Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa
File:                     408e958e-b60e-30d3-bca9-4596afecccc4.roa (raw, json)
Hash identifier:          pkDPLcpAVy3IizjFbJ4Uf0LYU6zAw+IObuIKkQdnQsE=
Subject key identifier:   7A:67:8E:9D:0A:B8:C9:D0:6B:51:5B:58:F8:EF:8E:37:2B:21:F6:8E
Certificate issuer:       /CN=478a0a21-d101-464c-8706-25bb157545c8
Certificate serial:       010D0C9F4328584F4975E844E9442D0099C9F4C0
Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401457
IP address blocks:        2602:f7bb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:e8:44:e9:44:2d:00:99:c9:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=df604e04-1a33-47b6-abb7-873f30431085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:48:92:7e:44:d5:74:b4:da:b9:9d:b4:80:
                    56:9e:a3:8a:8c:c9:f4:39:88:7d:a4:14:7c:47:14:
                    0b:8c:53:d1:b6:39:7d:a8:d8:00:fe:d8:c8:eb:21:
                    73:9a:10:78:43:66:8a:2f:0a:de:30:02:4d:1b:dc:
                    ae:e6:08:10:d8:e2:62:9d:93:bb:f0:ff:50:a0:43:
                    01:93:a0:c6:a5:ba:08:6a:b3:9d:4e:1c:5e:7d:40:
                    de:ac:80:e9:9e:1a:c6:1f:37:bf:34:ad:e5:40:28:
                    81:4f:7f:0e:0c:d3:9f:98:85:db:a2:1e:fc:4b:71:
                    83:ef:1d:30:0c:ee:fd:ce:66:37:32:25:46:f5:c6:
                    8d:83:83:76:37:09:32:2b:83:7e:7a:dd:cd:61:17:
                    90:3e:ba:f7:73:1d:fc:c0:b0:e3:cc:33:7c:b7:88:
                    0f:50:4a:43:28:25:a8:3a:70:a7:2c:48:d8:e8:62:
                    2d:f6:d6:60:0e:f1:e0:ba:03:b0:f4:6c:6b:4c:3e:
                    ff:86:ce:83:df:c1:f0:d4:96:ac:10:64:06:fa:77:
                    ab:80:72:1d:2e:7c:7a:6c:ce:50:d2:a2:41:f2:03:
                    f3:e6:ec:34:1a:eb:02:09:e5:b4:78:a6:81:51:35:
                    05:52:b5:57:38:e0:16:13:3b:e8:05:18:e4:a1:5f:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:67:8E:9D:0A:B8:C9:D0:6B:51:5B:58:F8:EF:8E:37:2B:21:F6:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl

            X509v3 Authority Key Identifier:
                keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7bb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:06:a2:c1:d8:af:89:7f:db:66:dc:c5:16:a8:13:ac:ec:f4:
         c8:93:23:e4:fe:ec:9e:f9:5a:76:a7:fe:b4:64:4a:36:af:78:
         b9:e6:d7:1f:51:d2:3f:52:27:4a:fe:24:01:bc:6f:76:71:35:
         93:0a:00:e8:e8:d5:a1:67:4c:e8:61:96:d8:7c:33:9f:e6:fc:
         42:47:eb:53:a2:f7:4a:f5:b3:07:2e:b6:66:57:91:60:8d:c9:
         e9:e6:4c:f3:84:4a:59:27:a3:c2:9c:04:14:7c:33:2a:7b:b5:
         1b:50:5a:fc:5c:6d:74:b1:85:26:b1:02:f2:c5:6e:66:1b:12:
         02:65:94:64:4a:a1:be:fe:f3:61:4e:67:57:53:ff:e5:73:e4:
         b9:3a:d3:52:ba:1a:83:3c:94:52:c1:4a:46:64:b0:c7:de:a5:
         d3:5d:fc:e7:64:a7:0b:04:ea:16:3e:a7:f2:2a:ac:12:68:2f:
         b0:6a:4d:34:1a:ae:2b:0f:c8:7e:e5:86:06:6a:ea:db:0e:8e:
         e7:bc:61:52:b8:91:02:50:06:d9:f9:75:3f:27:4b:73:17:e1:
         17:d1:7d:38:21:55:e3:a6:78:ed:78:c2:4f:2d:69:41:d1:8a:
         8e:86:f4:1f:a5:ef:b1:ac:e7:5c:d2:16:13:d7:76:82:15:e5:
         70:ae:f8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 08:26:58 2026 by rpki-client