Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/9c878371-b415-3596-9517-e1844cdea481.roa
File:                     9c878371-b415-3596-9517-e1844cdea481.roa (raw, json)
Hash identifier:          h1VAa/wdEFh6P+aZVS/0M/jvsQDUbTAu9HM8KMp/8dQ=
Subject key identifier:   2D:C8:DC:CA:2B:A1:32:2D:70:A0:14:E7:2E:12:A4:97:47:EA:45:D3
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584F119CF63F7B8136971D769800
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/9c878371-b415-3596-9517-e1844cdea481.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     2639
IP address blocks:        2602:801:c000::/45 maxlen: 48
                          2602:801:c008::/47 maxlen: 48
                          2602:801:c00e::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f6:3f:7b:81:36:97:1d:76:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=9b17a807-6bfc-4773-8bf1-cb344770d43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:4f:56:89:63:a5:eb:b0:d7:6a:9d:00:94:
                    26:6a:13:54:c5:3a:5e:9a:29:a4:e9:ce:2d:14:3b:
                    65:76:65:31:88:a3:56:4a:a2:9e:8d:d0:c0:3b:a1:
                    9e:78:51:44:ae:a2:43:01:51:3c:3b:03:ef:2c:99:
                    5b:80:94:12:13:a6:2e:b9:6f:ea:c1:d7:5e:b7:3d:
                    9d:6e:56:40:6a:99:14:6f:d9:06:97:04:44:6b:9b:
                    41:b1:5e:72:8b:68:2d:19:55:69:3f:3f:5f:9d:e0:
                    46:1f:d1:1f:f6:32:46:cc:95:da:7e:d4:7a:ff:e2:
                    d6:a1:6a:77:ee:74:cf:dc:39:b4:0e:04:9d:79:cb:
                    5f:f3:bf:a0:2a:c5:d7:c6:83:cf:f6:b0:ff:d6:56:
                    59:73:26:c1:49:fc:59:ff:66:3f:74:2c:55:9d:aa:
                    d8:f3:8d:f7:cd:6f:8d:0f:ee:33:2b:84:3f:94:c1:
                    30:7d:fe:ba:4b:df:c0:cc:e4:f7:a6:7c:05:8e:96:
                    08:8e:61:3a:b0:6c:f4:19:ea:46:58:67:e5:c6:c6:
                    fd:9b:c2:6a:af:a5:f0:7f:51:62:80:c8:01:95:d3:
                    51:b2:9d:14:b2:31:69:e8:96:f9:d1:c9:68:cc:99:
                    55:ab:a6:3c:15:74:77:6f:7d:d4:2e:45:67:fb:b3:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C8:DC:CA:2B:A1:32:2D:70:A0:14:E7:2E:12:A4:97:47:EA:45:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/9c878371-b415-3596-9517-e1844cdea481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:c000::-2602:801:c009:ffff:ffff:ffff:ffff:ffff
                  2602:801:c00e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:66:90:de:56:3a:15:07:59:aa:0d:dd:09:f8:44:90:dc:1c:
         b6:52:88:ea:b6:72:e4:99:20:1b:89:43:88:0b:cf:fe:3c:fd:
         6e:d7:15:6b:96:c5:c4:fd:12:3b:cf:45:6e:7e:e4:07:04:d4:
         9e:b8:17:56:da:48:bb:75:85:b2:bb:d0:b6:3a:2e:d9:6f:f6:
         c4:71:00:b7:3d:b6:63:d4:39:4f:cc:e1:6b:00:97:85:cb:71:
         58:07:cd:cf:f3:38:b5:ce:c9:26:db:30:6c:4f:03:e0:cf:cc:
         f6:95:d9:4f:b4:e3:43:46:db:26:33:93:6d:67:70:f1:f4:d2:
         81:68:ff:20:c2:5f:4f:59:72:ef:75:68:25:74:87:9e:ec:c4:
         07:55:53:1c:76:bd:92:42:ec:fc:fa:d0:3a:09:96:92:a7:09:
         ac:16:c0:5c:c1:fd:01:56:d0:6b:10:72:ab:4a:22:f5:ee:2d:
         e7:8d:59:ea:e7:27:31:21:7e:ed:f9:d3:75:e4:20:39:b4:93:
         31:07:e2:e1:21:44:48:0f:62:a4:c4:24:b7:03:92:80:e8:5f:
         4b:6d:14:5b:2f:ab:8d:55:b1:db:23:eb:68:ae:70:7d:c4:97:
         a7:33:40:4a:8a:fd:9b:0c:38:cb:2c:61:d5:a0:dd:36:27:ee:
         3e:ba:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:45:47 2026 by rpki-client