Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3765e690-a0b2-35d2-83fa-36c840834e2c.roa
File:                     3765e690-a0b2-35d2-83fa-36c840834e2c.roa (raw, json)
Hash identifier:          zSxP3HbsyvuvVIFpX+0OZunXhGb0o78wp8kBEFRrDxY=
Subject key identifier:   28:89:4A:58:35:D8:40:C9:D8:DA:4D:DB:43:D8:EB:57:2F:49:A7:CD
Certificate issuer:       /CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2
Certificate serial:       010D0C9F4328584FC9FBD117CD72A8121BFE8180
Authority key identifier: EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3765e690-a0b2-35d2-83fa-36c840834e2c.roa
Signing time:             Tue 10 Nov 2026 02:00:13 +0000
ROA not before:           Tue 10 Nov 2026 02:00:13 +0000
ROA not after:            Mon 08 Feb 2027 02:00:13 +0000
asID:                     16509
IP address blocks:        2602:f883::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c9:fb:d1:17:cd:72:a8:12:1b:fe:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2
        Validity
            Not Before: Nov 10 02:00:13 2026 GMT
            Not After : Feb  8 02:00:13 2027 GMT
        Subject: CN=8ff09562-18f2-464b-93a2-a864c387788b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:9a:e6:b9:81:77:ec:3d:32:48:c0:37:3b:
                    7c:4c:c5:b1:cd:3e:dd:77:f2:88:ed:12:07:ef:1c:
                    13:f0:cd:e3:42:93:b3:37:49:a6:bf:06:6d:49:a3:
                    b6:49:1a:a6:6b:60:f6:bd:b0:43:df:bf:3d:b8:3e:
                    dd:f9:4f:3a:3a:fa:8f:77:77:9f:f5:76:e7:c7:94:
                    0e:3b:fa:b7:b3:10:c2:16:6d:1a:c3:6f:24:24:4f:
                    a8:a1:b0:fe:11:eb:b4:2e:77:e9:39:58:aa:a8:1e:
                    4f:5b:1a:4b:db:36:f6:45:15:d8:35:19:48:a5:97:
                    13:14:fa:64:4a:f6:93:7c:0c:32:51:72:f5:4b:dc:
                    7f:61:23:85:9e:43:2d:f7:39:4e:67:16:1f:43:4c:
                    1a:14:7f:90:a6:ab:4a:6d:57:05:d7:e9:71:c0:dd:
                    29:06:3a:7c:3e:1c:a5:0f:76:2e:ed:dd:9a:d6:43:
                    20:f3:27:11:34:93:bf:85:6e:76:80:20:c4:27:59:
                    67:0e:0d:0e:8c:83:86:7a:d8:50:47:5f:f7:0d:91:
                    89:32:d2:26:aa:71:49:ee:bb:28:92:21:bc:fa:dc:
                    7f:b8:b9:82:e8:10:18:a6:ea:2e:34:c7:90:5c:ed:
                    03:02:29:39:87:99:9d:02:4a:dd:8e:59:a2:2b:65:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:89:4A:58:35:D8:40:C9:D8:DA:4D:DB:43:D8:EB:57:2F:49:A7:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3765e690-a0b2-35d2-83fa-36c840834e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.crl

            X509v3 Authority Key Identifier:
                keyid:EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f883::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6b:9f:59:5f:7a:b0:38:8a:1d:cc:4d:91:9f:d1:11:64:64:
         13:73:f7:a2:0e:34:1d:4a:20:df:ed:bc:13:24:ca:03:1a:8c:
         6a:dc:1a:ec:df:da:08:d3:bb:1d:7f:de:76:54:15:d8:00:9a:
         1a:c0:de:64:ab:07:f1:fe:b5:0a:2d:12:ae:d0:a6:7f:64:02:
         35:0e:25:b8:69:28:87:d3:c6:a2:42:58:ff:01:cf:3d:eb:05:
         a0:7b:cd:c0:eb:0b:05:4a:76:36:2b:74:f9:54:52:27:73:ce:
         88:08:ec:b1:e0:04:ba:00:07:25:05:6b:93:78:d8:22:a4:59:
         e1:dd:43:77:30:ac:0f:34:33:12:aa:d4:9a:53:a0:55:d3:8b:
         75:42:a2:f2:45:63:b3:41:47:9d:33:d6:57:c8:17:30:9a:5e:
         b5:5d:9e:65:99:20:4e:ac:7f:b4:85:61:d5:36:2f:12:73:ce:
         52:bb:3e:37:31:56:e5:b5:32:d8:70:53:f0:a4:7f:8f:e7:3a:
         ca:78:43:09:d3:cd:d8:cb:36:4e:ca:1a:27:9f:82:96:16:6a:
         d7:06:1b:a7:8c:c5:2c:6a:47:83:9b:20:24:d1:9c:09:ee:02:
         ec:6a:c7:4d:ca:97:39:9d:1c:57:be:48:04:16:96:3e:aa:dc:
         3e:94:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:19:37 2026 by rpki-client