Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa
File:                     49fab721-ee4d-39f7-95aa-244180f7663d.roa (raw, json)
Hash identifier:          1rPRfklXEF+gWf+HlSbnBAJBgMHsT86wUuIg5S8ciuw=
Subject key identifier:   58:45:0B:76:A5:17:25:32:22:88:47:B9:B5:AF:F3:29:6A:E0:41:4B
Certificate issuer:       /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
Certificate serial:       010D0C9F4328584F94D30B86775D105F4F5EAB00
Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     19468
IP address blocks:        2602:f76f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:0b:86:77:5d:10:5f:4f:5e:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=079e5fc5-fc9a-4cd6-99cc-38910990a7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:67:c5:5f:0b:4f:29:5d:d7:e5:8f:45:09:
                    d2:4b:ab:1e:92:b5:fd:e9:79:7c:e1:1b:42:c2:25:
                    d1:5e:0e:cb:5f:db:1a:55:a7:43:04:17:40:51:a6:
                    f6:95:85:9b:60:e6:8f:ac:c6:b2:21:8c:0e:d0:60:
                    ae:08:11:30:92:d9:0d:ef:8c:4d:ec:f8:6d:ac:62:
                    ee:fa:6f:5e:ec:ea:f3:90:0c:0a:a5:59:8b:b8:06:
                    e4:d7:71:7a:e3:2d:d1:ba:33:2f:17:fa:c0:5d:92:
                    c6:d8:c0:ad:5b:3b:f0:21:e9:ad:3e:78:69:85:a4:
                    96:29:f8:d1:57:19:a6:77:83:c6:ff:cb:ae:7b:77:
                    f2:ac:5c:c7:47:b3:e6:cb:a7:bf:f3:75:25:76:dd:
                    c2:e9:04:df:f4:9f:e4:8d:5d:4d:a3:79:12:ad:e4:
                    fe:68:02:2b:5c:8f:6e:f1:4e:5c:24:fc:f8:60:67:
                    1b:f5:f9:49:21:60:9d:b4:47:68:c4:17:cd:c8:fd:
                    36:a5:58:ef:fd:f2:66:9f:69:52:b8:5b:92:b5:cd:
                    51:35:d4:62:24:dc:22:3a:3f:86:eb:96:d5:d9:a1:
                    ec:b6:dd:db:c6:86:f8:32:b9:52:70:ec:45:77:c7:
                    aa:61:c1:c4:02:96:f1:d5:c7:e4:48:86:c8:07:b8:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:45:0B:76:A5:17:25:32:22:88:47:B9:B5:AF:F3:29:6A:E0:41:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl

            X509v3 Authority Key Identifier:
                keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f76f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e2:ae:05:be:5d:86:34:c6:10:19:3c:92:01:23:d5:50:4e:
         78:ea:00:fc:41:b1:30:78:fc:42:38:16:cc:00:c8:82:43:fa:
         73:33:45:fe:4c:62:2c:b2:27:4c:fd:8b:62:06:48:08:95:ac:
         f2:38:37:c4:22:b9:f7:93:cf:30:34:5f:7d:ee:1e:c6:81:5c:
         9d:80:94:a6:df:a4:9d:b2:bc:83:d6:07:6f:a0:8f:17:c9:62:
         92:76:3c:c6:e4:b9:a3:f6:8f:2d:d7:cd:9a:5d:45:c5:fd:e8:
         aa:1e:d1:73:42:4e:a3:8c:19:c8:d0:e6:c9:10:31:a5:df:df:
         43:09:70:bd:87:46:30:9b:32:6c:ed:b8:13:fa:cb:ff:aa:af:
         21:80:1b:4b:50:80:22:4f:a9:19:8a:7e:c7:fb:f3:f7:6c:6b:
         7d:f4:d7:39:15:69:ac:a6:18:69:8b:9a:58:ba:4c:82:44:02:
         ea:a7:00:cd:cd:1b:1d:17:d4:a5:6a:80:40:bf:a8:ca:f1:fc:
         a0:cf:0b:f3:39:5c:72:cb:82:7d:ea:38:1f:a8:ad:c5:09:fa:
         b4:61:77:ee:74:4a:65:61:f9:9d:b4:ee:99:6f:22:32:c2:b9:
         b8:83:05:4e:68:ae:80:71:29:a5:fb:bd:4a:a4:c8:47:e1:45:
         11:a1:26:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:52:33 2026 by rpki-client