Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa
File:                     da0869fc-7a2f-3359-ac12-16c14348d383.roa (raw, json)
Hash identifier:          Xlta8/4BITO34wl0uAU1m8zvNGvpSCebjpWa+muA4Mo=
Subject key identifier:   51:E2:1E:1E:BD:25:26:97:C6:5B:AF:30:98:36:14:CC:25:F6:A5:95
Certificate issuer:       /CN=43d85349-fcc3-4834-8564-24f8a824b0cd
Certificate serial:       010D0C9F4328584EA78864EE397753F5321AAE80
Authority key identifier: 04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399613
IP address blocks:        2602:f698::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:64:ee:39:77:53:f5:32:1a:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d85349-fcc3-4834-8564-24f8a824b0cd
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=81b1097b-0a65-4c77-b181-3845df7b7ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8a:b9:00:4c:5f:73:cb:f0:0d:ec:9d:73:75:
                    ae:01:e5:66:55:d3:c0:b1:2e:ac:ae:19:80:c3:59:
                    d4:2d:29:b0:40:c2:4c:6a:0e:e9:80:6c:7e:8d:a6:
                    6f:9d:54:f4:1b:d2:96:4d:f8:69:83:d9:9b:ee:69:
                    96:11:39:26:be:a7:a3:d5:65:91:0d:ff:c0:6b:c2:
                    cf:df:8e:63:1a:a7:d1:68:0e:23:15:b9:33:b0:3b:
                    f0:7a:64:42:f6:c8:61:dd:e7:6a:e9:2f:cc:6a:47:
                    87:11:16:c9:1b:df:f3:ea:b5:7b:89:a3:19:ac:59:
                    5f:58:32:25:56:42:52:90:a4:30:4c:cc:ee:58:1a:
                    ed:0d:9c:55:7c:f0:30:03:a6:36:06:b7:12:5f:c5:
                    b8:01:6c:14:a8:fb:cb:e8:c9:4c:8a:3d:65:2c:6a:
                    8b:48:33:11:ed:a1:d4:69:e7:9e:b8:0a:55:17:23:
                    bc:1b:42:6d:a7:ce:6b:1c:85:19:f2:c8:c5:62:cb:
                    43:93:1d:03:b0:b8:6d:34:11:ca:fb:2e:dc:7d:fc:
                    a3:7b:fd:ab:29:3b:aa:21:55:f0:87:99:62:87:49:
                    24:d4:37:90:88:bd:0d:17:d9:59:83:8b:db:bf:5e:
                    33:bd:ed:f0:55:9d:a0:f4:c0:eb:62:54:98:bf:23:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E2:1E:1E:BD:25:26:97:C6:5B:AF:30:98:36:14:CC:25:F6:A5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl

            X509v3 Authority Key Identifier:
                keyid:04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f698::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:00:bd:90:f4:93:26:e2:88:cc:f7:35:0b:2e:49:5b:83:
         02:80:66:15:d6:eb:86:3f:a3:af:64:cd:e2:63:b4:b4:83:c0:
         25:27:22:18:4c:39:9b:a0:37:a4:21:8a:45:bb:fe:e2:8e:48:
         f1:07:3d:f9:cf:4f:00:67:00:09:a9:99:5f:d7:2d:ab:a7:43:
         e1:e3:cd:3a:60:74:f6:6f:d2:a8:69:80:a3:30:cc:64:da:8b:
         a6:3b:6d:5e:c2:8f:e5:82:6e:4e:cc:22:26:68:d4:b7:5e:03:
         64:b9:54:d5:78:a6:1c:82:bf:71:ce:3c:39:91:c0:5c:74:94:
         20:94:b6:44:6e:17:38:1c:8b:38:a0:ad:4d:2d:f7:0d:27:22:
         be:a6:98:5c:29:8b:00:b9:41:a2:aa:41:7e:45:6c:0f:b7:fc:
         f7:d5:4b:dd:30:ff:d3:90:8a:b3:16:fd:0c:3d:e7:a3:68:70:
         21:51:84:ff:ed:62:13:e5:16:ea:e4:87:fc:98:7d:89:0c:7f:
         3f:e5:d2:f6:ac:67:b1:cd:3b:9d:28:b7:b6:ab:a1:f2:c4:05:
         4c:a7:cd:88:6b:fc:9c:a6:72:61:17:00:26:02:89:6d:59:72:
         75:75:c7:d4:1c:aa:3a:5a:9a:2a:35:53:7f:3b:3b:f8:97:26:
         51:49:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:25:26 2026 by rpki-client