Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/bdd25144-8f18-361a-81ee-33720e2febd6.roa
File:                     bdd25144-8f18-361a-81ee-33720e2febd6.roa (raw, json)
Hash identifier:          yHkKu70om94/r74c4V41ulzh6ZEaM0rkljMnjCPWJa4=
Subject key identifier:   6E:BA:EF:EF:99:9E:CA:F5:5B:27:AF:E9:E3:55:B3:40:54:CF:F8:41
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F4328584EF7177D8A95F867400EA9707B
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/bdd25144-8f18-361a-81ee-33720e2febd6.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2602:f775:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:7d:8a:95:f8:67:40:0e:a9:70:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=97eb52bb-cbae-4685-8a6d-81322e2863bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:1d:fa:df:fb:5e:02:57:a7:1e:65:de:95:
                    19:b5:fb:8a:ef:06:b2:63:62:30:2a:cc:fa:96:9d:
                    d8:62:c8:1b:54:b4:88:26:11:63:c5:89:42:01:31:
                    df:b6:f2:57:1e:fe:4c:a9:06:d5:e4:07:e2:b7:f6:
                    9e:b6:a4:3a:7b:b2:03:d6:20:b6:54:dc:14:3e:9b:
                    f7:ba:ae:b1:39:0e:4a:71:88:3c:81:23:d9:ad:b4:
                    40:c3:70:75:bc:7a:7c:ec:60:c5:5d:11:f4:6f:39:
                    78:db:e7:eb:9d:99:cc:cc:30:c9:08:a1:64:b0:07:
                    dd:57:67:67:b4:b1:3c:a4:4f:6b:47:b1:d0:c3:ae:
                    82:87:5c:ec:57:32:d5:27:b5:b2:0b:07:66:bc:e8:
                    c1:fd:be:13:13:18:78:d0:44:1d:cb:d4:cc:d5:0c:
                    6c:41:3b:90:3d:4d:cc:ec:af:85:0b:28:a1:31:2b:
                    e0:9b:8c:98:a0:e4:05:ba:72:87:dd:76:b3:47:aa:
                    92:20:47:58:74:d2:98:90:0c:64:a1:09:11:95:4a:
                    3e:26:09:d3:91:48:00:49:67:0e:5f:eb:a5:5a:8b:
                    59:d6:a1:d4:15:ed:eb:85:75:96:cf:59:97:89:c1:
                    ac:ea:42:c6:6b:6c:f1:20:80:2c:6d:7b:86:d0:25:
                    86:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BA:EF:EF:99:9E:CA:F5:5B:27:AF:E9:E3:55:B3:40:54:CF:F8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/bdd25144-8f18-361a-81ee-33720e2febd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f775:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:53:5d:83:2b:69:a2:a1:2c:a2:d8:78:2d:41:a7:93:3f:6c:
         21:ea:63:19:59:e8:ee:29:dc:16:b8:6a:9e:67:66:e6:1b:43:
         83:ed:b8:50:25:6b:bd:a0:0d:0d:86:cf:41:d8:e9:88:d0:c0:
         e1:57:81:cc:be:99:57:c7:be:ea:d4:05:d6:a9:be:6b:f4:ae:
         4f:f9:d7:23:ab:9c:a5:6a:6e:c8:26:05:bc:2a:34:79:60:84:
         2b:1f:6f:7f:02:0a:77:b8:f7:64:41:e3:9f:ea:3d:5b:7d:56:
         d8:96:00:0f:04:91:a7:b4:94:ff:48:05:03:a0:ec:81:d5:c1:
         74:27:07:78:46:48:0a:14:88:2e:a5:5c:14:59:21:61:25:1f:
         8f:9f:b2:5c:de:98:97:48:cb:80:2e:31:8c:4c:35:ed:5f:8b:
         94:97:e4:58:3d:4f:ad:8f:88:ec:ad:03:7a:02:7f:1f:3c:19:
         70:b4:db:13:14:87:25:a0:4a:9f:e2:6a:9e:80:bb:b9:00:30:
         a5:2d:90:4e:01:77:a3:09:a7:42:d4:65:57:4d:5b:61:c6:e6:
         78:29:90:ac:c8:96:f1:6c:45:8c:38:d4:13:19:cd:ee:ee:bb:
         80:25:df:8a:47:0b:13:6d:6e:16:b6:72:06:26:8c:f3:eb:86:
         6f:63:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:40:03 2026 by rpki-client