Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/d878d921-bc35-307e-9651-8c0b7cd87227.roa
File:                     d878d921-bc35-307e-9651-8c0b7cd87227.roa (raw, json)
Hash identifier:          AQmyvstQjVEM2ET8TlQ0YJ0grwbqDBv8YHhsRJ0XJMM=
Subject key identifier:   74:31:DC:B9:0B:13:5C:67:48:F2:21:4B:F0:C4:88:D5:B3:20:C9:2D
Certificate issuer:       /CN=9725766d-5d42-4fa1-a253-80bd88dabc8d
Certificate serial:       010D0C9F4328584F497514118393510710570480
Authority key identifier: E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/d878d921-bc35-307e-9651-8c0b7cd87227.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     25942
IP address blocks:        2602:2f1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:14:11:83:93:51:07:10:57:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9725766d-5d42-4fa1-a253-80bd88dabc8d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=291d289d-511a-4c64-b22a-9f347863f296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:d1:4a:d4:08:36:03:1d:62:bf:a6:72:e8:
                    fd:ac:a4:34:e7:ed:c7:59:e3:29:99:58:47:47:48:
                    0e:29:03:6f:d7:9c:10:d2:2f:32:73:a1:46:9a:a0:
                    c8:6b:f6:b9:14:87:2e:2f:9d:ed:ed:df:04:85:f9:
                    07:57:46:95:c7:f1:9c:fc:44:26:a8:34:fc:47:c2:
                    6d:2f:ab:45:c6:79:5e:39:0b:4f:00:24:88:91:fc:
                    10:b8:3e:73:15:36:76:64:10:6a:33:ee:23:44:6d:
                    4d:3c:c6:d1:e6:62:00:45:70:8a:9d:d6:4c:7e:cc:
                    4f:4f:10:93:bc:0c:08:b5:2c:e0:d5:c0:db:4d:10:
                    2c:d7:29:c4:1b:25:61:61:2f:1f:bf:07:42:16:68:
                    b7:7f:42:ee:86:e6:c0:fa:a0:93:7e:24:ec:48:17:
                    ed:3f:44:66:48:0d:ba:30:bb:ee:f4:6f:57:f9:5e:
                    0f:2e:c1:61:08:ad:61:c3:89:4b:46:0d:22:ad:20:
                    5d:6a:8c:0d:10:35:47:37:52:8a:5c:ea:a1:8d:83:
                    6d:7a:10:c2:d4:b6:6f:f3:ff:cc:07:d7:e0:7b:eb:
                    db:d6:63:21:5e:ab:fb:52:5c:4e:ae:a8:84:ab:6e:
                    67:30:ba:80:44:14:3d:0d:50:94:50:7e:ef:d2:5f:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:31:DC:B9:0B:13:5C:67:48:F2:21:4B:F0:C4:88:D5:B3:20:C9:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/d878d921-bc35-307e-9651-8c0b7cd87227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl

            X509v3 Authority Key Identifier:
                keyid:E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2f1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b7:e1:b1:78:0a:3e:7b:e4:4d:60:50:eb:f2:b7:b7:73:8b:
         3e:7c:a4:0a:cb:78:3c:83:99:5f:a5:bd:db:f7:ca:b1:37:8f:
         4a:12:26:62:85:ac:2e:09:43:bc:80:c9:76:25:d5:ac:b7:6c:
         ac:7e:be:5a:78:7e:7f:cd:54:fb:c4:07:b3:b1:00:1f:82:7c:
         8f:e8:91:98:86:e6:96:bc:9a:c4:d1:1a:2b:34:10:b2:13:ea:
         70:94:58:29:08:91:65:95:07:88:a4:d9:c6:b5:ab:a0:1f:7f:
         16:dc:0c:10:67:83:16:2c:bc:5f:ea:96:f4:1c:d4:1a:f5:40:
         eb:d1:c2:95:bb:d2:29:d8:36:fb:e9:ff:09:03:25:07:c1:13:
         b7:6c:8e:03:74:71:a0:a1:49:5b:e1:10:92:e0:b9:b2:d7:d1:
         ad:03:15:62:b1:43:c5:48:d4:98:72:1e:4c:8f:de:91:95:fb:
         45:f1:ab:bb:01:1c:6e:77:87:0d:0b:25:51:db:87:87:71:31:
         d0:f0:62:bd:f2:e0:fc:67:62:55:54:2f:c2:e7:5c:21:d3:2e:
         52:d8:74:15:6f:a9:68:ed:62:6a:7d:8e:25:64:1f:fc:fe:29:
         45:0d:0f:d9:36:19:88:94:44:57:62:fc:ff:c6:93:0c:3a:5d:
         1e:7d:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:20:36 2026 by rpki-client