Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/13d42f27-a151-35c3-b96c-2575d95b9c74.roa
File:                     13d42f27-a151-35c3-b96c-2575d95b9c74.roa (raw, json)
Hash identifier:          Vz0l1OYzRu5eBO+WwtF/1HBYEE8gPXOk9rTAyfFdzuM=
Subject key identifier:   09:30:71:4F:8E:46:51:F2:68:52:3F:89:FB:7B:F9:F0:D5:A9:AD:6D
Certificate issuer:       /CN=89cf2d78-a948-47d7-a14a-a8b9a62311bf
Certificate serial:       010D0C9F4328584FAC8DE6A0B59D4944C76CBA80
Authority key identifier: D7:86:4F:E9:EB:B4:AD:41:55:E1:CB:D6:E2:E4:29:49:79:6A:3D:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/13d42f27-a151-35c3-b96c-2575d95b9c74.roa
Signing time:             Fri 30 Oct 2026 13:00:12 +0000
ROA not before:           Fri 30 Oct 2026 13:00:12 +0000
ROA not after:            Thu 28 Jan 2027 14:00:12 +0000
asID:                     40605
IP address blocks:        2602:f6c4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ac:8d:e6:a0:b5:9d:49:44:c7:6c:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89cf2d78-a948-47d7-a14a-a8b9a62311bf
        Validity
            Not Before: Oct 30 13:00:12 2026 GMT
            Not After : Jan 28 14:00:12 2027 GMT
        Subject: CN=964c5e45-4aff-4a6c-8483-6e02d5656e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3d:b3:59:7d:8a:b5:3e:db:f4:78:56:9a:72:
                    6e:6c:d4:dc:88:14:76:b5:d1:a0:fa:cd:ee:23:4c:
                    88:5b:90:e9:09:7b:f3:5c:f9:7c:07:cc:a6:38:9e:
                    dc:57:b0:63:4a:50:bd:48:52:ef:d8:af:ad:18:c6:
                    41:cd:da:84:b6:d7:2f:df:fb:eb:bb:4e:cf:f5:6c:
                    1e:dd:ad:8a:87:3f:20:92:ed:15:4e:8f:ff:d5:73:
                    d2:79:98:fd:a3:d3:2c:aa:52:92:0f:fd:62:b1:c5:
                    06:e0:61:56:fd:39:1a:45:d2:04:9d:a8:fd:37:2c:
                    ba:9f:e7:88:51:8d:62:ce:58:08:5a:f2:71:15:f6:
                    f1:76:ad:3e:14:34:76:a5:eb:a5:9c:3f:cd:84:6a:
                    4d:9a:3b:91:15:08:02:ba:fc:82:3b:d3:49:13:6f:
                    f2:a8:6a:03:71:a3:05:8b:4c:9c:84:ab:ac:4f:11:
                    45:97:a7:a0:72:5d:1e:2b:55:8b:69:d9:b0:72:2d:
                    a7:5d:d2:83:6e:df:cd:d2:4d:41:f2:98:68:5e:e5:
                    11:45:b1:49:7f:0d:c7:0e:46:0e:6b:ef:04:52:e6:
                    64:4e:c4:6a:d7:3e:a7:23:52:b0:30:0d:7f:62:4d:
                    fb:76:72:ae:7f:84:0d:ca:b6:68:c9:ef:a8:db:3a:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:30:71:4F:8E:46:51:F2:68:52:3F:89:FB:7B:F9:F0:D5:A9:AD:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/13d42f27-a151-35c3-b96c-2575d95b9c74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.crl

            X509v3 Authority Key Identifier:
                keyid:D7:86:4F:E9:EB:B4:AD:41:55:E1:CB:D6:E2:E4:29:49:79:6A:3D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6c4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:df:05:a0:0c:56:35:0f:9e:47:09:b1:87:bb:d3:c2:af:5e:
         74:e4:9a:e5:47:83:d6:89:80:18:82:63:02:a6:9c:63:1d:4f:
         47:b9:f0:97:a3:03:b1:40:87:9c:bb:5a:56:ea:82:b5:94:f5:
         95:89:39:b5:b1:b4:6a:76:1b:b7:03:2a:be:a8:7f:3f:40:11:
         b3:4e:8e:01:9e:04:6b:22:a3:a1:d8:78:01:4f:2b:08:78:b3:
         da:4e:be:bc:ae:11:3a:be:1e:04:71:7c:3a:93:82:bc:35:02:
         b2:26:5f:c2:99:17:e4:6c:3c:81:a8:cb:dc:ce:b0:13:41:aa:
         86:e0:54:8e:2c:54:1e:71:cb:1a:33:9e:e9:85:75:f6:77:af:
         15:a2:70:26:b6:cc:96:c4:44:a3:01:08:77:de:a9:37:71:b9:
         b7:a8:dd:93:ae:8f:f4:32:a1:ac:a6:39:af:e0:d9:d9:ad:31:
         72:df:46:0c:15:9c:71:de:ac:5c:86:e4:2f:10:1c:09:69:8c:
         74:84:fa:b6:9c:5e:d8:e1:1c:c8:e4:14:db:2a:5a:88:a9:e8:
         9a:35:2a:66:c8:c5:1a:f8:c9:f7:39:10:e6:d3:f0:b6:51:9a:
         2d:67:82:8f:e5:81:62:40:d6:17:39:bc:6a:6e:13:3e:0c:a0:
         56:c1:cc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:27 2026 by rpki-client