Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/45b16901-d9d9-4108-81b5-73ae0078a01b/d5ac9831-7595-3230-b72a-9b39385066f9.roa
File:                     d5ac9831-7595-3230-b72a-9b39385066f9.roa (raw, json)
Hash identifier:          oa+qA6NAoFnz59+KvgbudMPicO1nvjvXH0t0QF3CBgc=
Subject key identifier:   E4:9E:D4:46:87:A0:21:FC:6E:33:18:BB:45:4B:E0:65:1F:BF:DE:41
Certificate issuer:       /CN=45b16901-d9d9-4108-81b5-73ae0078a01b
Certificate serial:       010D0C9F4328584F49732DADC89EAA5C360D5A00
Authority key identifier: B2:7B:8F:06:70:04:05:D0:DF:52:00:2A:D7:F8:78:E4:42:B1:5B:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/45b16901-d9d9-4108-81b5-73ae0078a01b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/45b16901-d9d9-4108-81b5-73ae0078a01b/d5ac9831-7595-3230-b72a-9b39385066f9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401756
IP address blocks:        2602:f61c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/45b16901-d9d9-4108-81b5-73ae0078a01b/45b16901-d9d9-4108-81b5-73ae0078a01b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/45b16901-d9d9-4108-81b5-73ae0078a01b/45b16901-d9d9-4108-81b5-73ae0078a01b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/45b16901-d9d9-4108-81b5-73ae0078a01b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:2d:ad:c8:9e:aa:5c:36:0d:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b16901-d9d9-4108-81b5-73ae0078a01b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b816773f-7eda-4d2d-9a26-86e1c4439a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:57:5e:37:24:a3:90:96:51:43:9d:03:cb:48:
                    9d:ba:d1:f3:76:4b:4b:b6:0e:35:5c:e7:8f:79:4b:
                    a5:36:12:62:ac:45:13:c2:3d:61:c4:f2:9e:6d:bf:
                    3b:a2:ab:02:bc:ad:1a:dd:40:9b:6f:af:57:c6:45:
                    e7:b2:68:10:7b:8b:f4:0d:8e:9e:25:e3:fb:cd:7f:
                    b5:75:1b:fc:4b:63:37:41:be:cb:53:82:20:bf:fe:
                    71:0b:8c:a3:9e:73:76:99:cb:7c:24:9c:da:87:bb:
                    87:12:18:ba:f8:b6:0c:c1:ac:19:ef:3d:06:85:51:
                    f5:05:4c:3d:00:5a:7f:24:28:0e:d0:6a:f7:17:d0:
                    c4:3c:c0:3e:a6:be:6a:18:01:ec:6e:b6:75:3a:74:
                    84:6a:dc:af:00:25:b9:62:99:2b:cb:20:90:ef:fb:
                    63:9d:6c:e5:87:8e:1c:17:0f:79:38:9a:4c:71:2a:
                    72:71:00:d6:fb:6a:23:99:05:4c:c4:93:1a:02:46:
                    54:0f:1a:a4:3f:73:43:44:98:2a:3c:40:ad:4e:ac:
                    e9:33:e1:71:9a:b2:4c:0e:a7:da:08:64:f4:9e:23:
                    e3:ae:68:1e:1e:4b:87:a9:02:3f:95:d5:4e:6a:89:
                    6d:aa:81:b7:bd:b1:8a:64:b3:a8:f2:5a:5c:14:0a:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9E:D4:46:87:A0:21:FC:6E:33:18:BB:45:4B:E0:65:1F:BF:DE:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/45b16901-d9d9-4108-81b5-73ae0078a01b/d5ac9831-7595-3230-b72a-9b39385066f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/45b16901-d9d9-4108-81b5-73ae0078a01b/45b16901-d9d9-4108-81b5-73ae0078a01b.crl

            X509v3 Authority Key Identifier:
                keyid:B2:7B:8F:06:70:04:05:D0:DF:52:00:2A:D7:F8:78:E4:42:B1:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/45b16901-d9d9-4108-81b5-73ae0078a01b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f61c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c5:4c:cd:cc:4a:9e:11:ec:a1:c8:9e:14:ae:ce:28:3d:bc:
         f6:c3:36:53:fa:56:04:ef:7e:4f:d7:30:34:02:5e:c8:a1:32:
         b5:52:92:eb:a4:bf:db:cc:66:f5:2e:1d:73:f5:ca:e9:8e:4e:
         4e:43:ed:22:07:55:8f:06:75:13:92:87:bd:f8:91:44:63:1c:
         90:65:77:08:ef:48:54:77:eb:3c:38:6e:cd:f1:91:68:a3:f6:
         7d:ad:9a:fc:d1:15:06:e1:0b:29:5f:7b:46:96:91:0a:1e:e0:
         ac:3c:06:44:5b:22:d2:ad:16:95:63:2c:6d:d0:28:61:b6:ed:
         7c:92:b0:be:ae:e1:37:eb:7d:47:39:0a:fb:bb:ba:c0:d3:28:
         42:da:9f:cc:7f:77:29:22:e4:38:c7:1b:e6:5a:1f:3a:a4:59:
         a9:90:0d:dd:b5:e5:71:36:75:c6:81:9b:b6:7d:78:75:20:4d:
         aa:aa:55:35:ad:37:99:b8:11:db:ed:f0:32:8a:b6:d0:57:00:
         19:44:2e:6f:82:76:07:80:47:9b:34:87:28:b9:9f:1f:30:52:
         ae:d5:bc:fc:ce:cd:6b:7c:6d:20:a7:49:a5:4c:8f:bf:13:78:
         4f:68:c1:3c:ac:64:c9:2e:fa:3a:aa:7f:7d:dc:af:0b:c3:a4:
         2d:50:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:38:20 2026 by rpki-client