Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22df5e56-a0e5-4f38-9a02-46f1289ad43f/bc19dfbc-b460-312d-a534-ba9993a63bd1.roa
File:                     bc19dfbc-b460-312d-a534-ba9993a63bd1.roa (raw, json)
Hash identifier:          ZKj54kr9YtP+WFxOGGwFfFtaWTNx4eUhixuA4nQrP6U=
Subject key identifier:   F3:43:9D:CC:67:89:B9:DD:83:AF:3E:6F:A5:F8:3C:8F:D9:01:A6:63
Certificate issuer:       /CN=22df5e56-a0e5-4f38-9a02-46f1289ad43f
Certificate serial:       010D0C9F4328584F2D4146C6828DBDE520C5C46C
Authority key identifier: F7:06:E3:37:C2:8A:4C:29:AB:54:B3:52:4E:0B:B1:62:2D:45:83:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22df5e56-a0e5-4f38-9a02-46f1289ad43f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22df5e56-a0e5-4f38-9a02-46f1289ad43f/bc19dfbc-b460-312d-a534-ba9993a63bd1.roa
Signing time:             Mon 14 Sep 2026 22:38:21 +0000
ROA not before:           Mon 14 Sep 2026 22:38:21 +0000
ROA not after:            Sun 13 Dec 2026 23:38:21 +0000
asID:                     402912
IP address blocks:        2602:f31e::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22df5e56-a0e5-4f38-9a02-46f1289ad43f/22df5e56-a0e5-4f38-9a02-46f1289ad43f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22df5e56-a0e5-4f38-9a02-46f1289ad43f/22df5e56-a0e5-4f38-9a02-46f1289ad43f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22df5e56-a0e5-4f38-9a02-46f1289ad43f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:41:46:c6:82:8d:bd:e5:20:c5:c4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22df5e56-a0e5-4f38-9a02-46f1289ad43f
        Validity
            Not Before: Sep 14 22:38:21 2026 GMT
            Not After : Dec 13 23:38:21 2026 GMT
        Subject: CN=fea5ab82-a79c-4d8f-8000-6c0c734178df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:42:c0:38:84:bb:5a:1b:f5:70:f7:dc:39:6c:
                    47:47:56:64:d5:54:89:df:c5:95:0a:14:09:9f:e1:
                    d3:9f:d9:4b:61:6e:ba:cb:4a:e1:90:aa:e5:b6:42:
                    62:fb:aa:9e:16:37:be:42:44:c0:79:1f:65:dd:69:
                    3b:c1:8f:f2:28:3a:c6:09:c7:74:40:ae:93:19:0d:
                    c3:3a:dd:27:15:ba:b8:68:20:b7:5e:f1:12:24:06:
                    26:ee:8b:04:b3:ec:65:a8:41:62:99:01:87:50:71:
                    8a:a2:0a:e1:c3:43:60:e4:f9:f2:c7:f9:ca:8b:67:
                    38:cd:02:eb:bf:70:51:7f:a6:cd:5d:a5:74:e0:c8:
                    d5:d8:72:ba:3e:e6:7b:21:82:e2:98:58:6f:df:b5:
                    a8:d4:d2:af:dc:cd:3d:e1:39:08:e4:d7:28:f3:11:
                    d0:4e:6c:bb:f2:06:c0:b1:ec:56:87:ef:a2:5e:f4:
                    73:51:0d:cd:d2:9a:d9:86:51:23:67:6a:2a:88:bd:
                    3f:df:2d:e6:c2:ea:66:b1:6e:3d:26:f9:46:1e:1c:
                    92:36:ce:8c:26:1e:5a:bb:cf:11:60:27:00:ae:09:
                    82:a4:4c:7c:bf:fe:23:62:ac:86:42:77:11:5d:33:
                    93:d5:32:26:6d:c1:6b:73:cf:80:3d:a5:47:79:87:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:43:9D:CC:67:89:B9:DD:83:AF:3E:6F:A5:F8:3C:8F:D9:01:A6:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22df5e56-a0e5-4f38-9a02-46f1289ad43f/bc19dfbc-b460-312d-a534-ba9993a63bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22df5e56-a0e5-4f38-9a02-46f1289ad43f/22df5e56-a0e5-4f38-9a02-46f1289ad43f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:06:E3:37:C2:8A:4C:29:AB:54:B3:52:4E:0B:B1:62:2D:45:83:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22df5e56-a0e5-4f38-9a02-46f1289ad43f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f31e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:23:0c:46:91:47:42:34:eb:02:db:03:b7:a7:7d:fd:a7:d0:
         68:de:89:69:fd:71:94:92:16:6b:ac:90:40:8c:46:54:3d:a4:
         87:db:c5:d0:ab:29:22:fe:ca:e1:c6:51:3d:21:0e:f9:54:05:
         2d:5e:a1:e6:f0:34:f6:3d:1e:bb:f9:6d:e2:39:4a:e2:99:0a:
         0c:41:4f:80:cf:29:f8:e9:b1:94:61:9c:b1:4e:8a:a2:10:99:
         fc:49:a2:ec:1f:00:e9:b2:83:5d:02:cc:dd:8c:5e:f4:1e:95:
         98:ff:55:c2:fd:34:e0:24:18:78:17:55:68:ee:2b:b6:c4:92:
         ad:59:77:7a:fb:27:30:7d:c7:6d:1b:ea:b0:84:f2:34:ab:ad:
         21:a9:80:50:dc:cb:da:07:ac:8b:64:d2:c7:eb:c3:fc:9b:20:
         ae:c6:0b:6c:4d:81:fa:08:ce:de:ee:aa:d3:ad:6f:4f:19:cf:
         4e:dd:c8:62:65:95:2f:ad:58:58:5c:43:aa:45:ef:2c:eb:c5:
         d9:dc:6a:41:62:77:e4:f8:94:bf:4b:d9:6d:d8:ba:6c:59:22:
         e9:50:1e:9b:bf:66:b6:ba:7f:d8:b4:d2:ec:15:bd:d0:5a:7c:
         af:55:58:22:77:55:26:d0:b8:f3:dc:0d:fe:02:28:0b:0b:59:
         22:53:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:13:45 2026 by rpki-client