:c2:23:9b:ec:ab:2d:24:64:37:28:f7:
                    95:bd:43:52:b5:7c:6d:df:18:36:39:4a:8b:f1:63:
                    19:5c:04:e3:48:a9:ac:4b:3a:d9:d3:a4:76:91:9a:
                    46:0d:57:b9:99:e4:19:e4:d7:9a:be:90:1b:fa:85:
                    c3:19:60:3b:82:85:d0:44:1a:02:03:b1:0e:62:d6:
                    21:e1:a5:e4:2d:b3:f8:e6:c7:9f:f1:cf:ec:ee:80:
                    20:a3:da:0b:4b:38:bf:e6:bd:63:df:bf:92:c7:a4:
                    d3:9b:d8:e1:7e:a1:42:0f:ca:4d:de:76:65:42:25:
                    17:33:55:4f:f6:47:83:6b:a5:cf:c5:e7:91:69:57:
                    47:82:f9:91:56:35:60:40:e5:36:40:6a:ec:ce:45:
                    c3:93:36:27:27:b0:71:9f:40:d8:87:78:0d:14:cc:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:94:65:90:AA:32:0A:EE:38:32:6C:66:E8:A3:07:4A:EB:36:8E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/bd58e240-dd72-3172-9a5a-36319cc7a8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba2:1::-2602:fba2:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7e:dd:a7:88:82:e4:dc:8d:7d:65:39:8f:3e:3c:90:af:f6:
         ea:09:2a:90:bf:48:1a:1f:83:a7:5e:04:31:1a:7e:60:08:44:
         0d:cd:cf:9d:32:54:94:dd:72:9f:55:cf:bc:64:5d:83:1f:6e:
         9f:4d:3a:70:88:5d:e2:97:cc:a7:cc:38:12:39:64:cd:9d:9c:
         41:80:ac:90:21:a7:f2:2e:41:e8:15:46:dc:c8:1d:aa:f6:cd:
         55:40:fa:44:b0:fc:37:b7:6c:f0:71:ec:c1:28:48:76:9b:71:
         5a:aa:36:92:6e:5c:8b:f7:c1:fb:81:f0:00:58:46:bc:bd:74:
         61:5a:98:56:76:4a:f6:02:46:59:57:78:4d:ca:46:1e:b8:58:
         35:0d:c7:4a:63:87:95:ad:bc:2d:58:0f:63:c7:e4:c3:66:0d:
         1d:da:b0:cc:6a:62:ed:2c:82:2e:f8:33:ba:86:13:78:a7:cd:
         d3:ff:84:f3:dd:76:d5:cd:68:1a:82:1e:6d:37:bd:d6:0d:07:
         fa:75:3a:91:24:21:51:7e:f0:d5:45:db:d9:25:2e:75:db:ee:
         dd:70:c7:68:42:84:1d:09:8b:56:7c:ab:ee:62:ed:45:d5:9e:
         d7:dc:2e:ce:23:24:3b:bc:30:c3:96:16:22:3c:4d:d8:08:f9:
         3a:7f:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:30:34 2026 by rpki-client