Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/76165021-4044-3c72-ab60-8eed64aa4779.roa
File:                     76165021-4044-3c72-ab60-8eed64aa4779.roa (raw, json)
Hash identifier:          YD2bScEMNxb84mWlILm4tpPYCmy4lFQFneGPhEXQDO8=
Subject key identifier:   31:7B:3F:13:B2:29:50:AA:4E:11:47:98:67:C4:F8:C2:F6:69:48:41
Certificate issuer:       /CN=17ba49ac-37d6-4b90-b973-bee8a685e116
Certificate serial:       010D0C9F4328584F497426D5EC66FA6B892B70C0
Authority key identifier: 24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/76165021-4044-3c72-ab60-8eed64aa4779.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     402071
IP address blocks:        2602:f529::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:26:d5:ec:66:fa:6b:89:2b:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ba49ac-37d6-4b90-b973-bee8a685e116
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bb66a3cb-e221-4d9c-b052-e031615b46fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:fb:1a:60:df:42:8a:fc:45:1b:fa:14:2b:
                    72:07:d6:59:a7:58:fd:eb:9f:86:3b:91:4b:50:68:
                    40:f9:08:f0:ea:d2:2c:df:95:77:11:c8:d1:fd:ce:
                    61:d0:22:8a:e7:32:f3:8c:65:62:2b:03:1d:2c:39:
                    a7:15:97:85:da:d1:51:72:8d:e0:bd:f2:3a:05:ea:
                    1f:35:d6:c8:7b:ce:48:d5:80:3b:f7:7c:57:78:a0:
                    15:4a:2a:df:72:2b:7d:53:4c:27:15:a6:ff:c8:c3:
                    1e:27:93:cc:cb:10:73:49:60:e7:88:41:d6:e5:37:
                    f4:b2:29:99:8a:7f:2d:90:65:f6:44:4e:40:5f:4c:
                    73:ae:bf:99:f2:df:1b:0f:40:88:69:64:55:f3:40:
                    95:9e:7d:b3:ec:7e:40:23:1d:7e:19:a4:1d:21:80:
                    8d:9e:95:c2:78:17:5c:ae:4d:71:ae:7d:69:33:d7:
                    bf:f3:b6:1e:cb:77:9b:99:8a:f2:c8:24:a5:8a:1e:
                    d5:b3:1f:cd:21:6f:7f:3f:27:e1:f7:68:ab:b9:0b:
                    14:f2:8b:d7:4c:92:da:ef:6a:9d:13:a0:10:1f:42:
                    bb:05:4b:1a:53:dc:cc:2a:1e:25:d9:a4:18:b3:bb:
                    3e:40:b3:cd:11:d7:76:af:3f:1f:9b:5c:5a:84:eb:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7B:3F:13:B2:29:50:AA:4E:11:47:98:67:C4:F8:C2:F6:69:48:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/76165021-4044-3c72-ab60-8eed64aa4779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f529::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:55:61:7e:88:67:b9:89:75:80:75:3c:13:8a:fb:d6:1d:5e:
         f7:53:cb:e0:6c:e4:8c:95:a5:e2:ac:fa:44:af:5e:63:c3:5f:
         b2:40:b0:37:34:53:20:14:20:f2:ec:ab:c2:a0:2d:6b:57:88:
         54:99:a4:db:6b:65:57:a1:e3:b9:9a:4e:ed:2d:22:6b:81:91:
         3b:99:e7:2b:ff:de:e3:0f:9b:52:c8:84:a7:37:64:6a:b4:99:
         60:de:b7:e9:c6:9f:29:02:f9:f5:19:4e:00:a4:db:27:03:df:
         d9:31:fc:cf:96:a6:9c:65:e5:d8:30:48:11:9e:ee:e6:f8:30:
         b1:74:fb:d9:8a:53:15:e5:d0:25:0c:41:67:0f:56:dc:66:72:
         34:a4:0a:d2:33:87:c6:f0:20:e7:51:7c:d9:95:e4:c2:ba:d6:
         89:4f:7c:9e:9b:2b:49:bd:b9:39:05:6c:ad:bf:d8:a6:47:db:
         93:b8:26:b8:eb:64:2a:28:f6:f1:2e:7a:a5:e3:10:09:87:95:
         a1:da:29:c0:15:6c:d1:cf:ad:c9:5c:81:f9:90:f2:be:62:25:
         b0:aa:fa:a9:29:99:50:6d:3a:24:44:db:f0:18:35:54:3e:80:
         38:03:36:f5:ce:91:46:6f:19:5b:83:17:95:45:15:61:45:36:
         4c:c6:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:03:31 2026 by rpki-client