Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa
File:                     43b737f8-5d33-38f5-9659-04f92c5f69ec.roa (raw, json)
Hash identifier:          hIbRMX9FtR+e8GysLrBH07FimYUyjCHkSaPc3Bc/85M=
Subject key identifier:   9A:98:D1:C9:D3:44:EC:72:46:4D:70:08:49:3E:C3:AE:55:E7:3C:C8
Certificate issuer:       /CN=a076692a-65ec-4598-b231-91f6d6e63c63
Certificate serial:       010D0C9F4328584F753C3A7A1F197FDF502CC900
Authority key identifier: D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa
Signing time:             Sat 10 Oct 2026 17:26:23 +0000
ROA not before:           Sat 10 Oct 2026 17:26:23 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     401418
IP address blocks:        2602:f7d0::/48 maxlen: 48
                          2602:f7d0:1::/48 maxlen: 48
                          2602:f7d0:2::/48 maxlen: 48
                          2602:f7d0:3::/48 maxlen: 48
                          2602:f7d0:4::/48 maxlen: 48
                          2602:f7d0:5::/48 maxlen: 48
                          2602:f7d0:6::/48 maxlen: 48
                          2602:f7d0:7::/48 maxlen: 48
                          2602:f7d0:8::/48 maxlen: 48
                          2602:f7d0:9::/48 maxlen: 48
                          2602:f7d0:a::/48 maxlen: 48
                          2602:f7d0:b::/48 maxlen: 48
                          2602:f7d0:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:75:3c:3a:7a:1f:19:7f:df:50:2c:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a076692a-65ec-4598-b231-91f6d6e63c63
        Validity
            Not Before: Oct 10 17:26:23 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=c3dbdc8d-5411-4a7b-b64d-23fa314952d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:ff:34:92:1f:88:02:2b:38:4f:3e:ab:d2:
                    a6:5e:c4:72:3d:0d:7b:c6:0b:8e:26:b2:3e:c3:5f:
                    02:38:41:26:b1:9b:66:53:78:d6:90:9e:7f:d6:86:
                    7d:b2:2e:f7:b6:4e:3a:9f:6b:4a:07:7e:51:2d:ec:
                    29:b3:2d:29:f3:3e:e5:bd:25:53:ad:37:50:48:00:
                    45:c7:13:c8:ed:9a:24:d0:00:29:b0:e2:df:86:d6:
                    09:5e:03:34:0e:4c:fa:ff:15:a2:d3:2d:d8:fc:72:
                    a8:71:5b:30:a0:46:de:19:7f:a0:7e:29:aa:87:3c:
                    c6:21:8f:81:a7:de:4f:19:9a:7c:69:c0:46:48:2f:
                    07:2a:5d:f2:6c:6c:b1:2e:97:fe:ae:04:34:a3:8a:
                    f7:87:44:96:34:72:f5:19:06:8e:19:71:d6:22:6a:
                    ec:e0:64:b3:d9:d5:a6:16:dc:95:bd:ea:57:88:dc:
                    75:83:e6:19:99:e9:6a:61:f6:83:23:ed:71:1e:55:
                    e1:6e:71:4d:7f:29:1e:cb:07:5d:c2:0f:72:8f:d6:
                    9d:72:c8:58:2e:21:39:cc:7a:41:a4:12:f7:ef:e6:
                    4d:21:d6:e5:cd:2f:6d:93:a4:72:03:18:84:82:42:
                    31:db:5d:dc:95:78:42:61:fb:fd:e9:23:c2:b8:15:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:98:D1:C9:D3:44:EC:72:46:4D:70:08:49:3E:C3:AE:55:E7:3C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl

            X509v3 Authority Key Identifier:
                keyid:D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d0::-2602:f7d0:c:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b6:72:e4:d0:a1:b9:a2:6b:cd:3a:b3:20:ba:68:ba:44:92:
         30:ac:3b:a9:38:26:df:b6:0d:e6:bd:db:9e:5c:86:ec:0f:27:
         79:85:43:10:41:6d:b9:b1:01:ee:dc:de:83:66:17:ae:67:4b:
         d5:45:ab:92:a5:a1:23:3d:69:37:7d:1a:bd:0b:da:ae:71:cf:
         96:b2:95:63:a9:29:50:1c:6f:de:67:43:3b:9b:fe:07:4d:e3:
         22:3c:6d:64:d4:96:e6:26:e3:73:2f:86:78:32:dd:91:52:69:
         84:e6:21:ef:71:8b:c0:10:48:89:1a:aa:55:d2:ba:21:a5:1a:
         92:3f:87:d9:9f:be:88:f5:41:99:0a:95:bd:4a:f4:77:4f:d0:
         2c:cf:22:f1:92:ee:8f:c1:ff:9c:5e:82:2b:18:62:8e:56:27:
         a8:76:66:ab:0f:9c:72:4e:45:3c:3f:5d:3a:55:70:2e:fa:94:
         4d:0a:fa:1d:db:2b:ac:ad:87:4a:6b:33:b9:03:ce:67:fa:b0:
         ec:fe:89:06:e2:bc:ba:2c:27:3c:60:db:9d:47:28:56:e4:f1:
         82:83:2b:19:37:ef:ec:0b:cd:87:bd:79:43:75:88:66:9f:6d:
         93:42:e4:31:cd:73:78:48:b6:30:30:e9:17:09:c8:03:25:fc:
         aa:6a:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:14:21 2026 by rpki-client