Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/c491a114-e1f5-3c83-be72-d9c11a868d3d.roa
File:                     c491a114-e1f5-3c83-be72-d9c11a868d3d.roa (raw, json)
Hash identifier:          0tNZCcoH8U2X8YTnx6Y3N6YK+pOLeBfUJrVbp3wxpQs=
Subject key identifier:   5E:A4:18:3F:2C:5F:18:15:91:DA:79:AB:E1:05:56:7E:C5:DA:90:39
Certificate issuer:       /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Certificate serial:       010D0C9F4328584F1302469BCBD0554E143085A0
Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/c491a114-e1f5-3c83-be72-d9c11a868d3d.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     40806
IP address blocks:        2602:f4d9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:46:9b:cb:d0:55:4e:14:30:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=d824d5f3-6389-4099-b08b-2b0e7038908e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:9c:ab:38:c0:a8:ca:1c:80:50:48:41:d1:
                    4c:08:96:78:d0:a7:94:81:da:d6:f8:4b:d8:46:e5:
                    90:3f:12:e2:1f:69:d7:b9:d2:8e:d2:57:82:bc:42:
                    f0:fd:e6:45:69:9d:67:88:e2:f1:01:42:05:7a:ac:
                    0b:8a:9b:73:c2:89:20:7c:f6:8b:41:98:a8:c9:dc:
                    2e:2c:2f:77:ef:01:44:0d:63:17:5f:06:08:2f:12:
                    26:7d:10:eb:a6:3d:22:a6:af:9c:07:b5:17:bd:d8:
                    b7:c2:95:71:1b:17:ba:14:2c:73:e0:e1:0d:f0:f8:
                    a7:db:f1:c2:6b:cc:04:dc:91:5d:20:ac:9f:9f:6d:
                    ea:07:0f:3b:69:23:3c:7c:6c:84:6f:ef:40:1a:0f:
                    45:e2:f5:d5:ca:0c:ff:9e:c5:df:45:8f:54:5b:1f:
                    40:59:8f:14:4e:33:a2:b2:13:aa:c7:ea:f2:d8:d5:
                    1e:e4:e6:2e:5e:24:53:ea:41:76:c2:67:97:7c:82:
                    cf:48:c4:fc:76:c7:aa:0e:43:81:38:53:84:4e:74:
                    98:d5:9d:8f:91:e9:66:21:f5:f9:69:01:cc:5e:41:
                    9a:e3:39:38:4e:b0:41:82:6e:d1:f6:56:ff:e0:b5:
                    5f:3b:06:93:97:a8:3d:fb:d9:0e:88:85:21:b8:0b:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A4:18:3F:2C:5F:18:15:91:DA:79:AB:E1:05:56:7E:C5:DA:90:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/c491a114-e1f5-3c83-be72-d9c11a868d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4d9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:5e:2b:9e:23:56:ad:57:fa:f2:94:49:b9:b4:0e:cb:bf:
         eb:61:bc:5d:6d:00:9a:fb:f0:50:79:0c:0e:bd:bc:e3:7d:f4:
         9d:3f:e4:bc:d8:a4:cc:67:53:07:79:8a:14:aa:4b:21:cd:56:
         2a:08:fd:d9:ee:84:1f:47:7b:c2:0a:ac:f4:f8:7a:2d:14:fd:
         60:12:e6:0c:73:3d:21:2d:34:17:6f:b9:5c:78:d5:92:4c:36:
         0f:e6:58:3a:a0:97:7a:c9:17:cb:20:cb:e8:cc:16:b4:12:cd:
         40:dc:35:cb:96:43:24:de:2b:9f:7f:b9:3a:01:b9:41:09:63:
         ed:8b:f4:e8:73:12:91:e3:56:2e:9e:f4:e9:ea:d8:9c:49:29:
         24:d6:a6:71:86:15:4d:5d:dc:27:ae:1a:bb:ae:17:36:3b:d1:
         4b:bc:4d:2e:03:c9:af:7a:4f:fd:11:f4:5d:11:a8:86:39:45:
         03:e4:b0:50:15:47:d3:95:4f:ed:8f:25:7d:fb:8c:8d:d5:71:
         30:5f:4e:2f:52:43:9d:41:84:6e:96:71:f3:6d:c1:dd:8e:cf:
         33:e5:10:b3:ef:a9:16:61:d3:9e:9a:bb:b0:f5:48:67:0b:1c:
         86:ed:11:67:83:d9:81:78:8a:1b:ae:eb:ef:25:0e:0e:e2:4d:
         3f:05:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:58:49 2026 by rpki-client