Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
File:                     8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa (raw, json)
Hash identifier:          XjQiq7D217vK5mx6r8JeFYvtNZcEk3DvXDRXhdeD5KU=
Subject key identifier:   A9:DB:22:8E:DD:64:D2:07:FD:8D:D2:32:BC:0A:42:3F:94:31:95:51
Certificate issuer:       /CN=ec3472d2-073b-458a-8e0f-7ee77169574a
Certificate serial:       010D0C9F4328584F49756A73F6F7EE39D9138B20
Authority key identifier: 72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2602:f957:a00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:6a:73:f6:f7:ee:39:d9:13:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3472d2-073b-458a-8e0f-7ee77169574a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c21d3138-d2bb-4744-b5a8-bf0e57b82d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7a:0e:e7:04:78:9c:0a:f2:8d:2a:6d:8c:92:
                    89:92:c2:a1:0e:7e:3d:6a:45:28:e2:1b:5b:73:f5:
                    46:be:0e:a9:f1:fe:06:fc:1f:b9:32:24:24:ec:22:
                    70:b3:36:ac:7d:1c:12:3c:1c:22:03:9b:76:cf:51:
                    d9:78:f6:a7:c0:24:e0:11:a9:e1:08:c8:9b:24:e5:
                    57:31:94:46:d3:da:e6:a1:c2:2e:49:23:70:7e:ae:
                    c6:74:3a:92:e2:9c:f4:a9:83:c2:ac:27:25:b0:73:
                    9f:20:f1:88:e1:bd:ca:87:2d:d3:0f:f8:04:e7:1d:
                    b6:a1:52:3a:7b:e0:89:dc:9f:70:30:dd:d0:d1:73:
                    be:69:ee:18:0a:36:d2:39:3c:e5:97:1c:b1:11:2d:
                    18:af:dd:3e:8c:ad:70:16:1b:0d:3b:25:a5:a9:f9:
                    c5:bd:9e:69:fe:9c:04:f4:5a:35:da:31:05:37:3d:
                    ea:01:0b:7d:a5:45:d4:37:e0:cf:f8:6c:df:b9:97:
                    85:d4:2b:23:aa:5f:f1:30:3a:3d:ae:22:ac:7d:c8:
                    cb:9e:e9:1e:64:6f:f3:9d:6c:1d:4c:df:bf:d9:7d:
                    43:bb:31:4e:4b:1a:db:8a:3c:9c:70:58:5d:cf:68:
                    99:21:3e:00:46:89:82:67:52:24:23:c2:bd:c5:19:
                    c3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DB:22:8E:DD:64:D2:07:FD:8D:D2:32:BC:0A:42:3F:94:31:95:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl

            X509v3 Authority Key Identifier:
                keyid:72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f957:a00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:4f:8f:ce:36:a2:36:5a:f7:bb:5e:92:4c:2f:35:b2:6b:d4:
         c1:ad:f4:cc:9e:18:98:f8:e5:a7:76:ed:21:dc:25:52:2b:32:
         9a:e3:d1:2e:7a:24:f6:36:a8:19:73:77:9b:58:4a:2b:a3:8b:
         9a:56:41:b2:47:61:af:f8:63:b2:ff:14:75:3b:9c:df:d9:60:
         30:9d:bb:cf:d3:7e:68:96:c0:58:0e:23:e1:80:c3:30:22:52:
         ac:5a:e4:38:42:c1:ab:2c:87:dc:0c:1f:99:7c:09:03:dd:f7:
         97:04:34:fc:84:5a:c7:f0:12:73:be:1b:8b:d4:09:40:54:72:
         02:ca:10:c1:96:d8:ea:19:04:2b:50:2f:5a:65:3d:e1:b9:a6:
         7e:09:61:e0:47:03:5b:2a:9f:77:4f:84:aa:76:70:9e:05:da:
         5e:8f:dd:65:f2:fe:4e:9b:f9:4c:cf:05:78:d4:2c:a2:35:ab:
         31:39:3d:72:67:4b:73:fd:5d:7a:c1:f7:c0:ac:eb:f4:71:2d:
         95:ae:6a:bd:be:c2:86:2c:95:0a:2a:ce:e8:f3:d5:7f:44:ac:
         7d:55:2a:78:b6:f7:5d:5c:ff:1a:f1:2e:c4:59:3a:7b:00:34:
         3c:83:db:30:d7:9d:8b:14:0f:3c:7b:e5:82:29:38:cd:fc:45:
         fa:9e:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:09:38 2026 by rpki-client