Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/1d2ff29d-47a7-3ec8-ae7d-3d2a5e2b9e4a.roa
File:                     1d2ff29d-47a7-3ec8-ae7d-3d2a5e2b9e4a.roa (raw, json)
Hash identifier:          nusxVpwTJM0zViVabxOwe/j71QjanVMzYg5FnbtrDPE=
Subject key identifier:   14:C0:AF:62:A9:C1:9D:4C:1F:14:8B:3E:EE:45:14:6F:66:01:AF:6E
Certificate issuer:       /CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4
Certificate serial:       010D0C9F4328584F43DD279D52C2A5F991FA1400
Authority key identifier: 10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/1d2ff29d-47a7-3ec8-ae7d-3d2a5e2b9e4a.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     401753
IP address blocks:        2602:f61e:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:27:9d:52:c2:a5:f9:91:fa:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=ed83adff-14fe-4ad8-8a01-0af0b7ede45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:7d:3c:78:54:a5:d0:7a:7d:f7:b3:18:43:
                    44:54:8e:37:cf:aa:65:ce:0a:61:e9:f7:88:f2:0f:
                    94:ae:f2:3e:35:43:08:7b:4f:90:e2:f5:db:24:06:
                    b0:06:a1:3c:3f:54:64:f6:ba:19:67:75:24:0b:ce:
                    1d:fa:22:64:dd:d9:78:56:c0:c6:db:48:79:13:32:
                    50:ed:27:19:a2:c0:49:76:15:06:0d:48:e2:7e:6a:
                    d3:95:e4:1b:13:76:2b:92:ac:a7:30:55:33:0c:ab:
                    56:ba:33:eb:3c:a2:2e:ec:3d:52:af:6f:86:64:54:
                    65:57:c2:bb:bf:70:59:41:28:43:d7:e1:67:64:3c:
                    c9:a2:88:10:e8:53:1a:d6:49:a4:6d:3f:26:ab:1b:
                    5c:ae:9f:c5:e7:98:60:70:cf:b7:fa:5f:cf:12:66:
                    18:ba:d5:df:87:5a:cc:8a:24:8a:a7:c8:f0:cb:77:
                    b8:13:c7:df:78:28:09:87:cd:ab:b7:72:75:d0:51:
                    d3:62:c2:e9:bd:d8:c0:1e:b5:49:ab:c6:2b:8c:72:
                    c4:af:68:03:4c:ea:7f:0d:90:0a:2b:fe:bf:5e:7d:
                    9b:9e:1d:f9:09:ac:59:ca:30:54:95:84:7c:1f:c7:
                    bc:40:a9:6b:b4:ee:df:5d:76:c8:dc:34:cc:ff:78:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C0:AF:62:A9:C1:9D:4C:1F:14:8B:3E:EE:45:14:6F:66:01:AF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/1d2ff29d-47a7-3ec8-ae7d-3d2a5e2b9e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.crl

            X509v3 Authority Key Identifier:
                keyid:10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f61e:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ad:e7:cd:53:36:5f:34:d6:75:1c:11:78:87:e0:da:0f:89:
         5d:61:10:ac:e4:86:19:58:3a:a4:59:81:51:f9:ba:6d:1e:13:
         fb:1e:0f:ae:58:62:dd:75:b9:e8:ce:66:89:4d:c5:ac:06:fd:
         13:f9:50:5c:b3:dc:0d:46:b6:fe:e8:18:4f:05:5a:69:49:a0:
         7b:bf:40:94:08:bd:00:bb:07:22:62:a1:dd:c7:85:d7:15:75:
         92:62:21:e6:7c:1a:e2:6c:c0:42:73:bd:70:85:f3:a0:a3:22:
         57:13:82:93:59:e2:7d:d8:af:72:68:58:fa:a3:a3:75:57:5e:
         da:c7:b0:87:9e:45:5e:4e:68:25:ed:b5:f8:47:ce:92:28:ac:
         e9:18:3e:e7:68:c6:02:6d:b3:78:e6:0a:9a:42:53:24:d8:ab:
         11:10:47:82:98:62:d6:69:f4:ba:19:86:02:16:b7:1f:f9:f1:
         b1:d0:88:64:a7:32:7b:a7:36:3e:03:b4:fe:ba:68:f4:61:80:
         c8:5b:8f:4c:2d:c9:c0:0f:b3:81:9d:57:94:eb:15:70:ba:7c:
         9c:a3:d3:e6:a6:ca:88:9b:cc:79:39:b7:48:77:72:0f:8c:a3:
         f5:4e:44:da:69:ee:3b:d0:6b:59:c1:8f:b4:05:bf:bd:23:c1:
         31:99:57:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:45 2026 by rpki-client