Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa
File:                     c057190d-ef07-3947-b98a-abc03a5cd3ac.roa (raw, json)
Hash identifier:          zD2IMEKFmDuELM4lMKoox4ieC24ee8Pm8iucVMQWe5Y=
Subject key identifier:   89:46:2D:FB:22:08:EB:66:26:5F:DB:00:9E:4E:0D:C8:71:83:96:2E
Certificate issuer:       /CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
Certificate serial:       010D0C9F4328584F6C583AE6D60DF6369E03A940
Authority key identifier: 41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     400647
IP address blocks:        2602:f8ce::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:3a:e6:d6:0d:f6:36:9e:03:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=d0e582f7-19e4-49bb-921d-f825bd085cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b0:a6:76:4e:3b:2d:7e:05:9a:83:79:63:44:
                    47:d9:de:ff:05:56:85:60:63:00:cc:a3:ae:65:35:
                    6b:ea:6c:8a:c7:6e:68:45:ae:d6:a6:26:19:32:3b:
                    7d:b3:77:74:a9:fe:77:aa:15:16:e7:66:5b:e4:2f:
                    b2:9b:a9:9e:27:cd:9e:d9:df:6c:ef:56:d7:95:a4:
                    74:86:d8:d9:02:9e:cb:f5:2d:f2:1f:fa:57:0b:c7:
                    11:1d:64:75:d5:5f:dc:45:1d:5a:8a:f0:ec:96:17:
                    94:fc:d6:b1:aa:7c:70:f0:fe:08:0c:92:46:d7:50:
                    64:0a:e8:a0:b1:92:ec:b3:4e:94:64:a8:4a:df:34:
                    cf:47:73:1e:43:50:13:a6:d2:e3:0b:f9:f4:51:47:
                    bc:ff:9f:71:63:e0:07:f2:a2:83:29:39:37:03:31:
                    8e:39:4c:2a:4c:c9:b1:e8:28:45:bf:da:b9:54:09:
                    d2:54:52:af:4e:24:69:12:ca:2b:b5:af:ef:1a:b5:
                    e4:d0:ce:a4:ce:29:fa:22:46:27:4c:86:71:2a:3b:
                    c4:e0:e1:cc:0f:b8:56:eb:0a:00:4e:2b:06:33:61:
                    cb:14:6e:7b:0e:21:2e:c1:46:c1:15:9b:2e:aa:d0:
                    25:c7:24:bc:85:6a:96:5d:e5:ec:44:89:cb:a4:bb:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:46:2D:FB:22:08:EB:66:26:5F:DB:00:9E:4E:0D:C8:71:83:96:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl

            X509v3 Authority Key Identifier:
                keyid:41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ce::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:24:c2:38:c3:15:34:57:e1:f2:dd:19:8e:ce:7e:ce:07:af:
         53:90:b3:c1:02:87:4b:65:9c:9c:69:b7:28:fa:02:f5:33:35:
         6b:ce:38:8f:2d:77:af:a8:35:ac:21:18:4c:ec:42:cb:92:c2:
         43:fb:f2:56:74:b6:11:ad:1d:fd:4d:6d:88:36:e7:d0:0f:87:
         a2:3e:9c:0c:15:ad:c3:3a:ec:e1:23:6b:cc:ff:d8:26:3c:fa:
         99:56:7c:df:9c:e7:0b:ba:ad:f8:31:82:d0:bd:64:25:87:01:
         15:06:fb:b0:2e:02:07:60:1d:d8:f3:0a:65:7e:f1:cf:6a:97:
         ca:44:fc:3b:42:89:53:1d:f4:ac:f6:63:f2:ef:13:5f:58:64:
         fb:ba:30:88:a5:20:ca:92:59:67:a4:bd:8a:4f:3c:85:ce:82:
         cc:6b:f5:6e:7a:fd:0c:5e:86:f6:05:63:47:8e:6a:d7:f1:f6:
         47:78:05:cd:71:aa:b5:46:20:c6:fc:25:df:41:99:ac:71:4e:
         a5:11:e7:f7:cc:19:77:da:2e:48:a9:5e:e3:57:2d:ce:c0:d4:
         6b:b5:4f:50:14:df:b7:6b:40:4e:c9:cd:0f:e8:10:7d:37:4f:
         bf:b3:e1:dd:f0:db:a1:c1:a0:e1:ee:b6:c0:39:df:d2:d7:03:
         43:c6:fa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:32:07 2026 by rpki-client