Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/965eb1f2-d794-321f-a073-0ff3a63ce4fb.roa
File:                     965eb1f2-d794-321f-a073-0ff3a63ce4fb.roa (raw, json)
Hash identifier:          UrFJjH7Yqq9aBXz6QCMO0Gcb873pf0jKjHbtwwKSZuc=
Subject key identifier:   3B:32:8F:93:23:D9:BC:9A:BC:A7:F7:DA:97:81:E3:9A:0F:29:A9:C1
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957B7F2A1F0AAC9ADFEE340
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/965eb1f2-d794-321f-a073-0ff3a63ce4fb.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     13778
IP address blocks:        2602:284::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b7:f2:a1:f0:aa:c9:ad:fe:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=6c546734-0c3f-40c8-9cb9-57d1a2442c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:4d:f7:07:e5:cb:2f:ae:a1:48:4c:7c:4e:
                    e4:e0:12:cd:54:38:8f:53:b1:d4:6f:7f:9f:56:29:
                    6a:a7:66:08:89:64:c4:2d:65:a7:0c:6c:19:21:eb:
                    44:39:6f:ed:c8:d8:d9:0c:8f:c2:b9:85:ba:0f:ab:
                    20:a5:ba:3f:75:a2:8c:d0:a8:21:5f:db:e5:44:ab:
                    b7:3f:70:6e:ce:00:15:14:36:76:e0:9d:59:d6:33:
                    23:42:19:ee:47:11:a8:c5:f2:1c:0c:16:4b:ec:68:
                    e0:3b:03:4a:a4:cc:d9:56:d2:86:a8:eb:5a:79:1c:
                    03:aa:d3:7d:37:34:a5:90:f7:01:a0:ea:03:dd:94:
                    5c:2f:4c:eb:b0:fb:af:77:d1:93:77:7f:fe:5e:c3:
                    58:15:1f:d0:cf:36:5c:f9:e7:c8:30:5f:c8:7e:8d:
                    a8:46:95:64:b1:2b:55:f7:1e:f6:57:0b:80:24:37:
                    19:6e:a9:90:11:0c:22:4f:00:ba:9f:3d:de:93:06:
                    48:4b:07:71:6f:16:c7:c5:92:bb:47:2f:75:da:a3:
                    f0:7d:c8:8c:b6:99:a2:28:fd:00:a3:5d:60:31:f8:
                    09:ce:05:49:3e:16:db:7b:09:60:6a:6b:b4:23:ac:
                    d4:f5:3a:d4:61:ce:a0:77:e7:1c:30:60:80:c2:07:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:32:8F:93:23:D9:BC:9A:BC:A7:F7:DA:97:81:E3:9A:0F:29:A9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/965eb1f2-d794-321f-a073-0ff3a63ce4fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:284::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1e:6a:a1:b9:34:d4:30:f0:ca:7e:9b:2b:ea:ed:68:7f:4e:
         41:0c:31:66:a1:c1:68:1c:e0:9b:7d:50:99:ea:d2:c8:77:02:
         53:b5:24:b5:6d:b5:8b:8a:1c:62:75:64:71:61:e5:87:9a:35:
         ca:7a:d2:84:7f:b7:9a:f0:59:00:1c:98:b5:8a:02:24:b7:f8:
         09:ff:e2:e4:9d:dd:63:c3:dc:01:d5:77:43:83:b0:77:da:b3:
         9b:2f:18:8a:9a:b5:29:cc:11:a7:2b:b8:ee:f3:5e:5d:21:df:
         c0:63:be:b7:6d:de:9e:6d:c5:5e:a4:0b:e7:ae:0f:88:0a:96:
         97:92:ef:f1:75:50:c4:ed:dd:cd:b7:88:3d:82:f7:7e:5b:be:
         88:7d:8f:c8:b1:86:90:4e:2d:92:74:14:13:79:dd:29:23:85:
         67:37:98:7e:92:a2:c6:f6:8b:69:84:94:c5:ea:65:59:4f:7e:
         cb:e6:dc:75:31:13:43:c6:78:1f:0e:23:0a:b2:33:0e:34:40:
         59:ce:3c:c6:da:fe:e1:68:e0:28:b3:aa:3e:a0:95:16:1a:81:
         08:2f:99:0e:2f:66:43:e7:6d:51:fc:ae:3d:7a:fa:5c:04:fe:
         22:c3:61:dd:80:80:92:34:a5:ff:82:06:f0:8d:95:39:34:86:
         e7:8f:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:41:16 2026 by rpki-client