Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/2f3e429c-ddbb-33f9-9261-a211fa58d9b3.roa
File:                     2f3e429c-ddbb-33f9-9261-a211fa58d9b3.roa (raw, json)
Hash identifier:          loQtTokQQsuf1h1AHHDmFzvhH0JIWBEuyZ+uTMF/Emg=
Subject key identifier:   A3:10:65:F2:2F:AC:92:27:FD:26:B5:43:B0:21:84:CC:22:EE:E0:3C
Certificate issuer:       /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial:       010D0C9F4328584F498829FD4D942CD8582DD200
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/2f3e429c-ddbb-33f9-9261-a211fa58d9b3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     152878
IP address blocks:        2602:f7a8::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:29:fd:4d:94:2c:d8:58:2d:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f66ce079-e382-4f59-b535-9d65098f1b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:fe:8d:c5:86:4d:26:67:5b:83:13:c8:2b:
                    05:92:eb:24:6e:1a:fd:16:3c:6b:fe:53:54:36:06:
                    1c:31:82:b0:36:d5:df:f4:b8:6d:62:fb:99:38:85:
                    37:ee:50:15:c6:8f:a3:48:b4:0c:7a:ba:59:22:f9:
                    f5:9e:6e:e0:bd:2c:55:f0:2c:1e:ca:15:97:93:85:
                    21:5f:54:85:8c:f7:4e:cb:8d:42:5f:7b:07:d1:d7:
                    76:af:44:2b:e1:9c:7e:66:68:27:be:4d:1c:11:1d:
                    ee:11:1a:d9:aa:e4:66:22:19:6c:47:a7:23:60:6e:
                    57:13:7c:43:1f:04:ea:43:dc:96:7e:c5:08:3c:89:
                    24:af:6b:ca:f0:d2:44:a4:83:b4:a6:a6:fb:8a:21:
                    61:95:b2:d8:60:f8:05:00:d4:28:d5:ca:ed:ed:7f:
                    d5:4e:c1:ac:ac:2f:78:46:ea:43:60:f2:bf:56:8b:
                    39:fc:c2:f0:78:37:80:58:f9:44:08:6d:a3:30:a8:
                    1e:aa:15:30:84:8b:a9:50:db:19:94:e6:50:fd:99:
                    fb:6f:71:7c:6f:fd:7c:5c:f2:d8:2a:17:a6:cf:f7:
                    b5:92:6e:28:19:24:f0:e4:b2:6d:99:3e:a7:a4:fb:
                    73:62:48:99:0b:f9:a6:29:3c:4e:ff:3c:29:ed:1a:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:10:65:F2:2F:AC:92:27:FD:26:B5:43:B0:21:84:CC:22:EE:E0:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/2f3e429c-ddbb-33f9-9261-a211fa58d9b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl

            X509v3 Authority Key Identifier:
                keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4a:e1:72:2b:0f:2c:91:aa:1f:07:92:01:17:32:ca:94:f4:
         f4:80:ac:88:0e:20:cc:a7:42:62:8e:3d:aa:b5:4a:82:1a:a5:
         7d:96:b4:d1:44:30:c0:22:7e:f0:a1:a8:7c:87:a5:b8:76:ac:
         a2:a4:70:b4:a7:96:28:5f:8b:dc:8c:ff:c0:7d:3a:c0:29:c4:
         c4:4a:5e:c1:19:97:e6:37:4e:b0:40:b1:30:8e:1f:26:23:89:
         7e:99:3c:52:b4:7c:4a:7b:36:a6:e8:e1:d3:37:1b:93:7a:a1:
         ec:f1:63:6a:b6:15:c9:3b:3b:49:48:d3:9d:eb:89:a2:3d:c6:
         d6:3c:bc:19:79:53:4c:f5:72:19:a8:05:a2:16:75:f6:0e:79:
         8f:79:6c:52:cb:93:e6:20:17:23:da:e2:5f:35:dc:a8:39:50:
         79:49:a1:b5:d7:a7:85:d0:a9:a2:02:0e:85:c5:5c:9b:15:d7:
         21:8f:bb:44:14:6e:8f:e4:85:26:06:42:46:13:6d:a8:ce:a3:
         f5:84:b8:f1:3a:9c:0e:91:bf:94:d4:ff:6a:08:69:a9:66:f3:
         c3:04:2b:27:ec:00:62:9a:9f:bf:e3:39:a3:de:50:6a:16:50:
         d3:44:55:58:70:5d:59:0f:88:5c:77:ed:fe:92:3a:c2:8a:37:
         7b:b3:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:50:29 2026 by rpki-client