Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0143495e-4af4-463b-a3da-d3d2bbfcf9ac/60deb12a-704b-32ab-84bc-2b67ddd9a044.roa
File:                     60deb12a-704b-32ab-84bc-2b67ddd9a044.roa (raw, json)
Hash identifier:          n2SMe09ItM+e7mP20sVxT58l+48LpwMbJPww8YvPBsk=
Subject key identifier:   55:74:28:D5:82:C6:0B:3C:B3:C1:D6:07:3D:B9:6A:48:B1:A2:9A:BB
Certificate issuer:       /CN=0143495e-4af4-463b-a3da-d3d2bbfcf9ac
Certificate serial:       010D0C9F4328584F268D0A398402014C905AFD80
Authority key identifier: DD:2F:1C:62:BD:E3:CB:60:C1:79:2F:92:39:14:58:C2:6F:77:96:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0143495e-4af4-463b-a3da-d3d2bbfcf9ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0143495e-4af4-463b-a3da-d3d2bbfcf9ac/60deb12a-704b-32ab-84bc-2b67ddd9a044.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     14618
IP address blocks:        2602:f628::/43 maxlen: 48
                          2602:f628:80::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0143495e-4af4-463b-a3da-d3d2bbfcf9ac/0143495e-4af4-463b-a3da-d3d2bbfcf9ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0143495e-4af4-463b-a3da-d3d2bbfcf9ac/0143495e-4af4-463b-a3da-d3d2bbfcf9ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0143495e-4af4-463b-a3da-d3d2bbfcf9ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:0a:39:84:02:01:4c:90:5a:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0143495e-4af4-463b-a3da-d3d2bbfcf9ac
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=13d4395c-2d76-45f1-b3ed-9b046bccbb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:ed:7c:ce:09:db:60:3d:7a:7e:7c:83:57:
                    cb:fd:93:37:c2:2a:2c:ca:ff:38:79:29:35:69:12:
                    2d:3c:f1:f8:36:3b:29:59:75:8d:2c:f8:b5:d3:c4:
                    2e:8d:8d:ef:03:f6:13:22:59:88:73:b3:92:bf:46:
                    3d:9f:06:46:c6:9a:44:99:a1:94:07:1c:ba:b2:22:
                    88:ab:c7:3e:e0:c3:08:e4:aa:ec:bb:ae:c1:e8:a0:
                    93:da:82:ec:93:85:ff:ce:cf:14:24:e0:6b:73:23:
                    c2:58:71:83:04:35:b5:cb:36:34:df:31:4c:0a:d8:
                    db:18:5c:75:4f:41:b4:26:be:17:16:77:df:07:a0:
                    6f:6e:ee:97:06:e7:55:eb:81:02:44:69:e2:9d:7d:
                    d4:b9:54:f0:bb:f5:15:77:6c:eb:7f:10:2a:27:7c:
                    8d:bf:0c:fb:0f:40:72:3d:01:44:5a:e1:9d:cc:97:
                    e3:62:e0:da:4c:1c:ae:a7:37:91:b2:b4:98:63:6a:
                    63:e8:ba:88:69:93:c5:47:b0:6a:56:f4:4c:b0:b1:
                    5f:15:04:a6:7d:5b:66:c7:44:de:75:0e:6e:92:b1:
                    7a:a3:e9:25:24:35:6a:34:da:6e:82:d2:cb:21:68:
                    88:95:ce:0d:52:e7:1f:e0:e5:fd:da:ec:3a:a4:a4:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:74:28:D5:82:C6:0B:3C:B3:C1:D6:07:3D:B9:6A:48:B1:A2:9A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0143495e-4af4-463b-a3da-d3d2bbfcf9ac/60deb12a-704b-32ab-84bc-2b67ddd9a044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0143495e-4af4-463b-a3da-d3d2bbfcf9ac/0143495e-4af4-463b-a3da-d3d2bbfcf9ac.crl

            X509v3 Authority Key Identifier:
                keyid:DD:2F:1C:62:BD:E3:CB:60:C1:79:2F:92:39:14:58:C2:6F:77:96:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0143495e-4af4-463b-a3da-d3d2bbfcf9ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f628::/43
                  2602:f628:80::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:99:6d:91:84:79:cf:10:d6:d7:00:bd:f8:47:26:65:3d:b6:
         2a:eb:bb:37:51:e8:5d:bd:8a:77:a9:cf:f9:31:e1:72:10:74:
         b5:da:17:42:4c:4d:6c:b2:ea:d2:b5:9f:91:82:e3:d2:cc:7f:
         0b:47:97:04:b4:c2:de:40:61:37:4d:20:a1:3e:ff:02:86:e6:
         c8:33:6d:02:59:37:bb:dd:76:86:2c:e8:f0:d3:6c:d2:80:40:
         57:4e:c9:ea:f6:fc:c8:bd:c9:a8:21:e5:b0:76:3f:47:47:73:
         05:d2:4e:2b:95:33:6e:50:c5:73:5c:35:27:fd:9e:e2:3a:68:
         10:78:09:d9:dc:e1:6c:c7:08:54:00:5a:dc:71:ca:5e:26:62:
         48:10:0f:4d:4f:69:ad:f7:00:88:bf:14:83:2d:80:c3:1e:f0:
         6a:5a:ba:49:b5:4f:b7:aa:c6:41:83:14:f5:c4:4e:53:23:c2:
         88:11:36:db:4c:08:1a:75:49:fd:a0:72:0d:c6:46:fb:4a:19:
         50:02:ee:74:56:fe:f5:e1:01:39:a5:ab:b5:98:34:e4:5d:16:
         6d:b6:8f:6a:79:82:e2:87:b1:b0:2a:04:ed:8d:55:4d:d0:96:
         e1:b9:bd:a5:24:01:b8:64:e2:c1:f0:31:59:68:8f:02:65:ed:
         1d:75:5d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:43:45 2026 by rpki-client