Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/137509db-85f0-3375-a1ef-2522400eabaf.roa
File:                     137509db-85f0-3375-a1ef-2522400eabaf.roa (raw, json)
Hash identifier:          QQcUSxJxtVq7aNOow+6YJsAk5wo8ln1i+m6IdE6fT98=
Subject key identifier:   20:FD:F0:C6:CE:2E:86:A4:B6:ED:7A:57:CA:2F:69:EF:D8:CE:FA:8D
Certificate issuer:       /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
Certificate serial:       010D0C9F4328584FD0F6817368A54013FC748680
Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/137509db-85f0-3375-a1ef-2522400eabaf.roa
Signing time:             Thu 12 Nov 2026 14:00:13 +0000
ROA not before:           Thu 12 Nov 2026 14:00:13 +0000
ROA not after:            Wed 10 Feb 2027 14:00:13 +0000
asID:                     13696
IP address blocks:        2602:f77c:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d0:f6:81:73:68:a5:40:13:fc:74:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
        Validity
            Not Before: Nov 12 14:00:13 2026 GMT
            Not After : Feb 10 14:00:13 2027 GMT
        Subject: CN=90fd8054-55f6-42bf-be28-4c20344ad554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:24:57:f7:f6:4d:08:20:49:86:12:c8:94:c1:
                    49:bf:fd:3b:98:49:f2:9e:b1:61:5d:e0:e9:73:ee:
                    ef:dc:9f:6d:7f:05:99:ef:9a:bf:95:57:5a:ac:19:
                    03:37:8b:4c:e1:47:51:26:01:ee:6e:9d:95:b8:1c:
                    33:3b:44:e3:fd:f0:c0:20:ec:46:7c:16:76:53:c3:
                    1e:6e:4d:ce:14:16:2b:56:60:01:d3:bf:54:85:57:
                    85:ac:7e:94:2a:d2:aa:ce:bd:69:23:7b:72:9e:7c:
                    2b:45:65:82:64:bd:a1:e8:26:63:85:24:80:c8:ce:
                    ce:76:5f:9f:9d:60:25:da:31:c1:15:f0:71:d4:67:
                    5d:9d:78:68:c5:0d:41:a4:bc:30:fb:e0:28:cc:de:
                    d5:91:c7:b9:71:f9:16:e0:c0:4b:29:b7:7a:1e:5e:
                    b9:49:a2:44:02:d4:03:92:f4:89:f1:cd:34:42:b8:
                    99:76:be:1f:f2:53:0a:06:bc:62:b2:77:03:25:b0:
                    61:ee:04:4c:89:b8:51:25:fe:f9:a5:51:7e:d2:bf:
                    79:f1:c7:de:98:c8:64:81:bd:61:ae:4f:fe:7a:56:
                    f1:29:4b:1e:2a:44:92:70:61:f6:d0:50:7b:db:9d:
                    2d:83:bf:01:c6:38:2a:be:41:f7:01:7b:ad:3d:94:
                    d1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FD:F0:C6:CE:2E:86:A4:B6:ED:7A:57:CA:2F:69:EF:D8:CE:FA:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/137509db-85f0-3375-a1ef-2522400eabaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl

            X509v3 Authority Key Identifier:
                keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f77c:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:68:ae:61:c0:0f:08:67:f3:59:75:1d:cf:bc:f3:7f:22:d5:
         80:89:a0:38:d5:50:9e:0f:ae:85:a6:ae:fc:4e:12:23:7c:a7:
         2f:df:f0:83:01:38:05:9d:b8:a7:0d:86:66:04:aa:34:50:ef:
         fe:33:c1:43:1e:aa:49:d7:a5:94:96:48:f3:f0:41:ef:19:81:
         92:fe:5b:22:ea:16:b9:0b:68:17:c5:e8:7f:71:ce:50:57:12:
         d4:4c:94:06:08:49:3e:bc:04:da:c0:2a:35:fc:2c:5a:06:8e:
         db:00:68:15:e3:28:9f:cc:a1:45:fb:38:79:c8:95:28:3a:d0:
         56:bf:43:15:27:fe:be:09:6e:97:91:eb:83:69:61:4a:84:ae:
         22:d3:69:bf:81:0d:8c:0f:d9:4d:b6:13:f3:e9:9f:30:f9:39:
         a1:b4:48:9f:5c:e3:dc:91:2e:80:25:ff:4b:63:01:cd:16:64:
         6c:9e:5c:77:8e:12:c3:3f:ee:95:e2:8f:a3:bb:b0:6f:99:8e:
         6c:0c:5a:5d:f1:e9:26:04:8d:40:da:bb:70:2b:fa:23:21:83:
         c4:b3:6a:74:f8:24:6d:b9:ba:e2:0f:ce:29:8d:f0:6f:2f:90:
         ce:0c:cf:12:c2:08:4c:73:57:68:4a:94:6b:71:66:95:c5:9b:
         27:6e:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:00 2026 by rpki-client