Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/07104bca-eab3-3c4e-a816-1a1352a0fd5e.roa
File:                     07104bca-eab3-3c4e-a816-1a1352a0fd5e.roa (raw, json)
Hash identifier:          v+RsUpQ+95cWzm2G7nUowZ4v6fAeLuG5YFGSmTE1leY=
Subject key identifier:   7E:F2:07:D9:75:CA:00:4D:E7:D8:ED:F9:38:FB:26:76:9C:CA:86:70
Certificate issuer:       /CN=a3f17d39-fe12-49b7-8dc5-45109c63ea9d
Certificate serial:       010D0C9F4328584F2ABD2076BF2774C947C62900
Authority key identifier: 8F:41:CC:64:02:BE:D5:8F:AC:44:7A:3B:61:D5:2D:90:6C:73:1C:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/07104bca-eab3-3c4e-a816-1a1352a0fd5e.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     6939
IP address blocks:        2602:fa2d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:20:76:bf:27:74:c9:47:c6:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3f17d39-fe12-49b7-8dc5-45109c63ea9d
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=5a501038-bfe0-45ad-a782-9b8b5d07b850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8b:7e:4e:a9:38:d0:79:e7:25:50:fe:60:be:
                    ed:90:b4:ec:6a:9f:a1:fe:73:f2:27:ff:0e:70:9e:
                    3a:a5:b6:db:b5:41:c0:53:b9:32:06:92:38:39:1f:
                    26:e4:40:27:52:8d:06:6d:31:6c:6b:6e:7b:63:4f:
                    03:19:ba:d0:ef:06:77:c6:ff:49:e1:24:db:fc:ea:
                    b2:18:d5:07:a0:e6:07:5a:8a:f8:47:67:32:b9:bb:
                    41:fc:a7:16:63:bd:45:4b:79:8d:94:66:60:ef:72:
                    ae:ad:86:87:e1:33:fe:6d:99:ec:c3:a9:43:65:4f:
                    2e:cb:64:38:0f:c9:7d:df:40:55:cc:7a:7b:de:df:
                    3f:3f:70:e2:1d:f7:54:20:2c:87:97:87:ab:fa:03:
                    01:c2:1d:32:38:8f:78:6e:9b:b7:99:7c:cc:cb:b1:
                    79:3e:36:3c:72:4d:e7:7a:52:bc:a5:41:e2:79:47:
                    dc:e8:9e:06:29:3f:38:12:cb:3e:5c:a1:cf:53:0d:
                    0f:a9:d6:91:ca:4d:66:65:00:f1:55:5a:36:28:a8:
                    00:43:b9:b4:24:b4:69:8e:de:81:82:16:f0:17:fc:
                    1b:e1:79:d9:0d:17:72:80:d2:49:d6:68:13:78:dc:
                    dc:df:3a:4e:54:a2:7f:0a:34:b4:23:35:15:01:4f:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:07:D9:75:CA:00:4D:E7:D8:ED:F9:38:FB:26:76:9C:CA:86:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/07104bca-eab3-3c4e-a816-1a1352a0fd5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:41:CC:64:02:BE:D5:8F:AC:44:7A:3B:61:D5:2D:90:6C:73:1C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2c:a5:c9:97:59:0f:fa:43:23:ec:fa:2a:4c:55:5e:fc:ab:
         f6:3d:df:4f:c7:2b:3b:90:36:27:43:6f:b5:fb:2d:cb:a2:a8:
         37:4b:d0:a9:b2:0a:21:96:60:60:bb:16:41:5f:f2:96:82:97:
         a9:65:3f:6f:22:8f:b5:25:d7:fa:96:3e:a9:0c:3e:36:1c:33:
         12:69:8c:d7:f8:31:f8:d1:e8:78:af:4b:64:8d:2a:f9:46:1c:
         62:9e:05:80:df:cd:f9:b7:96:d9:30:1d:ca:43:b1:cc:44:7c:
         e5:10:a2:b6:37:b9:a3:a2:7b:db:a9:87:f6:7e:e4:02:10:6e:
         c6:63:32:68:64:22:0c:e8:2d:ef:ad:69:66:a6:6f:2f:c5:7c:
         72:c4:69:7f:1a:dd:69:fe:33:d5:7d:bb:d1:4c:5d:ff:67:64:
         6a:3f:81:b9:0e:c7:a2:7b:8c:ae:3d:12:5c:0f:c7:c0:2d:f6:
         c7:84:33:a0:86:1f:f5:68:a4:d4:cd:4d:8b:cc:f3:01:73:93:
         05:9c:a6:2e:d5:ae:3a:9f:ac:e6:b8:61:03:97:7b:7c:d1:6d:
         4b:73:a5:d4:ae:11:7d:35:cc:84:43:0f:82:72:f4:62:b3:69:
         d9:fb:a5:bf:ea:01:63:40:b3:ce:8f:0b:15:51:42:62:fc:16:
         da:cf:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:11:02 2026 by rpki-client