Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa
File:                     deb4a797-c84c-366e-afb9-971de9e46797.roa (raw, json)
Hash identifier:          m8Y1TB63+shA3dv+h07jbFSdXOSWtWPU4q5O4Qj/f/8=
Subject key identifier:   04:16:50:BA:63:33:FB:69:1B:9D:70:19:05:03:17:E1:F7:9D:F8:72
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584E1E44507884F9A6EACF36A380
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     38047
IP address blocks:        2602:f83b:2::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:50:78:84:f9:a6:ea:cf:36:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=97d1ec9d-d323-4d5f-bfa9-487703f987dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:dc:42:77:ba:bb:a3:ba:c6:70:06:08:e2:
                    6e:f7:b7:13:e6:fd:67:1d:08:60:06:38:35:73:b1:
                    ce:bf:93:d2:41:e1:cb:ba:7c:c2:c9:f2:0f:6c:1f:
                    0b:78:1f:bf:98:c2:69:4d:21:70:71:dd:a6:54:22:
                    be:03:53:b5:62:74:40:66:98:99:54:45:f3:b3:00:
                    99:c9:6b:f0:47:c1:88:e5:69:93:49:98:2a:c7:7e:
                    a2:41:27:dc:6b:ac:bf:0f:9d:3c:f3:8c:27:61:5a:
                    b4:d6:24:8e:38:4f:b6:65:d8:e1:4f:fc:27:48:4e:
                    a6:0e:e2:7a:73:aa:79:8e:7f:02:37:d7:49:1c:8e:
                    cf:9f:c9:dd:ec:5a:a4:15:9e:ef:55:02:73:ea:e5:
                    16:73:b6:74:db:76:ce:de:3e:af:0a:db:dc:86:1b:
                    88:4e:21:fe:fb:7c:36:ba:77:ca:c7:1a:60:bd:67:
                    22:09:2f:3a:5e:af:a3:56:9f:6a:f1:e2:80:d2:0f:
                    17:86:64:d5:ce:4f:5e:6e:e8:d0:fb:a5:a4:bf:34:
                    8f:2f:91:11:92:7f:e6:46:4d:be:bb:68:70:fc:89:
                    39:b0:70:ed:c6:58:2d:f4:3d:94:f2:88:86:95:85:
                    f4:b4:e5:c6:dd:0d:d8:02:4c:9a:4a:08:ca:08:24:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:16:50:BA:63:33:FB:69:1B:9D:70:19:05:03:17:E1:F7:9D:F8:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:bc:20:9a:f0:f4:51:20:97:9c:b6:f0:4b:b1:58:45:37:
         1f:e4:a1:02:13:66:a2:8e:6f:d2:71:24:f8:5d:82:54:0e:b7:
         df:2b:82:53:6f:db:17:7c:02:b1:96:e9:57:15:09:7a:23:30:
         69:bc:38:a3:bc:f5:7f:3d:d0:61:5a:12:76:65:1b:e0:be:7b:
         23:7b:86:51:5b:43:92:e2:9d:f1:9c:85:26:7b:69:ac:82:28:
         79:e8:76:69:8c:d1:59:a1:b9:d1:a4:0f:5b:6e:66:de:ca:32:
         f9:4d:23:f3:0b:35:f7:8f:5d:4c:2c:a1:59:4b:bb:a2:7d:a4:
         07:90:df:68:5b:b0:9a:51:a9:6e:67:40:fa:7b:5f:72:d2:87:
         08:c6:1e:ef:ac:ea:ed:ab:c8:9d:a4:ae:6e:40:79:aa:7a:70:
         5e:4e:ef:34:3a:f4:31:67:22:37:ab:c0:75:70:c2:47:07:ff:
         27:28:18:5b:2c:a0:ca:e8:96:80:6d:54:46:4f:54:f8:22:68:
         f1:e5:03:71:d3:5a:33:5f:fd:27:1a:36:d0:cb:d7:3c:7f:3b:
         2c:fd:75:3a:6f:f5:a6:a0:a1:23:46:47:a6:93:70:a9:46:b1:
         b5:dd:86:e1:78:b3:95:08:2a:0b:14:1e:ad:70:6f:22:de:b4:
         ac:af:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:06:15 2026 by rpki-client