Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/9a77e581-0385-3877-b7bb-d90366a82d48.roa
File:                     9a77e581-0385-3877-b7bb-d90366a82d48.roa (raw, json)
Hash identifier:          Vots7bRarjbVrmbfAlatoSyP5vrjB1wbcqmLrmuRx/s=
Subject key identifier:   93:71:AB:A2:9B:F0:7C:A7:96:BC:95:F6:50:77:54:48:2E:41:F5:A0
Certificate issuer:       /CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4
Certificate serial:       010D0C9F4328584F43DD2888024E774CD33C0774
Authority key identifier: 10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/9a77e581-0385-3877-b7bb-d90366a82d48.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     401753
IP address blocks:        2602:f61e:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:28:88:02:4e:77:4c:d3:3c:07:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=2f552207-3330-44ba-9e00-5c64cc4ded5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:90:23:6b:68:eb:ee:bc:75:58:89:7e:58:
                    cf:3a:0b:94:ad:c5:8f:4b:cc:b1:4a:51:1b:7b:16:
                    85:fe:e2:b8:7f:a7:08:d0:22:05:7f:db:64:a7:72:
                    c4:67:78:77:a3:3a:17:bf:38:3b:df:16:80:71:25:
                    83:44:a3:86:85:7c:c3:d0:4d:d0:0e:54:02:8d:88:
                    ad:8b:f9:7d:e6:d5:55:01:b4:d6:33:dc:ed:0d:78:
                    6b:0c:97:54:93:a7:2a:45:34:27:d2:6a:a4:7f:6d:
                    da:73:31:f7:55:9a:7e:65:e7:a8:b9:d7:6e:68:aa:
                    91:c7:bd:79:bb:20:bc:76:4c:84:39:9b:fe:29:c7:
                    3a:ae:44:84:7f:ba:0d:58:a6:47:f5:eb:f0:02:21:
                    5d:19:ab:11:36:63:d3:ff:72:04:29:ad:ba:c3:a6:
                    91:7d:7f:8d:5f:b7:bb:46:ab:e1:03:ab:55:fd:80:
                    bf:88:5c:6a:ab:05:ee:25:da:ff:0f:83:20:40:c1:
                    30:90:d5:41:65:fb:b5:44:9c:4f:16:31:b5:88:a3:
                    ed:eb:26:0c:a6:7a:27:f0:68:ac:30:ef:2f:f4:9c:
                    54:bc:f7:f8:08:61:67:c5:0d:44:65:4f:f7:19:9e:
                    c3:35:ff:b3:69:a6:ac:d9:8c:09:e1:6b:62:18:ea:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:71:AB:A2:9B:F0:7C:A7:96:BC:95:F6:50:77:54:48:2E:41:F5:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/9a77e581-0385-3877-b7bb-d90366a82d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.crl

            X509v3 Authority Key Identifier:
                keyid:10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f61e:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ed:70:6c:55:cc:a1:e7:9d:90:fc:3b:62:38:ab:9a:c1:43:
         77:da:a1:83:d3:8e:da:82:11:22:73:75:ab:f9:4e:6b:c2:d9:
         17:a5:33:35:ec:2c:da:79:f4:53:3a:9e:a7:32:70:68:6d:e9:
         3f:a8:f7:2d:8e:2e:4c:e4:87:7c:a9:dc:f3:a5:71:43:d1:75:
         73:5a:08:9d:04:5b:ae:56:b1:2a:92:bd:ad:01:dc:14:4a:16:
         ec:04:ad:99:42:4d:64:57:9a:15:6d:01:4c:46:12:58:bc:bb:
         a5:78:16:1a:e2:97:0f:6f:d7:a5:58:dd:36:62:95:1f:7d:26:
         6a:80:78:17:ac:62:c6:52:9e:23:d2:01:a6:dd:80:c8:5c:f2:
         7d:36:c2:1b:fe:5b:80:81:3c:15:e3:6b:67:3f:d4:5e:cd:8f:
         7a:d7:f5:7a:32:53:6b:2d:ef:82:c9:e7:25:6f:8e:42:68:00:
         3b:1d:a1:35:dc:f1:0d:35:ae:6e:53:38:b4:33:f9:12:c2:a4:
         9a:da:b0:44:34:c3:a3:a1:f4:ac:d4:70:4e:a2:db:08:dc:6c:
         76:de:5d:87:b2:fd:14:e1:44:39:c6:05:e0:9f:78:39:5f:4e:
         b2:2f:a3:65:ae:59:49:4c:f2:38:37:5e:c9:4d:94:df:89:0a:
         c8:b5:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:59:34 2026 by rpki-client