Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d/1432642a-1023-380d-a254-8c15de817f82.roa
File:                     1432642a-1023-380d-a254-8c15de817f82.roa (raw, json)
Hash identifier:          7AtfDrkve/mWR34yns++cwkEK3T1bitrhzMBEjvvhDU=
Subject key identifier:   E1:D2:AC:0E:25:82:C3:A0:2A:F0:C7:D0:4B:11:36:36:26:82:D8:1B
Certificate issuer:       /CN=e3c26df9-eea4-4df7-8fce-5b1735ce9e5d
Certificate serial:       010D0C9F4328584F0AC516D8F1CB086D4FE60F80
Authority key identifier: 6F:4C:CA:CC:4E:DD:BC:F7:7D:4B:35:38:4A:BD:24:F5:C5:85:7A:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d/1432642a-1023-380d-a254-8c15de817f82.roa
Signing time:             Wed 02 Sep 2026 14:10:39 +0000
ROA not before:           Wed 02 Sep 2026 14:10:39 +0000
ROA not after:            Tue 01 Dec 2026 15:10:39 +0000
asID:                     402931
IP address blocks:        2602:f316:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:c5:16:d8:f1:cb:08:6d:4f:e6:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3c26df9-eea4-4df7-8fce-5b1735ce9e5d
        Validity
            Not Before: Sep  2 14:10:39 2026 GMT
            Not After : Dec  1 15:10:39 2026 GMT
        Subject: CN=3bd19a6b-19d9-40a3-ab55-d81a38de5a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7a:40:55:07:0a:14:b8:84:ed:c8:f0:a7:de:
                    b1:45:0d:88:18:80:7f:03:26:d6:98:bc:31:6e:5e:
                    05:72:ef:f3:2f:b0:d6:57:10:70:ab:ac:a6:39:ed:
                    2d:fe:a0:68:d4:ad:28:2f:bc:4f:c2:c5:3c:53:6d:
                    6c:87:ff:b2:c0:fb:16:15:14:df:15:af:64:e1:3a:
                    36:67:7a:26:61:63:0f:63:91:d8:ac:0b:5f:00:1e:
                    0c:c0:04:c3:d5:39:b3:d1:70:58:96:62:e7:49:28:
                    c7:75:5f:e3:aa:6d:2c:44:60:d9:3e:da:cb:b0:08:
                    a0:ff:f7:5f:15:25:57:2c:17:d8:b5:0a:98:dc:80:
                    84:28:b9:03:93:4a:bd:cf:fe:17:af:af:bf:a8:3d:
                    d2:c3:a0:50:89:cc:9f:23:71:f2:4a:c0:4e:7a:ac:
                    5d:5e:ca:8f:a9:3e:87:3f:c5:6e:64:8e:35:d2:62:
                    fa:76:a8:04:fc:e8:ee:5e:ed:dc:6a:d4:c2:b9:b4:
                    d7:c5:ab:c7:1d:32:fd:c9:b5:45:68:64:21:9e:2e:
                    dc:da:ee:a3:b2:df:ef:e9:22:9e:8b:98:9b:8a:4e:
                    f4:db:c4:c7:a8:6f:ff:be:13:be:8f:36:9f:44:97:
                    0c:8c:7f:b7:0d:a3:ea:4f:07:03:a1:ad:38:ef:4b:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:AC:0E:25:82:C3:A0:2A:F0:C7:D0:4B:11:36:36:26:82:D8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d/1432642a-1023-380d-a254-8c15de817f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:4C:CA:CC:4E:DD:BC:F7:7D:4B:35:38:4A:BD:24:F5:C5:85:7A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3c26df9-eea4-4df7-8fce-5b1735ce9e5d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f316:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c9:62:40:5f:22:c2:81:05:ac:41:67:48:3c:d8:6b:08:ea:
         82:04:d8:a4:7e:97:d6:75:94:0d:bb:39:03:a6:8c:80:5c:c5:
         38:1c:3c:a4:4a:19:d8:4b:5a:12:15:31:e6:af:1a:98:0d:99:
         37:3f:ab:60:90:28:36:31:0e:56:f1:8b:b2:35:09:56:cd:4e:
         d0:d8:76:a9:42:dd:73:d2:54:40:93:52:fb:6f:52:2d:4b:67:
         8a:76:c5:bb:ba:d5:a4:41:92:91:ac:78:11:1b:ce:5c:66:f1:
         6f:d8:19:3a:13:ea:8c:48:c9:2c:82:1d:6b:cf:1e:cb:8f:9e:
         16:38:8e:70:57:c7:f8:fc:49:72:08:4e:42:6d:4c:69:96:3f:
         90:0d:8b:a1:cc:87:cd:40:d0:e4:ba:3f:23:f2:f1:60:4d:e3:
         d7:68:ac:1a:04:75:e7:9b:cc:44:c0:b1:91:b9:00:81:bd:ef:
         2b:98:68:e7:c9:37:f0:5d:80:a8:32:df:9c:df:bb:46:d6:32:
         fe:fc:37:19:23:77:4b:85:53:95:c5:2c:39:b7:99:2d:53:9d:
         57:cb:50:94:0b:8e:f4:61:26:2d:5e:9d:d2:93:5a:a6:62:4c:
         77:aa:75:3e:5c:29:88:79:12:d2:db:ef:d6:61:4a:95:24:48:
         b3:83:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:19:48 2026 by rpki-client