Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/1050a7a1-0144-3d00-bd4d-48521ddddf3c.roa
File:                     1050a7a1-0144-3d00-bd4d-48521ddddf3c.roa (raw, json)
Hash identifier:          sO98eRHXmgz4va3xpHuMWnZxT4N2nb0RTZGwtvQ3t8M=
Subject key identifier:   50:56:8F:E6:38:01:6D:24:B3:FB:AB:DF:57:A9:A6:3B:06:BC:E2:0D
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584F4972DC7013469342154E1D00
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/1050a7a1-0144-3d00-bd4d-48521ddddf3c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401243
IP address blocks:        2602:2b5:23::/48 maxlen: 48
                          2602:2b5:24::/48 maxlen: 48
                          2602:2b5:25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:dc:70:13:46:93:42:15:4e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=976a056e-c236-4c56-96de-1f030f0a99cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e4:c2:5d:4c:cc:bf:33:6e:d0:bd:fc:bb:86:
                    f7:35:38:ec:65:63:40:da:f7:f0:c9:e5:7d:f5:bb:
                    6c:6b:da:60:78:89:4b:14:97:ef:ea:22:0b:ae:ee:
                    1f:b6:48:ad:c1:13:57:b9:c8:65:79:99:16:52:36:
                    a0:19:39:88:1a:26:47:cc:63:03:8b:2a:b2:17:a7:
                    be:a5:36:2c:28:0b:14:cd:8f:92:ed:d5:b9:5c:c5:
                    55:26:87:ac:ea:52:6f:57:13:6b:cb:3d:f0:87:36:
                    2b:4e:10:2e:3e:dd:77:b9:74:af:6b:22:58:00:3d:
                    7a:ef:a5:1a:a6:7d:95:c9:1e:e1:aa:36:d5:a4:cc:
                    ff:8f:e0:f9:61:87:0b:70:fe:be:42:9c:f5:47:d8:
                    4c:77:e8:b5:ba:96:ab:bc:a6:94:c5:44:cf:f4:3c:
                    7c:9a:f7:cd:be:bb:fc:f3:64:9f:94:b1:9a:7e:50:
                    b2:d6:2a:5a:ea:e1:ba:56:e9:f8:b0:86:59:1f:90:
                    53:64:2b:54:38:1f:1f:de:cc:3b:f4:ed:c0:e2:5c:
                    9f:2e:c9:c2:e9:b7:ec:59:6b:d3:5e:49:dd:3d:d1:
                    b2:e6:f1:75:47:d5:0c:ac:35:09:54:8d:80:14:3a:
                    7a:53:a1:03:ef:39:05:c1:10:d1:06:0b:20:8f:3c:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:56:8F:E6:38:01:6D:24:B3:FB:AB:DF:57:A9:A6:3B:06:BC:E2:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/1050a7a1-0144-3d00-bd4d-48521ddddf3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5:23::-2602:2b5:25:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:53:74:c5:a9:84:3e:ea:6b:86:f7:46:15:1c:c2:c9:e5:9b:
         1a:70:b2:de:c3:a3:bb:4b:46:fd:1d:e3:45:12:29:3d:0b:36:
         83:75:0d:9e:a6:97:c8:b7:7f:9d:b4:5e:06:ee:7c:1c:18:24:
         85:0a:84:17:3c:f0:78:24:46:c3:cd:83:72:09:72:17:cb:bd:
         ca:75:79:11:9c:09:e0:e7:a9:c5:07:79:c9:4f:30:1c:b7:e6:
         c7:0d:17:3e:d5:ad:b0:64:23:0a:2f:72:ff:32:f4:ca:c1:19:
         3c:2a:78:d4:49:53:69:b3:0c:88:0b:34:5a:f9:22:1a:0e:a0:
         cf:86:f8:b6:f9:0f:3a:d4:32:e7:20:27:70:f9:bb:61:4f:ff:
         56:de:ce:e9:c1:89:09:84:f9:fc:9c:55:b6:ba:36:51:17:20:
         aa:2d:79:43:29:84:b7:69:4d:a3:01:56:e4:d4:fc:4d:7f:e4:
         41:47:e6:ba:a4:1c:6b:7a:28:4c:e9:86:2f:b1:b6:71:1d:c3:
         ca:bf:f9:3b:b9:e3:c8:ef:ee:31:4c:9a:7d:a7:37:e4:cb:07:
         e2:67:f3:17:5c:26:3b:93:f7:d5:01:82:2d:f1:31:47:ca:d6:
         41:fa:58:3d:ac:fc:34:0a:f1:a4:3c:e8:61:86:29:0f:b8:e2:
         63:05:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:05:35 2026 by rpki-client