Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa
File:                     d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa (raw, json)
Hash identifier:          LZpAuURIjmWZ1rwZzCdBXgv4Iijk0jsru9RzOfRloz4=
Subject key identifier:   A1:30:29:06:47:F9:FA:85:60:F0:3F:E2:97:0E:53:34:0F:7D:A0:62
Certificate issuer:       /CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
Certificate serial:       010D0C9F4328584F49733364EA93F645812D9080
Authority key identifier: DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        2602:f708::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:33:64:ea:93:f6:45:81:2d:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b78a6b75-2c01-4dc9-9797-93dcd24b7e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:96:ed:2b:85:51:85:13:ff:d9:7e:93:d5:
                    f0:e1:02:f5:e8:f7:f2:ca:20:3d:62:4a:b6:65:2a:
                    1c:7f:bd:06:5d:37:06:1e:38:88:e2:df:fd:b9:66:
                    5c:6f:59:df:bd:61:4b:0a:ac:f0:66:e1:cd:4f:97:
                    0f:65:de:50:a2:af:a2:45:17:d9:40:1a:b4:bb:99:
                    33:b0:4d:18:78:97:f4:90:b7:65:5a:56:57:a5:15:
                    9d:d9:80:78:b9:8b:d8:ab:96:f0:f0:a0:5d:5c:1c:
                    b9:78:0c:69:5b:d8:3c:fe:5f:ee:fc:7f:2e:22:2d:
                    45:ad:35:b4:76:f5:37:19:d9:64:4e:95:e5:81:86:
                    f5:00:a2:af:a0:06:7e:32:de:04:44:98:fa:91:6b:
                    54:b3:83:5a:0a:24:5c:cd:04:2d:ba:f1:88:6c:4d:
                    6e:dc:08:75:49:14:f5:74:c1:25:11:fa:a2:62:81:
                    4c:c2:52:c9:e0:6c:39:45:50:46:04:58:12:98:a0:
                    40:15:fa:92:38:64:d7:ee:ef:7e:06:ee:b4:4f:e6:
                    96:6b:aa:27:db:5b:7d:1e:61:dc:8a:29:8e:b9:3f:
                    62:ec:30:00:39:cd:5b:a4:18:68:89:df:1d:68:22:
                    5b:0c:57:45:1d:a6:24:a1:b2:41:b6:56:58:49:58:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:30:29:06:47:F9:FA:85:60:F0:3F:E2:97:0E:53:34:0F:7D:A0:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f708::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0d:42:d8:f6:df:0c:f5:84:46:95:16:47:99:ad:3d:a6:55:
         8c:f9:4a:15:34:8e:c0:99:21:d8:03:10:a0:df:73:8f:15:d3:
         c8:52:9d:01:76:d7:2e:71:e3:a6:23:33:36:f2:1b:ea:b1:91:
         05:a6:c2:09:f2:10:6a:a9:d8:5c:f8:8d:49:5b:ec:45:7b:29:
         ee:16:fb:92:f7:51:2c:73:2b:bf:2c:63:51:f7:7d:e3:f1:64:
         f0:e8:e0:70:da:be:df:a4:d1:90:1d:78:05:d6:99:0f:e3:7a:
         b6:41:5b:81:84:bb:75:2d:31:59:e1:34:a2:f7:40:99:4c:97:
         54:49:51:95:cd:f8:c7:b1:b0:f8:b0:01:e6:b8:b4:9d:45:f4:
         39:4c:66:a9:a9:bf:a3:69:47:41:9f:e3:8b:be:0f:9f:8f:ed:
         08:bb:65:3b:73:1b:93:d0:da:61:8b:72:10:f6:b8:47:83:b2:
         98:51:98:8a:31:98:8d:78:9b:04:f9:b7:04:4f:d6:a7:6b:f0:
         65:20:e1:fc:68:0f:93:1e:10:22:9c:bd:cb:2a:5f:55:8c:87:
         dc:ef:02:39:24:6e:a5:d6:39:b7:0a:5d:ef:ee:b0:af:f0:dd:
         e5:34:50:3c:42:a5:b8:37:85:e5:ad:a1:68:b1:3e:ac:b0:0a:
         68:d8:61:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:46:44 2026 by rpki-client