Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa
File:                     ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa (raw, json)
Hash identifier:          VVFSOVvXKorLLQiJgRVUnZSrLKbztpdTzDTx4qU8xDQ=
Subject key identifier:   1A:D8:D5:70:B0:65:8F:B9:B7:51:0F:AB:A1:07:D1:62:B4:C5:85:15
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F4328584F093CEA0545D624860B8DA100
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     215207
IP address blocks:        2602:fbcf:d0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ea:05:45:d6:24:86:0b:8d:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=867074d5-edd8-4d75-992d-9b1cf95d7141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:55:41:b0:e7:41:e4:4c:5a:f8:a5:0c:2d:
                    c1:07:ba:d9:ad:63:ec:2a:1a:26:5f:d3:41:15:ff:
                    9d:06:c0:80:a9:2a:88:a7:fa:c4:e4:1a:31:cb:b6:
                    cb:eb:06:20:46:51:d1:74:64:aa:44:0f:d5:24:75:
                    18:10:ab:44:27:bf:7f:47:21:d5:12:3d:da:e3:9e:
                    40:b2:0f:52:93:69:bb:7d:6c:62:d9:a6:15:fa:a8:
                    28:9e:7e:cb:11:a7:06:d5:93:ae:12:1f:08:ff:7f:
                    22:c2:70:9e:8f:66:24:dc:6e:db:83:79:ae:0a:f8:
                    8d:72:9c:e7:f2:3e:03:02:65:3a:55:69:79:f9:78:
                    cf:02:84:7e:39:25:e0:45:fe:24:6d:19:52:b6:be:
                    65:22:64:4e:cb:8d:82:24:48:43:4e:bb:72:ee:0b:
                    7b:b0:f5:8a:d7:33:30:b7:ff:57:57:54:8f:5f:0d:
                    f1:b0:e7:6f:56:13:6e:d6:0a:94:84:df:f1:27:c9:
                    95:ab:c1:9e:6e:0a:8f:d0:16:15:19:a3:e6:f5:81:
                    25:04:69:5a:48:e3:d5:10:12:08:35:68:72:71:35:
                    fa:6a:ec:63:7d:99:4e:5a:f8:c2:e0:18:1b:fd:19:
                    23:12:67:92:d8:18:6d:d3:86:dc:b0:4b:74:b5:31:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D8:D5:70:B0:65:8F:B9:B7:51:0F:AB:A1:07:D1:62:B4:C5:85:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf:d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ad:3a:8e:64:02:14:33:63:24:f6:6f:24:c9:25:44:da:80:
         00:81:99:5b:fe:ff:7f:97:be:d5:fd:7a:ea:af:64:1d:7a:ff:
         53:5f:e6:27:a1:df:c5:f5:0e:72:19:de:f5:f2:a3:de:1e:24:
         18:03:61:40:15:a9:3a:c2:ef:4d:0f:fc:d3:88:49:a5:42:a1:
         eb:16:56:98:63:83:ae:7f:9f:00:a3:76:6b:1d:49:c1:ab:05:
         e9:cd:f3:29:04:c7:c4:66:f7:8e:5c:50:da:34:e6:d5:ca:05:
         e2:17:08:ab:25:b7:8a:4b:df:aa:e6:90:d7:9a:6a:fd:42:c6:
         06:a7:0c:3e:15:6a:82:d5:83:ed:3d:5c:95:5f:99:1b:70:69:
         48:f9:8c:5e:89:b5:5a:11:f0:80:1b:ee:d0:69:c3:87:5c:31:
         52:15:b4:c9:f4:16:4f:2b:2e:fb:ec:ea:19:42:26:aa:6b:b7:
         b1:9f:d5:fa:48:73:eb:d1:9d:af:2e:f2:f9:37:ee:e1:db:0e:
         48:ed:59:ac:78:13:e1:2e:db:50:86:d3:19:d6:e0:4a:85:03:
         b1:28:84:2f:21:a4:e2:85:7e:e2:a1:b9:cb:39:8f:ff:eb:4a:
         76:1a:b9:d1:24:9d:4c:39:d2:53:72:5c:2b:5f:e5:60:7b:94:
         1c:95:0b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:51:07 2026 by rpki-client