Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6/d915e99d-7f8c-3b53-880b-c89fe5d79726.roa
File:                     d915e99d-7f8c-3b53-880b-c89fe5d79726.roa (raw, json)
Hash identifier:          Krhbg4vhHKnsETyeQ1AJEte4NYctnUlpXD3WK2GpHWw=
Subject key identifier:   18:6F:87:BE:31:B2:1B:3B:FA:DD:60:04:C1:6B:6C:15:A9:81:D7:D9
Certificate issuer:       /CN=566f1590-ff68-4a9f-816c-86a11bd82db6
Certificate serial:       010D0C9F4328584F331D2D6DA20923A9582CE080
Authority key identifier: A9:7E:C0:56:3F:66:7D:1C:10:D3:27:9D:42:29:1E:CD:78:7B:73:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6/d915e99d-7f8c-3b53-880b-c89fe5d79726.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     402450
IP address blocks:        2602:f3d8::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6/566f1590-ff68-4a9f-816c-86a11bd82db6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6/566f1590-ff68-4a9f-816c-86a11bd82db6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:2d:6d:a2:09:23:a9:58:2c:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566f1590-ff68-4a9f-816c-86a11bd82db6
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=125e16c5-78a0-4ebd-830e-6334f3b0be83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:83:a6:c7:a5:5c:c5:9b:14:6b:aa:bc:db:6d:
                    83:c6:8b:41:cf:23:35:b4:3d:c0:a5:a2:d3:e3:a2:
                    2f:4b:76:7f:e1:2f:dd:d5:94:22:26:eb:95:7b:5c:
                    c1:f1:09:1a:6a:04:70:d3:d4:4a:77:ca:c1:ff:2a:
                    76:8e:c2:72:75:f0:26:82:47:85:a2:1e:f0:7c:f3:
                    e9:31:9a:1e:4f:07:f9:7e:90:25:98:4f:f1:45:e3:
                    79:a7:4f:83:4b:7b:22:41:bb:0c:b2:63:b0:b1:d1:
                    f7:d7:62:8b:82:de:d0:ad:7c:55:11:b1:83:3f:17:
                    16:9c:80:ad:db:ca:48:0d:5f:91:7a:4f:52:a8:8e:
                    ca:9c:b7:71:d0:a7:0d:1a:44:b7:04:81:83:66:05:
                    0d:62:bb:33:94:87:44:6a:0c:93:2b:88:57:4a:d2:
                    77:89:90:72:4c:c3:6e:68:24:43:d5:aa:41:40:78:
                    0b:23:af:f0:d6:c5:a5:02:1e:eb:51:01:61:ed:d2:
                    5f:a6:b6:4d:3a:57:0d:c8:df:21:e0:62:fe:df:e6:
                    0e:7a:f2:b1:e9:ba:09:6a:08:f0:9f:89:6d:04:6c:
                    6d:22:82:e6:fa:d9:6e:14:95:4f:14:e5:24:8b:06:
                    82:c6:f0:4f:73:5b:0a:fe:f9:39:75:2b:41:bf:8a:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6F:87:BE:31:B2:1B:3B:FA:DD:60:04:C1:6B:6C:15:A9:81:D7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6/d915e99d-7f8c-3b53-880b-c89fe5d79726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6/566f1590-ff68-4a9f-816c-86a11bd82db6.crl

            X509v3 Authority Key Identifier:
                keyid:A9:7E:C0:56:3F:66:7D:1C:10:D3:27:9D:42:29:1E:CD:78:7B:73:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3d8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:df:81:c3:64:4e:fd:35:bd:72:d3:89:10:8f:de:7b:95:
         f0:64:df:c9:4a:e4:61:e8:fe:76:b6:82:17:7a:c8:19:fd:da:
         29:d4:f3:bf:fb:0d:aa:da:98:df:09:ea:80:14:4b:23:29:07:
         be:8e:5c:c4:76:2b:a1:b6:3b:6d:73:b5:4d:b4:86:bd:f9:0f:
         54:e1:39:1d:c0:dd:6b:62:4c:9b:b0:40:87:0e:fc:f3:94:1f:
         50:06:bb:8d:56:6e:41:5a:1e:86:7b:83:19:bb:b0:c8:b6:d3:
         5f:ce:7e:84:0d:06:f3:a4:93:09:99:a1:8a:d6:8c:2e:66:e4:
         7e:c8:7f:3e:14:a8:b3:db:0f:e4:76:60:57:3a:9e:95:e6:8e:
         cb:bf:b9:db:c8:39:9d:d7:58:8d:1e:89:b2:1c:63:d9:7d:d7:
         cf:f5:23:9f:fe:d9:00:59:92:6b:ef:c0:4d:80:27:29:a2:57:
         74:ec:ec:2b:27:7e:9c:40:10:9d:dc:dd:75:aa:cd:16:7c:cf:
         64:ca:4c:4b:70:15:87:bc:c3:66:82:47:6c:73:ec:ab:de:a7:
         99:d6:e0:00:72:2e:09:3c:6b:30:74:a3:01:60:a1:ac:1f:56:
         67:0c:93:2b:73:a8:f1:27:a7:30:00:04:f0:b1:34:1e:09:92:
         9a:9f:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:38:54 2026 by rpki-client