Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa
File:                     5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa (raw, json)
Hash identifier:          kpfvFyvD+tdVALNAgp/0P+uRsV6rt8CaJK/MP5a9BM8=
Subject key identifier:   DF:97:57:6E:2C:8B:FB:70:53:D6:59:C1:46:40:1B:BF:E5:8A:8F:5E
Certificate issuer:       /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9
Certificate serial:       010D0C9F4328584F4975F0339FE4D6583E4899C0
Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     153371
IP address blocks:        2602:f7b1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:f0:33:9f:e4:d6:58:3e:48:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b2ac7534-8887-4536-9052-08a8478070a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:ca:c7:72:1b:41:25:2a:af:d4:cc:a1:f1:
                    17:0a:ac:7a:14:57:5a:06:50:b7:d9:05:af:22:9a:
                    49:d0:dd:cf:0e:55:54:24:60:83:85:3b:0f:df:c0:
                    20:28:f2:72:ea:0e:64:60:42:11:98:7d:f6:3b:69:
                    65:34:8e:75:6d:0b:de:e1:4c:d5:29:c9:d7:2c:50:
                    c3:fe:27:82:6b:43:82:0d:80:93:8a:40:c5:78:ed:
                    77:a9:25:5b:39:6a:ca:13:d0:14:93:3c:50:a3:d5:
                    3e:b3:f1:ce:a5:32:0b:ef:6d:ff:b3:10:54:0f:4e:
                    e0:27:55:fa:cd:8a:68:bc:d6:5a:b6:a7:31:ea:d4:
                    9d:d4:ab:4d:74:0b:a2:99:86:f9:85:9c:38:12:c4:
                    f0:51:5c:27:b6:cf:8f:0b:4b:d2:81:1c:f3:96:d7:
                    51:61:c6:43:c1:d9:81:7a:f4:a6:42:49:d2:c2:8b:
                    2f:8a:05:9c:dd:bf:4f:56:8c:2f:e8:c5:e2:77:36:
                    5b:70:77:e5:2d:f7:35:f0:4f:ac:45:b0:a6:50:e9:
                    fc:c9:fb:4d:2a:54:08:27:24:ea:2e:31:cd:9f:5e:
                    83:cb:e4:21:76:55:e6:cb:23:1c:90:22:dc:7e:7a:
                    60:8d:37:76:75:9d:06:f1:62:ff:ec:40:4f:59:77:
                    91:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:97:57:6E:2C:8B:FB:70:53:D6:59:C1:46:40:1B:BF:E5:8A:8F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7b1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c6:0c:fa:62:13:02:cf:5e:59:8f:b1:1b:74:dc:cf:30:07:
         5d:fc:00:a1:eb:f8:4e:48:4a:b8:b3:68:c6:02:41:37:e9:76:
         1b:68:dd:db:ee:a3:6d:a6:dd:d9:41:1b:b1:25:fd:61:0d:4e:
         39:3b:2f:0b:11:5d:f7:c2:0e:9e:73:01:66:17:96:87:47:36:
         f0:12:30:41:21:3a:f3:47:7c:f8:2a:c0:72:bb:ba:ea:7b:47:
         a8:7b:85:80:71:bb:ad:69:83:ac:cb:58:1e:9c:97:d5:b3:96:
         01:bf:4f:ea:3a:b3:5b:0c:3c:98:51:5f:2f:8e:07:f2:67:60:
         5a:14:73:33:92:57:8c:6a:f3:ef:d5:08:d0:88:d4:6d:9d:ab:
         21:2e:6e:19:66:9f:3d:bf:70:3a:60:aa:69:c7:c1:fa:07:1e:
         05:62:a0:d0:0f:85:e4:19:e0:8b:99:fe:24:9f:47:79:fb:75:
         10:bb:42:37:f5:dd:c4:85:d8:4d:3f:a3:55:af:9b:9a:e8:90:
         f5:a0:dd:22:cf:fc:28:86:ae:64:20:11:8b:c6:68:1d:c0:92:
         cc:e4:8c:9c:c5:11:13:4e:63:8d:c8:ed:50:e6:bc:8c:ba:7b:
         81:7d:0d:16:9e:fd:a4:b3:03:a8:e7:31:18:35:df:a0:8f:34:
         c6:d6:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:50:14 2026 by rpki-client