Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa
File:                     b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa (raw, json)
Hash identifier:          sBv7tK82MV2zIR4f8Zvw1TblFQznVC6Q3IgwTrh9X5I=
Subject key identifier:   C9:44:DF:6A:AB:88:98:2A:40:0E:1F:56:60:E1:BD:60:2D:1C:A9:9B
Certificate issuer:       /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
Certificate serial:       010D0C9F4328584F20F7D81D93136CACCE85E080
Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2602:f74b:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:d8:1d:93:13:6c:ac:ce:85:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=5ac2d8e3-7444-461b-b663-89153a4327d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:0b:98:29:fc:da:58:0f:06:04:e0:f0:70:
                    c8:be:9c:20:bb:11:8f:65:83:d8:60:2d:1b:c2:ca:
                    6e:38:74:c6:57:18:4d:47:96:fc:a7:38:17:e1:13:
                    d1:6d:bb:33:17:5b:69:11:b4:aa:5c:cd:bb:c1:ba:
                    22:be:e7:f7:8c:76:b1:a7:21:2a:31:95:a9:18:0c:
                    66:e3:58:b7:01:37:be:cb:e5:7d:7e:d5:13:b4:69:
                    5a:c6:f0:83:dc:84:65:b3:75:70:81:c5:18:cb:5b:
                    60:5c:8a:0e:d0:39:a0:f1:2e:9b:bf:e2:29:61:cb:
                    73:3c:1c:7e:f3:47:66:3b:7e:42:a8:72:24:33:0a:
                    6d:fc:5d:e4:09:53:23:50:37:06:d3:10:be:3a:41:
                    6d:a8:58:71:3e:3c:7c:40:fe:36:ba:55:07:96:46:
                    76:0a:9b:44:5b:a9:1d:2f:aa:f5:13:3c:4e:4e:10:
                    b7:fc:a5:95:59:c6:5e:0b:26:22:cf:61:bf:9c:89:
                    51:5c:f6:50:ad:cc:3f:66:4f:2f:73:6e:a8:53:d1:
                    ff:47:05:fe:ab:3d:a0:a1:cd:9c:ee:79:39:7f:25:
                    78:d3:71:75:d2:55:b1:5a:a1:62:73:8c:90:b1:ea:
                    f5:44:4f:76:56:8a:15:5e:3d:64:67:90:79:1a:fd:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:44:DF:6A:AB:88:98:2A:40:0E:1F:56:60:E1:BD:60:2D:1C:A9:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/b1bf8e43-8a6b-301f-961f-e6dfae3de7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl

            X509v3 Authority Key Identifier:
                keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f74b:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:78:a8:27:03:40:aa:0b:51:53:78:2c:c0:92:fd:f6:a8:39:
         fe:7f:96:04:f8:a9:6b:cd:ee:dc:a2:c9:0c:de:75:aa:16:16:
         5c:c2:3b:7d:e1:30:07:eb:45:43:e9:ca:9a:28:7e:be:d4:62:
         4d:c8:b2:90:a9:54:64:72:92:66:ea:ff:e0:55:ce:b0:91:e6:
         32:e4:00:61:06:45:b0:a3:1b:9c:74:7f:ec:ca:2f:e3:94:de:
         13:f4:46:7b:68:28:30:0c:ea:92:c8:43:25:da:d6:2a:a1:8f:
         f9:4a:58:c3:5c:8d:ad:ac:35:5e:69:32:5f:d7:2a:44:72:08:
         3c:67:3e:13:d5:49:50:83:25:52:22:a5:6b:4f:be:08:54:f0:
         fd:13:9e:e1:c3:4a:eb:3c:50:6e:92:37:e4:80:f4:fc:75:c3:
         3f:4c:75:24:58:54:a6:37:6d:f6:14:8e:49:63:b8:34:37:ec:
         41:40:c8:51:63:34:75:ad:7a:fe:7a:71:a7:11:93:fd:86:1f:
         b8:0f:a0:27:52:8b:93:f0:9b:30:bb:4c:21:42:dc:eb:f9:36:
         a4:21:ca:cf:c2:6c:92:e1:c8:16:d1:1e:ec:c3:10:ad:1d:76:
         3b:af:9e:90:70:3c:54:07:96:ad:01:02:24:44:5f:23:d4:ac:
         34:12:5c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:45:59 2026 by rpki-client