Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/d0cc806e-4c8c-395b-8f5c-40828574214f.roa
File:                     d0cc806e-4c8c-395b-8f5c-40828574214f.roa (raw, json)
Hash identifier:          gNaTi4QFfPV4JeLP7wJ8k2dIiegF1vcTugLGr0LeFXM=
Subject key identifier:   C3:3B:8D:5B:1A:DA:34:A4:DF:A1:7C:9C:C4:DF:FA:9F:BD:24:EC:32
Certificate issuer:       /CN=03cb17c9-7597-4c95-a127-009654391416
Certificate serial:       010D0C9F4328584F498A6D70371C57362BA72B00
Authority key identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/d0cc806e-4c8c-395b-8f5c-40828574214f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40776
IP address blocks:        2602:f8ab:a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:6d:70:37:1c:57:36:2b:a7:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cb17c9-7597-4c95-a127-009654391416
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8649cafe-cf27-420f-b0e3-04b3d760048a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:19:6f:ff:57:02:0f:1e:ad:ba:13:f4:e6:f5:
                    10:b7:ec:d3:49:14:53:9d:a7:b6:1a:79:98:d9:53:
                    5f:98:00:36:b3:40:80:0b:6d:65:1b:6b:84:43:40:
                    ba:11:44:9c:bb:a4:47:41:1d:14:b5:22:18:9e:36:
                    ac:44:44:b7:07:c2:20:e2:32:a9:2c:40:3d:61:13:
                    46:11:9c:2a:ea:be:c3:cb:d8:88:e9:63:2e:b7:10:
                    a5:46:30:1d:54:48:e2:c9:fb:e7:52:ad:a4:fc:3c:
                    e5:9a:69:aa:79:cc:27:03:6b:46:1b:15:49:f2:e8:
                    e4:42:3c:ec:e9:5d:5c:b6:27:24:f0:5f:c7:30:04:
                    31:a9:28:c4:a6:3c:8a:a7:db:ed:5f:13:ef:49:59:
                    5f:4c:ca:01:f7:b0:87:ca:2f:1a:d4:cf:48:f1:e2:
                    3b:c6:97:40:38:43:97:a1:50:f0:b3:09:30:33:e7:
                    75:c9:25:67:68:07:a0:97:16:ab:e0:8f:6a:b0:49:
                    aa:41:3c:67:18:30:bd:f3:07:17:e0:88:f2:e8:af:
                    d0:ad:de:6d:33:f8:a0:f6:6f:be:bd:46:21:a6:01:
                    95:57:55:f0:d6:43:e1:8c:0c:c2:1c:ac:ff:e8:d3:
                    42:6b:ce:30:3b:ea:42:57:40:28:f2:02:cd:3d:06:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3B:8D:5B:1A:DA:34:A4:DF:A1:7C:9C:C4:DF:FA:9F:BD:24:EC:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/d0cc806e-4c8c-395b-8f5c-40828574214f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl

            X509v3 Authority Key Identifier:
                keyid:2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ab:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:41:0c:0f:5d:f9:af:d6:61:77:fc:29:7e:df:a2:92:2d:a0:
         0d:f4:85:28:44:9f:b0:ed:dc:af:0b:aa:78:8f:d4:ea:5a:1a:
         6a:54:d1:23:84:2a:e0:ac:b7:3f:77:7c:45:bd:42:ee:4e:1f:
         33:5e:fd:23:81:40:d3:9c:be:e1:bf:02:77:b3:c3:de:b9:f7:
         2a:48:9e:2a:ee:97:f8:2b:54:3e:6c:1e:5a:a4:13:83:db:be:
         e0:3f:75:17:21:f9:0c:5c:be:5e:bd:08:b6:11:c6:58:a2:15:
         d5:c7:9d:1c:58:00:47:63:90:f1:10:95:f7:ac:ba:7e:6c:db:
         16:e7:7b:70:89:c9:88:25:92:55:68:9f:ae:f3:7a:3a:62:96:
         68:f8:a4:44:af:02:42:fa:2a:f6:90:b1:98:50:cc:db:65:41:
         20:3a:79:62:2a:5b:18:dc:41:4b:f6:12:ef:62:95:e3:5c:ff:
         2c:87:06:96:7d:e5:52:b6:05:46:b0:1f:b6:0d:53:dc:1e:81:
         17:98:32:72:6f:e1:56:a7:00:d1:31:71:85:a7:00:82:60:9e:
         80:20:2e:05:38:de:1e:9b:6c:f5:80:d0:2f:ce:e1:97:4a:02:
         76:2d:db:7a:22:19:28:0d:74:16:5b:62:dd:1f:7e:0f:42:e0:
         43:9d:e9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:28:45 2026 by rpki-client