Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/bcccfcb2-d59b-3762-8ea3-42fdd23d7edf.roa
File:                     bcccfcb2-d59b-3762-8ea3-42fdd23d7edf.roa (raw, json)
Hash identifier:          3esKodlmp6vTaOzZgDnEEGd/msSusx32VO1u9D0tcaA=
Subject key identifier:   EC:6D:EF:A2:C8:D0:A3:2E:0C:9F:AF:17:C3:49:8A:55:4D:7C:64:12
Certificate issuer:       /CN=a5c518d0-6c8f-4cc0-8433-e63522746509
Certificate serial:       010D0C9F4328584F43DD2A55E6A8269C3FA20CC0
Authority key identifier: 2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/bcccfcb2-d59b-3762-8ea3-42fdd23d7edf.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     402778
IP address blocks:        2602:f33f:c00::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:2a:55:e6:a8:26:9c:3f:a2:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c518d0-6c8f-4cc0-8433-e63522746509
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=288f1734-3d1f-4206-9db9-42f1a416fba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:03:5f:fa:cf:76:a5:a0:a8:34:43:1b:63:df:
                    3f:f3:c5:c0:9e:9f:5e:f1:d3:b0:f3:98:31:b1:a7:
                    66:c6:6c:d9:48:f0:a6:3d:ab:6a:b9:f0:6e:87:19:
                    c0:b0:d0:3a:b7:27:ae:bf:18:db:f9:80:9f:99:15:
                    f7:18:fe:bf:b3:cf:bc:b2:d8:eb:e4:27:32:98:e6:
                    bc:8c:f6:8e:26:da:49:58:c8:02:dd:ef:78:fd:d2:
                    5d:aa:f4:72:70:11:9d:10:bb:15:ba:8c:ab:5b:76:
                    ed:34:cf:38:f1:e1:a6:75:70:b6:2b:b8:a9:a0:54:
                    3c:a2:ac:17:45:aa:08:31:37:12:21:e1:3c:f3:8d:
                    f5:80:4c:0d:c1:5a:b5:c4:39:35:5b:4e:05:41:27:
                    11:e2:9e:5e:86:d5:f0:c4:80:95:b3:73:c1:d9:b6:
                    16:6b:0a:ed:30:78:4a:ec:84:83:05:d6:d8:7e:21:
                    e2:88:62:91:73:01:37:c6:11:66:1d:59:3b:42:70:
                    50:fc:f3:ce:7e:da:57:76:7c:65:b2:89:b8:28:a2:
                    3f:d6:20:10:bb:66:95:ce:aa:0a:d7:8d:79:07:78:
                    24:28:e2:9f:86:a4:1c:bb:42:f3:bf:75:c9:53:3d:
                    27:07:4d:60:28:b3:05:4c:d1:37:43:ab:d0:e9:25:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6D:EF:A2:C8:D0:A3:2E:0C:9F:AF:17:C3:49:8A:55:4D:7C:64:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/bcccfcb2-d59b-3762-8ea3-42fdd23d7edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl

            X509v3 Authority Key Identifier:
                keyid:2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f33f:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:45:6d:c1:ce:00:ad:b4:fe:e7:10:03:70:3a:5e:fa:1f:
         e9:7b:0f:21:b6:ab:9e:f8:aa:da:70:06:40:f3:f0:60:2e:08:
         40:85:44:11:cb:8f:b2:c6:ad:a8:a4:09:c3:b4:4a:e6:8e:54:
         90:eb:4d:56:65:78:83:c2:7a:f3:20:66:08:ad:d2:e3:50:a9:
         44:5b:69:18:68:f5:f1:6c:cf:f1:89:3d:84:cb:d5:be:f3:14:
         f1:1f:5c:cb:e8:bf:0c:ca:0a:9e:37:81:01:85:36:56:49:36:
         88:ce:9a:64:ab:74:d3:4b:c7:e5:28:2c:fa:03:86:c7:0e:4b:
         06:14:0f:36:f2:2c:97:a7:32:32:12:6a:d7:fb:bc:80:00:e8:
         10:b4:ad:ea:93:f8:e6:59:13:b3:0a:5a:80:e0:cf:52:65:18:
         1b:90:e3:be:ed:80:40:4c:e1:d6:a9:40:14:95:6d:18:77:a4:
         70:72:75:33:72:d2:e3:db:65:5a:ce:67:66:5e:5e:3e:c0:ee:
         4c:45:9a:c4:a7:d0:08:98:5f:eb:91:6a:1a:ca:d4:0b:9c:fd:
         f5:85:1d:01:e1:74:5b:8f:bb:55:48:d4:43:f9:3f:41:44:0f:
         ba:77:f3:db:8e:a5:d5:d6:c4:35:33:01:29:b0:4c:2f:f5:25:
         89:09:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:34:23 2026 by rpki-client