Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa
File:                     aa6eff33-96af-372a-b751-bf677d5949f9.roa (raw, json)
Hash identifier:          edFPskEMqUylLe2JrpgaTM4eHEtP7udUz0FdYBtRB98=
Subject key identifier:   7F:CE:F7:16:50:C4:1F:4A:A2:CF:14:D2:DD:EC:6B:58:61:08:A9:F8
Certificate issuer:       /CN=a4530197-8968-425f-b6ab-d075941dc95c
Certificate serial:       010D0C9F4328584E7204E17B7489EE7DFDA39880
Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     401085
IP address blocks:        2602:f802::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:e1:7b:74:89:ee:7d:fd:a3:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=c2ae1b9d-e8a3-462c-9342-7b0b6646ac0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:94:7e:08:03:97:48:cf:7e:00:a3:6a:a0:
                    3f:e8:64:2f:79:c8:29:e2:66:d4:9c:1f:af:3d:65:
                    be:bf:b7:75:c0:01:16:bf:6b:a7:70:be:1a:12:4b:
                    c9:b4:67:49:b3:19:a4:51:3a:f9:5e:48:ee:1c:33:
                    5a:bd:0b:54:ca:d5:7b:35:6e:ad:f8:99:57:ca:4b:
                    ff:a9:db:07:2c:eb:c9:cb:23:21:56:f3:ec:34:70:
                    80:1d:7c:f5:a8:07:f7:f9:c3:6c:6b:61:1a:b7:71:
                    93:da:a9:1f:90:82:0d:a8:40:fa:64:72:24:af:72:
                    44:75:52:74:8c:3a:85:1a:30:ec:e5:4d:d8:dd:56:
                    de:79:01:cc:7c:b2:6d:b3:db:ad:6e:b7:24:d4:cc:
                    17:2e:7f:cd:d8:78:7e:8e:a7:1b:7c:75:9e:16:23:
                    79:c9:55:b6:bf:a0:16:0d:4c:1c:c0:1e:2b:ab:f6:
                    34:b6:f5:e5:bb:37:80:dc:e1:82:b4:17:c4:92:cd:
                    3b:25:c9:e6:94:56:10:81:61:b3:7c:f4:fd:b9:7d:
                    ae:9c:e2:ad:9d:e9:80:15:a2:b7:22:9f:6e:62:17:
                    28:6e:ea:72:01:11:ff:e8:fc:a7:75:a1:c4:68:b0:
                    0f:2c:5a:f4:09:be:b6:3a:90:6a:1b:f2:d5:e7:b5:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CE:F7:16:50:C4:1F:4A:A2:CF:14:D2:DD:EC:6B:58:61:08:A9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f802::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:78:0a:d0:a0:b4:ae:c8:91:d9:aa:b7:e6:bc:ec:3c:25:80:
         a1:38:c7:ac:f8:7d:9a:c3:82:43:2b:2a:ee:96:a0:87:36:77:
         e8:e7:29:ac:46:2e:2a:61:f2:17:8f:3f:a6:95:8f:b8:1d:9f:
         2e:aa:7d:d6:f0:51:d4:75:54:a8:b3:b8:91:de:44:72:09:31:
         3a:45:e8:97:54:44:c1:ca:fc:45:73:54:46:ef:a2:43:51:21:
         a2:35:11:4f:ae:c4:c1:d3:aa:46:42:8e:12:92:9a:ac:eb:ac:
         79:a4:4d:58:ce:6b:13:f5:ed:56:65:4c:cf:72:d0:af:69:77:
         f8:91:27:1f:f5:6f:0d:55:ca:33:61:a6:20:a8:58:7f:1f:b8:
         84:f2:e7:21:59:f5:9f:0b:5d:ab:e2:55:27:9b:ad:37:f7:bf:
         e6:2d:54:6a:fc:4e:44:2f:15:91:9f:e6:22:55:98:d6:b1:55:
         f2:4c:a2:24:2b:f2:0b:5e:a5:42:c3:29:18:c7:6c:d7:46:7c:
         fd:b2:b7:51:d9:c4:33:5f:53:aa:0f:dc:c9:28:cd:e9:ee:f9:
         f0:f7:02:66:32:29:b7:e6:38:e7:8f:fd:0b:a2:63:78:e1:46:
         c6:c2:de:d7:f5:eb:e1:cf:c9:d2:86:34:65:75:87:6d:07:5d:
         6e:9f:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:49:50 2026 by rpki-client