Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa
File:                     83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa (raw, json)
Hash identifier:          7W0QZRO2CX1Jd7ZyAQHYQZqUbf6BdfBmXwI0cTOLRaw=
Subject key identifier:   3C:48:E6:6D:88:14:71:FD:F0:D5:34:B5:BA:9A:04:E8:03:05:4D:80
Certificate issuer:       /CN=643914aa-5306-4352-8a01-3ac381827191
Certificate serial:       010D0C9F4328584F3FAD3E4BA831185FDB9E0EC0
Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     198005
IP address blocks:        2602:fbc7:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:3e:4b:a8:31:18:5f:db:9e:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643914aa-5306-4352-8a01-3ac381827191
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=d18f11a3-eea5-4488-b43e-7112a53b5b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1d:41:4f:18:87:a7:08:0e:7a:40:0a:0c:72:
                    b2:c9:04:59:b6:43:4f:db:a2:13:3b:4c:77:cc:54:
                    99:e6:95:bc:e7:cf:cd:ab:59:ad:10:98:99:f7:ba:
                    19:ef:8d:0b:df:37:1e:4c:d3:9d:95:05:45:a1:b9:
                    35:6e:68:7d:43:dd:9d:60:6c:36:f1:19:4e:16:38:
                    e5:8a:02:3d:34:f3:19:61:82:c5:15:c7:6c:ad:f0:
                    eb:10:d2:8c:04:b2:1c:d3:c2:e0:c8:8c:e3:79:1f:
                    ba:c4:6d:74:53:4c:da:dc:51:aa:e6:55:9e:9e:aa:
                    6a:9b:d5:6d:49:9a:86:ed:16:e5:b8:e2:d0:f2:8f:
                    f0:40:90:d3:b5:14:fc:f9:e8:d7:4d:9b:cf:0a:72:
                    f0:ea:51:be:33:26:0c:50:49:01:32:91:88:d5:12:
                    6a:6e:84:12:3a:af:23:d4:c8:c5:f7:1c:1a:2d:e8:
                    86:79:bc:7a:0d:65:1e:93:59:c2:06:a3:81:ed:ce:
                    98:5e:64:f5:22:2b:8a:7e:6e:38:53:7b:b8:b9:d6:
                    fc:30:09:38:c1:1c:93:78:50:d9:23:21:23:c0:b5:
                    34:67:59:f7:23:ab:de:4c:52:99:72:70:e1:3d:6f:
                    98:94:80:62:ef:75:93:e2:cc:85:8d:58:94:e5:3f:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:48:E6:6D:88:14:71:FD:F0:D5:34:B5:BA:9A:04:E8:03:05:4D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl

            X509v3 Authority Key Identifier:
                keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbc7:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:7f:fb:3d:27:00:9b:54:67:45:76:e4:e9:22:2c:2d:cb:
         5e:52:fd:b4:4b:a1:ea:ae:c9:aa:29:af:18:f4:f2:14:ee:54:
         96:49:51:9b:c0:56:ce:7d:52:5e:6a:f2:ae:3a:26:53:0c:56:
         ee:d7:70:ad:66:78:1c:57:2d:b2:17:2b:4e:38:03:d9:36:e8:
         34:5a:f9:57:e6:49:a1:51:8b:69:f7:fd:70:98:38:f3:63:ee:
         8d:6f:7b:e8:ba:9c:3e:6a:e8:63:18:e6:5d:80:4d:73:8d:bc:
         eb:e1:11:d2:b1:7d:28:88:7e:fc:21:82:80:37:32:fc:02:33:
         54:82:3c:41:f0:ea:b8:84:59:8e:9d:02:9a:d9:82:b6:41:bb:
         fc:4f:f2:8e:bd:1a:5a:2c:4a:f4:a7:ab:0d:cd:53:df:74:c9:
         0a:c6:32:17:ce:bf:fd:74:f5:c1:c2:aa:60:e2:34:93:72:f2:
         e0:ab:84:ef:b8:b5:cb:04:45:67:b7:d4:99:82:d5:58:46:b4:
         6b:21:37:27:8e:31:84:21:66:4f:d4:4f:97:db:1a:cf:b3:ec:
         41:0b:fb:99:6a:a6:24:5a:41:a2:20:1c:1c:4a:60:9e:aa:db:
         18:16:77:15:7a:f9:91:50:8d:a4:eb:73:ad:f3:8f:71:8a:10:
         35:c7:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:42:55 2026 by rpki-client