Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/bfb8d652-2c90-3993-ab4f-c78eed63b4be.roa
File:                     bfb8d652-2c90-3993-ab4f-c78eed63b4be.roa (raw, json)
Hash identifier:          +7guse6ffNBGexgQ39ByZehopYYw4r4yDnyWXvc3auo=
Subject key identifier:   F3:1B:31:EF:12:77:DA:B8:D6:21:41:FF:24:15:93:AD:D3:80:A7:39
Certificate issuer:       /CN=a4530197-8968-425f-b6ab-d075941dc95c
Certificate serial:       010D0C9F4328584F14679A1DB286E655C25F9B00
Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/bfb8d652-2c90-3993-ab4f-c78eed63b4be.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     401085
IP address blocks:        2602:f802::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:9a:1d:b2:86:e6:55:c2:5f:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=498e20d0-95a1-40fd-a3e7-27b6dc521d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:58:77:12:cb:2d:56:9f:fa:ae:80:39:ab:2a:
                    17:dd:ef:d5:b0:56:f2:bf:06:c4:d6:72:70:6a:aa:
                    4d:8f:40:ee:83:d4:e9:dd:cc:af:90:3a:a6:f3:c5:
                    2f:05:f1:36:03:14:3c:62:cf:35:47:16:af:20:b4:
                    53:65:7f:66:06:02:be:de:18:e1:9f:e7:3a:cb:01:
                    f7:7b:ac:77:99:3e:76:e5:95:e1:77:11:12:e4:2b:
                    0f:8b:d1:df:65:96:41:13:e4:cc:67:01:8c:d5:89:
                    85:02:8d:24:0b:5e:26:40:9a:bb:c0:38:a6:1a:c1:
                    cf:95:cb:18:3f:97:3d:02:02:d2:9d:7f:9b:d7:c5:
                    60:0f:31:a1:10:0e:4c:78:42:d1:a2:fd:ec:e5:8c:
                    8f:52:d6:81:55:61:f3:f1:f9:32:c0:0d:c2:ac:2c:
                    8a:7d:48:40:99:83:2d:45:14:8a:af:18:97:21:ed:
                    75:05:8e:8f:ec:38:38:cb:ac:7e:d1:fd:54:8e:b1:
                    10:f2:49:1b:03:6d:d0:8e:62:31:1f:fb:be:ca:54:
                    24:25:0a:bb:21:0a:45:da:c8:13:2c:37:9f:ea:9c:
                    55:5c:14:82:41:e7:3e:62:50:e2:a4:47:79:ff:45:
                    e2:bb:e1:fc:0f:ac:a2:12:e8:aa:09:1c:d6:ac:e0:
                    7b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1B:31:EF:12:77:DA:B8:D6:21:41:FF:24:15:93:AD:D3:80:A7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/bfb8d652-2c90-3993-ab4f-c78eed63b4be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f802::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:87:dd:01:26:9f:ed:ad:78:42:32:77:0d:65:1a:75:b1:aa:
         a9:99:90:c8:45:dd:89:cf:b7:36:2a:4b:58:3f:c4:81:95:b1:
         60:2a:e0:3e:7d:83:11:77:ac:58:34:a1:1a:f7:81:11:2c:c4:
         d1:a7:79:7a:c4:09:ab:c4:32:aa:d1:43:b7:e6:80:54:3b:25:
         a1:f0:0b:c6:90:40:1f:4f:49:44:ad:95:67:a3:c0:ae:85:ab:
         27:44:92:b0:64:86:cb:a3:35:20:f2:68:e5:c4:e9:9e:c3:32:
         bd:ea:58:ff:6f:3e:2d:40:4b:0e:3a:ae:d3:5a:d5:7a:c6:81:
         fb:b1:40:6c:ed:3a:ad:28:03:81:76:fc:07:54:7b:a5:2c:01:
         a6:24:58:5c:46:86:03:32:b1:63:fc:f1:97:65:47:56:20:38:
         b7:a1:4e:8c:ce:5c:db:7b:91:e1:f9:2a:16:90:7b:b5:49:00:
         49:96:e7:61:60:2b:7e:be:b0:66:2f:7b:35:d2:e1:27:1b:95:
         17:a7:fb:66:fc:08:44:fc:52:fc:4c:7d:04:93:ae:36:b9:e5:
         9c:b8:48:05:3e:87:b7:fd:16:ce:fa:87:99:d8:f5:37:ce:05:
         7c:97:d8:bd:33:eb:a2:c7:d4:c1:e2:fc:77:db:a1:ee:7d:d9:
         4a:b2:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:25:19 2026 by rpki-client