Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/52aea1c3-1797-345f-a6ba-6bdb55455530.roa
File:                     52aea1c3-1797-345f-a6ba-6bdb55455530.roa (raw, json)
Hash identifier:          xrq3ZHT164y1eduQJoQj4WCFzI6gNOMoJkCH+eWKPGI=
Subject key identifier:   BD:1D:41:70:5A:7C:38:78:FE:9A:48:2A:E1:95:46:47:09:A7:98:D7
Certificate issuer:       /CN=9945234d-5624-4733-92d1-ade3a2f33d87
Certificate serial:       010D0C9F4328584F4973BA87A3001C87F46B4C00
Authority key identifier: D3:66:36:50:71:06:87:48:42:24:DB:59:40:16:6B:51:19:9E:DF:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/52aea1c3-1797-345f-a6ba-6bdb55455530.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397614
IP address blocks:        2602:800::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ba:87:a3:00:1c:87:f4:6b:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9945234d-5624-4733-92d1-ade3a2f33d87
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9c201ca0-31d8-44c6-94d1-968a1a42eb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:09:a4:46:af:8a:e2:fc:77:33:de:13:b4:
                    30:85:17:d3:38:7c:2a:0f:1e:23:70:c1:5e:23:f9:
                    00:0c:72:14:38:3d:1d:14:d5:9e:8b:1e:5b:32:95:
                    04:d1:8b:3b:e2:29:f0:f2:bd:11:b7:c9:e5:85:03:
                    b7:85:59:d3:63:e2:76:c9:b9:6b:fd:4d:f9:52:fa:
                    3d:e5:23:b0:a7:d4:44:7a:0e:a9:c3:9f:8c:57:e9:
                    73:58:20:84:0f:3e:0d:8a:a9:8e:11:26:aa:53:da:
                    2b:52:94:a9:d8:4e:bb:34:dd:89:ed:a9:8e:ff:6a:
                    fd:ba:ec:60:d5:c0:a9:bb:0f:54:dd:66:54:3d:81:
                    1a:bc:25:51:aa:e9:1d:9a:39:ef:b9:c2:8a:a2:67:
                    0e:9b:a5:2c:91:9f:d7:d7:ba:c7:ee:9f:91:21:31:
                    ca:b1:d6:b7:54:78:9a:53:5c:c4:10:6e:1a:b2:75:
                    67:67:c3:db:74:b3:15:20:ed:bd:03:fb:bc:90:49:
                    46:d2:6c:ad:d7:25:ac:f9:a5:ea:44:6a:04:00:a9:
                    ed:4e:e7:ca:6e:83:63:88:43:25:7c:78:a4:d4:2a:
                    55:50:36:0a:c8:af:84:aa:b2:e7:28:95:39:a4:1b:
                    61:f3:bc:6d:11:a9:e7:50:f9:52:f3:b6:e7:d6:72:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1D:41:70:5A:7C:38:78:FE:9A:48:2A:E1:95:46:47:09:A7:98:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/52aea1c3-1797-345f-a6ba-6bdb55455530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.crl

            X509v3 Authority Key Identifier:
                keyid:D3:66:36:50:71:06:87:48:42:24:DB:59:40:16:6B:51:19:9E:DF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:800::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d6:ec:0d:b3:27:30:38:5b:2f:d9:f4:5b:7b:0f:f3:6c:83:
         65:79:26:6e:85:8f:f7:07:a5:87:fe:a3:45:c0:ae:6f:30:ce:
         1b:f0:aa:25:54:14:68:d9:bf:1a:bc:a9:a6:5e:5a:a2:12:83:
         8f:03:9e:0e:62:f8:e1:e0:a2:6a:ff:64:73:08:61:05:b4:26:
         8c:b5:fe:bd:cf:85:c7:53:70:bf:1a:57:ff:ac:a3:fc:9d:64:
         b0:84:ed:88:5a:2e:41:78:56:bf:5d:ea:3f:ec:60:e9:a1:13:
         15:9f:e0:98:e9:91:8d:29:37:5a:cf:f4:4f:bc:1e:2b:0c:68:
         39:f0:ec:ac:47:84:8f:e9:3e:e9:3a:ed:52:64:b5:d9:88:47:
         a6:a8:43:9a:ba:82:0e:04:2b:92:4c:28:d3:01:1f:fd:f8:1a:
         d1:2c:35:82:76:86:27:ee:c9:a4:93:f9:58:4d:e8:fa:60:f0:
         f4:04:f5:cb:ba:57:e1:69:bc:8f:2a:19:c3:61:cd:ed:39:0a:
         4a:d8:5c:3a:bc:4e:7a:8c:3d:c6:bf:c0:d6:fe:57:7c:1c:9a:
         05:0d:5f:ca:88:d6:90:18:4b:d5:86:0b:d1:28:5e:f6:4b:3d:
         6e:14:d8:56:62:13:3a:ee:98:b9:89:67:35:65:9b:de:c2:20:
         2c:87:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:23:28 2026 by rpki-client