Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/87913fab-7922-3eca-b92e-6a5ca4d492bd.roa
File:                     87913fab-7922-3eca-b92e-6a5ca4d492bd.roa (raw, json)
Hash identifier:          6ofz5AKfCwI1+nh0MYGm1ZXT6ialBq43/Q0wWXxAcwo=
Subject key identifier:   07:C7:6A:B6:7E:9A:5E:63:10:D2:03:79:DC:C6:BA:CC:D9:4B:2F:BC
Certificate issuer:       /CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8
Certificate serial:       010D0C9F4328584F3CE29BE03DEC2D239234DE40
Authority key identifier: 97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/87913fab-7922-3eca-b92e-6a5ca4d492bd.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     400930
IP address blocks:        2602:f975::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:9b:e0:3d:ec:2d:23:92:34:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=26ff3c18-86d5-4caa-baa5-cbdd45da29dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:9f:b5:3d:82:12:f4:30:23:49:8d:2d:44:
                    8c:a2:ce:f5:03:d1:8a:b9:f7:8d:b5:88:80:fb:4c:
                    78:f2:43:e5:f2:c0:7b:80:b7:67:54:9d:c7:bd:3c:
                    03:f3:e5:dd:78:a4:52:f2:5a:69:1a:a4:d0:d5:73:
                    3a:d1:46:4c:49:81:91:ff:0f:17:33:b8:45:b1:0e:
                    e6:4d:69:7e:a4:9e:4e:b4:27:32:32:40:40:4e:4c:
                    9c:c1:f7:ee:80:9b:b9:72:49:2c:70:d0:81:ee:4d:
                    ff:4b:8f:aa:fe:e6:98:bb:a3:9d:49:65:3c:a6:2f:
                    59:92:c4:39:a7:95:90:35:f6:44:d1:ed:19:03:a0:
                    c4:92:de:31:e1:3a:10:b2:49:9c:7f:b8:42:8c:30:
                    10:42:37:c7:e1:38:e8:5c:6f:07:b8:96:cd:55:23:
                    76:2e:bc:6e:8c:78:36:09:6d:a2:a8:3e:cb:19:56:
                    3b:ad:41:0a:1e:15:38:d2:8a:9b:df:95:42:84:30:
                    95:2f:f7:2c:0c:45:fe:c6:7f:1a:50:78:b4:04:30:
                    e2:85:ef:8e:b0:61:64:18:56:61:3f:1d:65:5e:f4:
                    51:5b:fa:52:95:80:78:85:bb:e5:e1:fa:60:5c:15:
                    db:7b:96:39:12:dc:1d:54:cf:7c:99:a0:e2:0c:83:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C7:6A:B6:7E:9A:5E:63:10:D2:03:79:DC:C6:BA:CC:D9:4B:2F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/87913fab-7922-3eca-b92e-6a5ca4d492bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl

            X509v3 Authority Key Identifier:
                keyid:97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f975::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:50:4d:8f:69:3e:26:87:0b:c9:47:39:53:cd:db:3b:24:
         e9:a2:8b:34:e5:f5:86:ed:18:38:18:6c:3a:47:33:eb:3a:95:
         5e:d8:4a:53:e0:94:bc:8e:2f:ec:cf:01:7e:53:27:21:74:5d:
         78:50:cb:a3:26:69:05:86:09:6e:60:ec:87:4d:db:86:39:be:
         0c:48:c6:2e:59:3c:de:31:05:0b:30:b6:b8:5d:76:91:e4:2c:
         44:be:67:21:53:74:b7:2f:10:64:9d:b4:7d:f6:96:5f:d0:9c:
         cc:ee:f8:97:5d:e9:36:30:ae:8c:f6:df:e0:ae:a2:b5:07:58:
         4b:75:27:ef:69:45:69:f7:8d:66:c1:dc:04:3c:0f:f3:a3:c3:
         3c:0f:1f:63:4a:46:90:0e:1c:56:5a:10:30:95:bd:36:3a:c2:
         76:88:a9:d5:be:ae:0d:a1:e0:34:a8:6d:98:bd:4c:17:36:2f:
         81:8b:91:d4:d7:da:96:00:3a:7f:81:82:dc:90:9e:6a:27:9c:
         77:74:39:02:48:00:18:60:3d:09:f6:81:8f:f9:8e:ea:8e:6b:
         db:ab:78:ea:f7:40:3e:b9:41:a5:f0:c5:01:95:c1:12:c5:ed:
         73:57:71:5a:8d:cc:03:39:b7:ed:a3:f7:48:c4:11:71:b4:b5:
         e2:31:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:11:29 2026 by rpki-client