Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/210acf71-616d-47eb-b75c-214f83ed9ee4/fb70c043-c38e-3f22-a0c2-93336ba359c9.roa
File:                     fb70c043-c38e-3f22-a0c2-93336ba359c9.roa (raw, json)
Hash identifier:          k474R7ldZ4Tc48r/akKYbEyO2wzLe6r2PZMc9a0PUrg=
Subject key identifier:   82:F8:FA:01:28:8A:4A:67:34:91:C3:91:10:64:91:39:7E:2E:AB:FC
Certificate issuer:       /CN=210acf71-616d-47eb-b75c-214f83ed9ee4
Certificate serial:       010D0C9F4328584F6F22D6DBBA94930A36406280
Authority key identifier: 87:FB:AA:7F:79:88:D4:2A:70:18:23:A8:4F:76:76:36:BF:5E:6C:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/210acf71-616d-47eb-b75c-214f83ed9ee4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/210acf71-616d-47eb-b75c-214f83ed9ee4/fb70c043-c38e-3f22-a0c2-93336ba359c9.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     397350
IP address blocks:        2602:f65d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/210acf71-616d-47eb-b75c-214f83ed9ee4/210acf71-616d-47eb-b75c-214f83ed9ee4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/210acf71-616d-47eb-b75c-214f83ed9ee4/210acf71-616d-47eb-b75c-214f83ed9ee4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/210acf71-616d-47eb-b75c-214f83ed9ee4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:d6:db:ba:94:93:0a:36:40:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210acf71-616d-47eb-b75c-214f83ed9ee4
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=70ce8693-98be-4ba3-b959-e8e59e318986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:c5:fb:3d:ea:14:7d:81:ba:59:30:2c:d0:
                    92:bd:ce:d8:bb:99:8f:f5:f3:7e:2b:f9:39:5c:d5:
                    84:24:a8:ae:29:85:13:7c:16:8f:90:2f:e6:9f:41:
                    31:fe:93:a0:6d:71:ee:e6:c3:6c:0e:7a:84:19:a1:
                    41:05:ea:3e:f6:d2:a6:3c:d9:52:cb:80:79:56:eb:
                    7e:0a:c3:69:20:2b:74:c5:01:e7:a5:c5:bc:d2:f5:
                    8d:d0:b6:c8:21:c2:61:80:0e:a7:82:02:52:13:30:
                    93:8c:04:4b:39:0d:1a:84:5e:33:dd:11:65:1e:65:
                    7b:41:8c:76:f9:f6:e8:43:c8:28:ee:c4:42:30:0e:
                    45:b6:69:c8:6a:d4:94:5a:57:e1:fc:eb:5d:05:7a:
                    f6:aa:97:b7:be:1f:f6:6b:b9:43:f5:24:5b:ac:4f:
                    ae:6d:2f:1f:13:62:a8:37:63:27:7a:8f:36:a2:2e:
                    73:79:ed:ff:bc:38:34:d9:0f:15:5a:e5:7a:0f:1e:
                    6e:aa:5b:6d:08:9d:32:5f:99:51:25:3a:01:cb:97:
                    d5:0a:95:3c:74:2d:3f:0a:23:e0:11:53:46:90:05:
                    1c:94:5d:6e:2d:b2:4e:d2:99:86:cc:87:4d:22:56:
                    c7:73:f0:0a:ae:07:62:38:c9:f5:df:b5:76:03:1d:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F8:FA:01:28:8A:4A:67:34:91:C3:91:10:64:91:39:7E:2E:AB:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/210acf71-616d-47eb-b75c-214f83ed9ee4/fb70c043-c38e-3f22-a0c2-93336ba359c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/210acf71-616d-47eb-b75c-214f83ed9ee4/210acf71-616d-47eb-b75c-214f83ed9ee4.crl

            X509v3 Authority Key Identifier:
                keyid:87:FB:AA:7F:79:88:D4:2A:70:18:23:A8:4F:76:76:36:BF:5E:6C:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/210acf71-616d-47eb-b75c-214f83ed9ee4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f65d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:49:20:88:d0:e6:47:17:84:cb:fa:89:b9:31:32:d1:e3:52:
         7f:dc:4f:9e:45:f4:46:8d:3b:60:c4:bc:e1:1c:45:e5:21:37:
         09:bc:3b:24:82:a1:64:6c:b8:bc:60:ef:db:42:15:64:dd:d3:
         83:5b:9f:b1:cc:70:f0:94:66:e2:2f:74:57:ac:fb:d1:29:45:
         20:67:dd:74:a7:72:5a:6e:0c:c8:bf:8b:12:05:9d:59:6d:ae:
         74:cc:e3:76:5c:37:f9:a7:9b:f4:65:04:c9:b8:e7:74:6f:89:
         91:81:b3:25:54:ae:fd:92:ed:c2:3b:c2:4b:a4:36:4e:6e:87:
         d0:4c:50:a7:97:b1:b5:b2:cc:ec:64:bc:1f:cf:ae:b9:8f:18:
         1d:ae:bf:68:f6:80:a5:e9:0a:e1:8b:e7:98:8b:02:68:38:56:
         56:df:70:73:22:85:84:b3:e4:c2:63:b5:fd:83:42:cd:02:bb:
         24:3f:02:d6:3b:20:30:ff:8e:e9:b6:9e:ed:70:0a:ab:4b:3d:
         71:60:d9:b1:0e:38:8c:a9:b4:cd:1e:09:c8:70:0f:f0:57:82:
         81:48:c2:59:20:9a:7d:78:93:3c:ec:fc:6b:be:a1:c1:45:23:
         f8:d3:a5:af:11:f5:5f:d2:a5:2c:95:54:e9:0a:f0:22:4a:0e:
         cb:6a:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:27:48 2026 by rpki-client