Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/2f87e556-cd20-3582-a238-c3d71f78eb10.roa
File:                     2f87e556-cd20-3582-a238-c3d71f78eb10.roa (raw, json)
Hash identifier:          feaCKzF4m6ouk2+9HidVFSQyjXltp0GcYMGhumIoH4s=
Subject key identifier:   81:15:62:1D:68:3A:CB:5B:AF:1A:17:86:6B:0A:C5:24:42:C1:63:D3
Certificate issuer:       /CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
Certificate serial:       010D0C9F4328584E9BE5137768823D03D5455200
Authority key identifier: D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/2f87e556-cd20-3582-a238-c3d71f78eb10.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     398291
IP address blocks:        2602:fb10:5f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:13:77:68:82:3d:03:d5:45:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=e21ef48b-f3d5-43a4-8b65-3a9af54f8252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a1:5d:51:a8:b6:a8:90:ad:7c:2e:33:f8:e4:
                    59:ad:01:a7:99:f8:18:08:8b:40:e5:01:c4:70:0c:
                    49:75:7e:1e:d7:c4:a6:e3:28:5b:ae:94:70:13:af:
                    ca:a3:19:54:11:e7:1c:a7:c4:4e:cc:3c:24:01:d4:
                    0a:88:3d:ee:48:20:0a:2b:5a:ce:14:5e:50:3a:1c:
                    c1:99:0b:f7:55:08:10:ad:4f:81:a6:80:7c:d1:cf:
                    4f:7f:6a:c1:8c:ee:a5:9d:f7:31:b6:cb:66:df:32:
                    ab:30:56:76:ec:11:b4:d3:72:43:66:0b:23:4b:18:
                    2b:88:d6:9f:43:27:1c:eb:a7:5f:7f:6e:82:07:32:
                    76:36:fc:8d:ae:60:7e:68:96:6f:9e:65:8b:ab:97:
                    a1:5b:d6:7c:b6:80:d0:d3:81:ae:23:8f:26:85:fb:
                    82:b7:6d:88:13:92:94:28:16:31:09:e0:1a:1f:39:
                    c5:78:74:86:fe:ea:8b:61:08:02:b0:f8:0e:e5:d4:
                    41:c4:66:9d:90:70:88:48:ec:54:52:e4:fe:4a:13:
                    17:c0:a1:6f:64:e3:49:24:ee:53:e6:ff:61:a4:be:
                    3f:bd:2d:d9:d5:eb:e5:c8:71:62:17:ca:2e:d0:b0:
                    13:97:4d:e0:39:87:59:69:e0:bf:f4:ca:59:3b:74:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:15:62:1D:68:3A:CB:5B:AF:1A:17:86:6B:0A:C5:24:42:C1:63:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/2f87e556-cd20-3582-a238-c3d71f78eb10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl

            X509v3 Authority Key Identifier:
                keyid:D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb10:5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:66:67:05:af:82:16:eb:5d:6a:c2:33:14:25:02:c0:ca:a6:
         94:6c:73:0b:70:0d:64:a8:d0:21:18:39:ff:e3:65:c4:fa:47:
         ab:67:dd:7f:38:7d:dd:eb:c3:14:9c:37:33:9b:90:d4:2d:ef:
         ba:15:0e:65:8e:e5:8e:69:1d:99:a4:26:0c:40:92:4b:b6:df:
         d2:e6:87:45:04:1f:42:5e:15:bc:02:98:02:a6:80:e7:d3:d9:
         bb:76:8f:9d:ef:84:e3:10:cc:f8:65:ba:50:30:6c:b1:3c:ef:
         7c:aa:ae:bf:03:9d:71:47:0d:cc:db:17:72:6f:aa:cc:43:36:
         a6:99:ef:6c:6c:a4:9c:2a:64:59:51:ce:d0:d7:14:78:fb:b1:
         16:68:f7:61:1b:ad:ae:0c:84:e0:7f:86:94:26:50:36:85:65:
         d3:ec:b7:20:13:fa:c6:2a:fe:c7:fb:4c:b8:82:df:4d:b2:ea:
         05:a5:4c:a1:d1:a8:b2:bb:1a:e6:4b:89:f2:f4:db:b8:7f:f5:
         99:34:11:f6:e2:6b:c6:08:fe:17:b1:5d:57:0c:ad:59:e3:19:
         e7:f7:a2:94:d3:4b:c6:de:dc:07:63:53:c1:13:2d:96:30:ef:
         1f:65:96:f8:13:36:23:fd:a1:c1:a3:d0:1b:58:c5:87:02:54:
         9e:05:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:53:47 2026 by rpki-client