Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/40eb335e-db14-3b46-9df0-1e2302b1928e.roa
File:                     40eb335e-db14-3b46-9df0-1e2302b1928e.roa (raw, json)
Hash identifier:          WxD3PRRVEaDraVUQxXUqgmJ6OHeKzMaflLmhBXAPRvI=
Subject key identifier:   B4:FD:0D:8A:5C:95:76:85:F3:0B:E2:A5:AC:B4:D7:1E:F4:0A:52:76
Certificate issuer:       /CN=89ee541c-de14-47cf-b4d0-081e933fb330
Certificate serial:       010D0C9F4328584F20F7AE5FAC4BCB19E7547000
Authority key identifier: E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/40eb335e-db14-3b46-9df0-1e2302b1928e.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     53809
IP address blocks:        2602:805::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:ae:5f:ac:4b:cb:19:e7:54:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ee541c-de14-47cf-b4d0-081e933fb330
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=3e4c0020-7bd9-44eb-b14c-9eb05c6d1551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:14:9c:a2:5e:ce:ba:fa:b5:f9:4f:78:b7:
                    63:a5:94:f6:9c:c9:33:70:62:51:e1:51:19:c3:57:
                    32:34:44:5e:e1:ff:5f:d9:89:3d:7c:f3:06:c4:04:
                    c7:07:c3:3e:37:11:4c:19:08:08:d4:63:46:b8:0c:
                    fc:9a:a8:fa:a0:7d:77:4a:41:f2:06:63:2b:b5:19:
                    2e:f4:ce:9b:84:ae:ab:74:60:59:38:20:b1:da:65:
                    d5:db:5f:12:50:8c:e2:41:d9:45:c6:22:ce:27:ec:
                    33:18:57:b4:56:b9:d5:76:d3:42:90:e6:f6:bd:bc:
                    80:98:37:83:39:36:19:a9:95:96:08:3d:66:55:68:
                    b5:cd:27:69:2c:26:83:5f:a6:c3:ee:78:25:64:63:
                    54:d1:6a:05:45:fc:29:8b:7f:d5:a3:88:78:09:b9:
                    c8:cf:6f:17:7b:a0:80:0f:56:71:70:10:93:94:de:
                    23:65:60:ec:af:25:81:ce:43:7e:c1:a6:69:1c:9d:
                    03:1d:29:7f:cf:0b:aa:71:9b:f8:09:f1:a9:93:70:
                    51:a1:b5:e3:ff:54:c7:5a:42:5e:f9:25:06:07:07:
                    d2:27:fa:82:ab:ae:79:fc:be:9f:4d:07:74:18:09:
                    3d:ca:87:99:5a:e3:9b:e1:cb:a8:01:74:0c:5a:fe:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:0D:8A:5C:95:76:85:F3:0B:E2:A5:AC:B4:D7:1E:F4:0A:52:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/40eb335e-db14-3b46-9df0-1e2302b1928e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:805::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3f:32:76:26:dd:45:34:2b:5f:16:32:2f:e1:d0:d4:7d:53:
         f2:a4:b1:2c:40:fd:e0:61:71:7e:0b:db:5b:4f:6e:8a:16:05:
         4f:62:3c:b0:c6:e2:e4:cc:6b:61:6d:86:a6:96:46:64:25:54:
         eb:a9:bb:45:72:7f:92:3c:32:ff:e4:3f:fc:08:f5:23:cc:47:
         cd:af:ce:36:dc:8b:79:a0:4d:4e:3d:0f:91:e6:52:4d:68:1c:
         8f:8a:64:5d:0b:0f:0b:81:2f:d1:69:45:ec:6d:0a:05:21:d5:
         c9:65:a6:ab:4e:2d:cf:74:5d:6e:13:4e:4a:4f:a2:72:2f:9d:
         1d:46:9f:58:7a:7c:6b:7d:80:f0:23:c4:da:5f:9b:32:03:2b:
         2e:5e:65:33:b5:73:68:ac:76:1d:9b:89:3c:53:a0:dc:ff:d2:
         37:0d:59:63:d1:7e:f8:fc:c8:2f:26:a2:89:2d:cb:94:e0:1b:
         4c:08:8f:b6:09:e7:df:8f:12:b7:ab:48:d7:9b:06:e1:6e:84:
         fc:a2:df:f2:aa:4a:5a:e8:03:76:7a:1a:66:5d:75:5f:23:2d:
         4e:dd:c5:30:e8:4c:bc:6a:ac:42:1f:b3:41:4f:6d:9b:5b:4e:
         a6:01:b3:d6:b9:7e:c0:b4:ba:45:71:70:4a:a8:f9:9c:b4:bd:
         ef:3a:4b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:59:07 2026 by rpki-client