Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/538e11e1-6173-378c-9eeb-58bf0703d57e.roa
File:                     538e11e1-6173-378c-9eeb-58bf0703d57e.roa (raw, json)
Hash identifier:          3cIeARs2hVVoLx8e+TCxACiNFw4+1qHG3utdQcfBIjg=
Subject key identifier:   1A:F0:C5:8A:CF:A9:F4:1D:A4:0D:2E:D9:47:C8:7E:75:5E:9B:25:00
Certificate issuer:       /CN=773b73e0-0815-435e-b24e-89c8b9dd55c5
Certificate serial:       010D0C9F4328584E7BCA2D8BF9B935B748220F20
Authority key identifier: BE:75:BB:89:62:18:B1:4B:79:B4:96:D0:88:D8:E6:F6:B3:98:3B:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/538e11e1-6173-378c-9eeb-58bf0703d57e.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     216132
IP address blocks:        2602:f86f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:2d:8b:f9:b9:35:b7:48:22:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773b73e0-0815-435e-b24e-89c8b9dd55c5
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=c0284e5e-428e-465f-ac3b-28603d61be51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:35:7d:5d:1c:66:6f:9f:93:4d:e2:5c:5a:eb:
                    7e:e2:34:e6:e7:39:eb:5c:e9:79:d4:9b:b0:13:38:
                    8c:25:d8:2a:2b:80:1e:08:91:d6:c2:1d:0f:9c:7d:
                    30:9a:1e:72:5d:64:e9:19:9a:2b:22:b6:8a:a5:54:
                    2c:44:8e:a7:01:49:c4:cb:62:a9:b4:b9:2b:07:9f:
                    a6:31:1f:85:25:a2:a4:3e:f7:3b:f2:bb:2f:ff:f5:
                    11:46:a6:bc:d8:70:49:75:c5:57:78:96:1a:28:a5:
                    ac:d6:be:99:6a:29:8f:88:76:4f:27:0a:4d:18:a4:
                    c2:19:07:14:c1:b2:b3:0d:a1:b0:3c:63:17:39:bb:
                    f9:10:1b:61:11:44:a4:41:4c:4a:13:71:a1:c7:81:
                    56:55:84:3d:01:7f:4d:d1:b3:d3:e1:f9:38:31:4c:
                    c0:e3:41:a8:a3:01:cd:3d:f2:68:80:75:6f:28:68:
                    3e:28:21:84:ce:3b:fc:1a:26:58:4e:c2:40:c7:e8:
                    b6:f9:d0:b5:c5:b9:fb:a2:0e:2c:f7:d6:ad:76:96:
                    30:5a:41:cc:4d:5c:15:fb:ac:61:8e:21:d8:36:e5:
                    58:ec:fb:cd:d6:fc:10:f8:eb:f6:61:29:86:18:4f:
                    13:ec:a7:10:5d:a3:55:cb:2a:59:f9:0f:0b:64:ed:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F0:C5:8A:CF:A9:F4:1D:A4:0D:2E:D9:47:C8:7E:75:5E:9B:25:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/538e11e1-6173-378c-9eeb-58bf0703d57e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.crl

            X509v3 Authority Key Identifier:
                keyid:BE:75:BB:89:62:18:B1:4B:79:B4:96:D0:88:D8:E6:F6:B3:98:3B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d3:aa:70:79:93:2a:5c:ff:3b:73:02:74:ef:91:ac:90:7d:
         5b:91:15:0d:79:ea:6c:0c:55:10:cf:3e:43:fb:c1:d5:16:47:
         4f:c4:5f:34:f8:75:d4:86:ad:65:08:7a:e0:02:d3:7b:28:f1:
         04:23:b6:4d:2a:99:36:8e:ad:9a:08:af:38:cc:ae:5c:16:b5:
         a5:fc:66:83:24:b0:7d:f5:e1:22:e4:52:c7:53:e2:68:04:93:
         6c:f6:a4:30:40:6c:e6:61:33:e2:6c:ca:43:cb:de:03:34:f2:
         cd:0a:8b:37:66:c4:1c:88:17:3d:78:6d:f3:44:80:0a:5f:61:
         bd:5f:c1:cb:13:6f:7f:48:7b:21:50:db:65:2b:70:81:d2:10:
         d8:d4:9b:f4:ac:12:d3:9a:52:d9:3f:e3:13:d1:cc:bb:d7:88:
         2b:c7:1a:e4:22:a8:36:a0:08:4e:9b:b4:b1:c8:da:fb:10:3f:
         b7:d5:24:ca:b4:4c:92:4c:4f:ee:23:62:fa:29:25:f7:9b:df:
         80:c0:ef:9c:d2:8b:8a:b0:7a:eb:fb:72:72:d6:0f:62:81:71:
         aa:99:4b:41:5d:51:ac:e6:a7:eb:d2:71:9f:89:d7:d0:88:d6:
         ea:50:bd:de:4d:8f:92:72:4f:ba:ad:ee:88:4e:6b:88:e5:1f:
         ad:70:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:02:50 2026 by rpki-client