Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa
File:                     4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa (raw, json)
Hash identifier:          aqvvOi7yy97QHd5uEehNaKTYKwhWjxPcjqsXoh5hSE4=
Subject key identifier:   CB:B6:0C:F2:48:74:51:4D:7F:81:BF:2A:76:FD:0A:5D:A5:B9:72:CC
Certificate issuer:       /CN=b673aad8-2248-407c-90e8-0781473d6616
Certificate serial:       010D0C9F4328584F03A84D137011E4B8031D4A20
Authority key identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     19922
IP address blocks:        2602:f676::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:4d:13:70:11:e4:b8:03:1d:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b673aad8-2248-407c-90e8-0781473d6616
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=1ec92fe6-ba7e-4ba1-be6e-d33133c3c4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e6:9e:83:b8:0a:95:6d:4d:87:34:6e:7f:1d:
                    6d:60:c4:a9:03:db:15:a5:1f:57:52:44:3a:45:22:
                    00:3c:bb:29:c9:2d:95:52:37:3f:03:34:07:86:2e:
                    8b:14:be:d8:75:18:f5:64:24:da:e3:da:ef:fd:37:
                    2d:79:4b:51:cb:b0:92:58:b1:17:44:fc:e1:52:93:
                    fe:f6:49:1f:b2:ee:2d:84:2a:4f:f6:7a:ae:05:87:
                    a2:dc:0c:8e:c3:07:29:8c:bf:4f:b0:2e:b5:ef:84:
                    c1:c6:06:7a:36:09:fa:33:1b:19:30:f4:b1:53:ff:
                    7b:2e:f3:aa:6d:64:23:ff:f7:15:bc:d4:f1:2b:06:
                    50:9b:a4:e3:ac:b0:7a:96:be:1c:37:5f:17:23:e8:
                    e6:da:4b:12:ce:5e:11:53:55:4c:25:f6:49:3b:79:
                    a0:b0:05:a9:cf:e9:45:e9:02:49:84:0c:a3:25:d9:
                    7f:e7:c3:20:93:52:e0:6d:a2:aa:30:f6:2e:e9:dc:
                    4b:2c:3f:99:13:c6:4b:02:ab:e8:45:a6:af:2c:93:
                    c5:75:c9:a3:a5:b6:27:c4:92:a7:a1:c6:a2:17:09:
                    39:37:ee:ee:62:29:06:57:aa:d2:e1:1c:2b:f4:c2:
                    36:a5:d0:50:de:54:61:e8:a9:c9:c4:ea:22:f0:dd:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B6:0C:F2:48:74:51:4D:7F:81:BF:2A:76:FD:0A:5D:A5:B9:72:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f676::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:da:10:1f:96:2b:49:c0:ae:c4:71:37:c4:53:89:f1:a2:04:
         75:5c:f1:53:20:ed:85:02:e7:b0:57:e9:2c:9e:2c:12:25:76:
         2d:0b:59:87:d1:64:9c:31:94:d7:73:a6:88:02:cd:7f:21:dc:
         f6:0f:0d:49:3f:b5:9a:35:0f:a9:fc:64:73:11:70:f2:7d:e0:
         f6:9a:0d:fd:ef:45:17:53:9f:b8:e0:30:d4:fb:d4:35:be:54:
         f6:0a:e1:c2:d8:ef:45:69:8a:8f:6b:a7:5c:d7:93:cf:31:b4:
         6f:4f:17:64:b2:4a:f2:b6:66:17:62:6b:0b:c6:33:7c:38:b2:
         a6:e5:21:01:b5:b1:83:ef:bf:52:b5:c4:87:bb:70:0c:06:83:
         ca:51:d1:a6:f0:ba:1a:f3:ee:7a:cc:b6:74:3b:4c:19:99:c8:
         e9:20:7a:57:c3:91:84:62:bd:a7:a4:5f:1e:91:26:69:15:23:
         58:72:17:21:64:07:43:61:20:66:59:65:58:d1:f2:37:52:7e:
         b9:a8:d5:84:bd:b0:8c:15:71:44:fa:4d:79:eb:61:d8:33:04:
         83:aa:f8:f0:cf:e1:4f:7a:db:a7:68:bd:c0:98:48:aa:d8:a6:
         9f:29:a1:a9:07:3f:5c:02:58:da:ee:52:e3:60:13:28:cf:0d:
         a9:f0:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:32:14 2026 by rpki-client