Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa
File:                     9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa (raw, json)
Hash identifier:          j1IznHzKqNriln+QvRdWO1D/TOTIh7sMlHe0wzhQG80=
Subject key identifier:   50:96:4C:F1:6A:6F:D0:2D:1D:D9:2D:A9:38:77:69:FB:24:9D:D8:FF
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F4328584F2957BF31B558E7C308C955E0
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     33039
IP address blocks:        2602:f95c:7a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:bf:31:b5:58:e7:c3:08:c9:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=ac39e3c5-ffc5-486f-a56e-54f113cfc50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:44:ad:1d:e6:67:1c:45:51:65:d9:4e:5a:
                    05:d4:c9:ac:9e:c9:35:61:53:0c:f2:b0:4b:d1:a4:
                    10:16:dd:b7:4a:9f:2e:78:7a:7f:6c:cd:63:26:b9:
                    ba:02:76:c2:3a:4d:b7:ea:54:0c:49:11:62:f9:96:
                    48:df:c8:fb:7d:17:ce:a5:72:37:b6:92:7b:3e:eb:
                    fe:b3:f8:a3:09:30:4c:ff:01:a0:c8:4a:7d:2f:ef:
                    65:19:87:d4:89:3f:73:6c:43:bf:ad:4b:53:d7:aa:
                    41:96:bf:3d:b3:0c:5a:20:dd:0d:c7:6a:c7:1d:38:
                    75:f0:44:e8:31:ce:23:c7:4f:5a:35:35:fb:1b:cb:
                    a8:ca:2b:53:52:a7:42:7b:54:9f:fd:72:b7:c9:b3:
                    7b:f2:b6:98:11:b1:07:ce:e6:01:19:3d:65:16:e1:
                    66:0b:ef:51:94:95:87:53:09:56:35:07:3c:ef:8e:
                    eb:e2:08:6c:1b:c0:ad:84:a8:67:40:ab:83:cd:5b:
                    76:ce:40:f7:15:fe:8d:8b:4f:73:e8:d5:44:b9:b2:
                    49:79:3d:54:72:09:a5:d4:35:0e:8e:12:59:f0:3b:
                    19:b0:b3:dd:d6:6c:1b:d0:1f:50:12:66:f5:4c:75:
                    96:5f:8e:a2:10:38:82:b8:93:b4:f3:0e:c8:50:8d:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:96:4C:F1:6A:6F:D0:2D:1D:D9:2D:A9:38:77:69:FB:24:9D:D8:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:7a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ba:3e:51:52:82:58:ba:1a:64:09:fd:82:05:c9:c1:bc:d0:
         75:50:4e:55:4d:7d:60:52:ea:88:28:a1:ad:9b:52:42:1d:23:
         21:9f:38:b9:6a:af:91:1b:71:77:c1:6a:7e:0b:5a:a7:ca:23:
         9a:7d:93:01:ce:c9:1f:7a:47:a8:fa:09:3d:97:86:db:31:44:
         3f:16:6f:96:dd:b3:20:02:ab:67:bb:6b:a4:7a:4f:c6:b2:ac:
         fc:2b:76:74:b5:1b:24:56:fa:46:f9:46:5e:d1:64:b1:f1:e5:
         54:37:bd:4e:b3:79:e3:57:a9:12:ba:90:c9:83:d7:a2:97:10:
         09:c8:01:9c:ce:87:e5:10:8a:e2:db:6e:73:01:0f:92:21:45:
         fe:f0:11:e4:3b:70:ca:13:e6:55:55:32:ed:48:c6:4d:58:e3:
         bd:a3:f1:92:ee:64:15:03:90:4b:1b:08:83:f6:47:e1:e7:58:
         e7:35:4d:74:08:09:06:5f:9c:92:d8:96:14:6a:d8:61:0d:9c:
         78:31:49:aa:11:9c:b1:02:e2:b2:69:32:94:99:26:e7:33:cc:
         ee:90:56:7c:f8:5c:c0:34:6c:a1:69:7d:27:ec:db:89:48:b7:
         32:07:d0:d8:cd:bf:50:d9:fa:f6:9c:00:bd:3d:04:df:07:6a:
         50:95:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:32:52 2026 by rpki-client