Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/73ed5efe-334d-321a-889f-d72b864df9a8.roa
File:                     73ed5efe-334d-321a-889f-d72b864df9a8.roa (raw, json)
Hash identifier:          YHYp8Z3955HhvExCrkuSbQpm5a28tJ9C52YMqhKl4lg=
Subject key identifier:   F3:A1:4A:76:68:5D:22:4D:D1:11:63:DC:E9:BB:41:AA:FB:D4:87:5D
Certificate issuer:       /CN=0b689f43-cae9-48ce-aef4-680ca5613c03
Certificate serial:       010D0C9F4328584F2527A2D663050B4D2B6A9680
Authority key identifier: CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/73ed5efe-334d-321a-889f-d72b864df9a8.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     36171
IP address blocks:        2602:ff16:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:a2:d6:63:05:0b:4d:2b:6a:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b689f43-cae9-48ce-aef4-680ca5613c03
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=625b5593-7eec-4cd7-aa4e-b7e86dc1df45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:23:3d:11:da:89:59:b2:0e:25:59:ce:98:
                    e0:43:87:5f:c4:25:92:52:6e:4c:22:2b:ff:c1:ac:
                    76:c1:96:6d:3b:67:fd:72:89:ae:a6:3e:e0:f5:5b:
                    39:41:78:18:e4:c5:a1:3b:cd:9c:1a:f6:d1:f1:61:
                    cf:a2:3e:bc:dc:6c:d3:f0:e7:b5:4d:7c:16:d6:12:
                    5b:f6:19:bf:5b:4c:47:c9:8c:9e:c6:da:0f:33:c6:
                    c9:26:de:af:d8:36:00:8d:72:2e:cc:da:1d:52:03:
                    e7:85:73:7a:6a:21:5a:4d:41:6b:ef:b0:fe:cc:29:
                    27:bb:7c:b3:0c:4f:1d:d4:f6:37:31:36:dc:c7:10:
                    a9:8b:69:54:80:24:ca:c6:6a:09:aa:f4:a1:b4:5d:
                    2d:09:de:fc:b5:ce:18:65:19:8b:c6:f5:11:2a:25:
                    9d:e2:2a:16:00:05:50:a3:d1:cf:c5:a9:be:84:60:
                    a6:23:73:d2:5a:5c:f0:73:17:68:ce:a4:ac:a6:da:
                    b8:f8:2a:24:ab:05:fc:41:ec:d4:10:de:0a:2f:33:
                    2d:78:41:a2:14:c7:81:1e:74:e0:69:8e:c0:46:f5:
                    ee:1d:9a:3d:1b:f7:c7:a3:9a:2c:99:a0:25:bc:47:
                    76:b2:43:01:de:14:01:25:03:51:f0:be:75:cc:7e:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A1:4A:76:68:5D:22:4D:D1:11:63:DC:E9:BB:41:AA:FB:D4:87:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/73ed5efe-334d-321a-889f-d72b864df9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl

            X509v3 Authority Key Identifier:
                keyid:CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff16:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:44:c0:90:ee:66:10:c2:fd:dc:fc:c0:ef:ff:dc:df:53:
         53:6b:c5:f8:19:24:ab:0e:e2:27:63:37:9d:06:24:74:fb:15:
         fa:7b:ce:c4:7c:b2:82:55:e0:c2:2d:bf:39:f2:18:bf:6e:18:
         5f:49:1c:4e:ec:7b:3b:87:02:03:00:a5:43:cd:ee:38:1f:ec:
         d7:39:0c:3f:c4:0c:31:8e:ed:8e:d7:7b:23:f1:42:9c:4b:ef:
         2a:3d:01:16:2d:cc:1b:fe:1b:80:77:68:8f:d2:3f:ab:e6:08:
         de:58:84:15:95:a7:b0:da:e2:10:80:2f:9a:4d:96:b7:33:78:
         8e:b6:46:6b:00:b5:ef:12:49:50:f8:a2:54:26:c6:00:bb:6d:
         99:58:66:c5:c6:16:27:13:a8:6f:f4:d1:be:de:52:3d:ee:13:
         fc:88:75:71:be:94:b5:cd:a7:13:46:28:08:a7:9a:44:69:cc:
         be:9f:06:5c:83:82:94:53:ea:7e:fe:1c:db:f6:cb:cd:5e:11:
         79:75:e7:39:05:73:8d:07:3f:40:68:5d:f8:97:26:4a:2a:14:
         6f:9a:3a:07:73:fc:0c:2a:de:49:20:02:81:ac:f4:eb:e9:f8:
         50:6d:05:3f:f2:96:16:0c:27:67:ab:a6:d4:72:93:0b:a4:00:
         1c:fd:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:30:15 2026 by rpki-client