Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/fc786f57-8d05-329e-8903-a6e495bd3db1.roa
File:                     fc786f57-8d05-329e-8903-a6e495bd3db1.roa (raw, json)
Hash identifier:          NwMnuycYRyKXz91bdpqMPGhvj3uvFciEAOs8A5anjO4=
Subject key identifier:   2E:EF:91:FA:71:3F:FE:21:08:6A:04:8C:DE:18:05:B3:5A:34:C4:0C
Certificate issuer:       /CN=2e8a2dcd-c473-4343-ab03-233f389ee575
Certificate serial:       010D0C9F4328584F0AA22A67FB68D278893EF080
Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/fc786f57-8d05-329e-8903-a6e495bd3db1.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     8079
IP address blocks:        2602:f718::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:2a:67:fb:68:d2:78:89:3e:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=888e9857-092d-4696-9848-627e0ef7fce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:45:c9:77:0e:e9:2f:b6:5e:dc:97:c1:f9:
                    a2:60:9e:45:8c:55:f6:77:d0:42:dc:53:9c:81:87:
                    c3:b8:5e:d2:c9:05:a1:28:72:18:61:2f:6b:42:c6:
                    62:66:5b:ee:64:24:b8:d8:3e:d0:bf:1a:4c:47:18:
                    95:f4:ea:b7:f3:ca:2a:33:a4:27:e6:ea:53:7f:93:
                    a7:21:75:5e:2b:37:ff:a1:3c:29:4c:72:e5:37:29:
                    46:b1:ab:73:ac:b2:0f:49:83:da:f7:3f:24:08:64:
                    92:69:fa:ae:f0:0e:f0:23:1e:51:23:a4:9d:6c:c9:
                    83:1a:1e:44:bf:7a:af:77:b3:88:17:c6:36:4c:c8:
                    ae:4d:18:44:a9:eb:54:4c:e8:aa:3f:09:1b:f5:ad:
                    d3:cf:4b:a6:54:fc:d0:58:77:85:8f:1f:0c:39:23:
                    a8:8a:20:a0:b1:7e:14:70:76:10:80:46:38:7d:50:
                    56:05:af:45:37:44:9d:fb:d3:00:d3:6e:82:64:07:
                    e4:75:d0:d8:0f:b7:1d:b8:7f:bf:f9:59:40:2c:de:
                    85:1e:01:b4:29:bf:e4:d0:80:6e:fb:22:93:e9:86:
                    32:31:aa:1c:dc:94:d7:24:d7:15:00:2e:7a:fd:77:
                    98:f2:f4:11:fe:bd:68:d7:57:3f:80:07:80:4f:64:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EF:91:FA:71:3F:FE:21:08:6A:04:8C:DE:18:05:B3:5A:34:C4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/fc786f57-8d05-329e-8903-a6e495bd3db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl

            X509v3 Authority Key Identifier:
                keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f718::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:86:ec:e1:c8:4f:6d:5c:75:6b:b8:ef:9b:48:8e:d0:a7:e3:
         c1:49:6d:19:d3:63:1c:36:37:29:74:c4:4b:ec:43:f0:f2:3a:
         05:c8:82:b4:ee:4b:6d:81:16:69:aa:75:cc:12:ef:7c:37:de:
         59:37:2d:22:97:04:bf:f9:b9:0b:ee:d6:3b:ce:28:28:83:1b:
         42:77:38:26:57:58:6e:23:cb:bc:ce:2c:29:aa:b1:71:4f:90:
         5e:45:3d:58:b7:1b:ca:fd:fd:73:7e:2a:e4:42:bd:de:49:f4:
         2c:23:52:ca:ba:dd:bf:69:71:fa:90:64:76:47:0c:ea:99:36:
         9d:bd:26:83:d8:41:fd:92:9b:60:29:54:cc:05:21:e7:e4:72:
         df:23:a1:53:8a:65:65:5a:2d:db:ce:9a:60:40:0a:80:4e:7c:
         fe:64:91:f9:16:9d:e8:8b:00:fe:3d:22:96:ec:6d:18:3e:bf:
         7b:d1:fc:d2:72:8a:59:a0:40:3d:05:95:0e:4e:5d:ea:a1:1f:
         98:2c:6a:cd:35:73:ed:8f:77:37:12:32:54:e2:e6:28:27:67:
         63:f8:8d:e0:a0:ff:fb:3e:12:2f:4c:6a:8a:55:32:a9:00:e8:
         11:ec:20:98:dd:d4:ac:6e:88:18:57:9d:bc:38:ca:47:e2:2b:
         9a:4a:7e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:15:04 2026 by rpki-client