Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/46719863-913f-3b59-91e2-df68d7344d4f.roa
File:                     46719863-913f-3b59-91e2-df68d7344d4f.roa (raw, json)
Hash identifier:          stKeeIxeJ19vPzOZZxuu1OTG4/JGGhxx8lWoHLfr2/Y=
Subject key identifier:   96:92:9C:48:72:B4:B4:2E:01:59:BE:C7:17:D7:1C:6E:AB:6D:5D:78
Certificate issuer:       /CN=af93a26c-49ee-415a-bda7-07e781689339
Certificate serial:       010D0C9F4328584EA38001E4757855BE5CCA5F00
Authority key identifier: 72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/46719863-913f-3b59-91e2-df68d7344d4f.roa
Signing time:             Mon 27 Jul 2026 14:23:12 +0000
ROA not before:           Mon 27 Jul 2026 14:23:12 +0000
ROA not after:            Sun 25 Oct 2026 14:23:12 +0000
asID:                     16509
IP address blocks:        2602:f79a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a3:80:01:e4:75:78:55:be:5c:ca:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af93a26c-49ee-415a-bda7-07e781689339
        Validity
            Not Before: Jul 27 14:23:12 2026 GMT
            Not After : Oct 25 14:23:12 2026 GMT
        Subject: CN=42e8cf4f-bb7c-4970-be97-c2bf4a186126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:8e:44:81:14:d8:6f:df:65:34:e5:60:4b:
                    93:bd:8e:9c:06:3c:08:f6:ab:0a:60:2f:fa:07:bd:
                    78:85:3a:b3:59:34:e5:c8:fd:02:13:da:7f:53:a0:
                    1f:6e:16:0c:e3:81:e8:ee:bd:c3:a2:b5:04:df:24:
                    0d:e7:6a:a9:82:be:61:8c:cd:84:43:ce:17:bd:f9:
                    bf:5f:ef:ea:8c:40:94:2b:50:9a:4a:65:35:2a:86:
                    98:17:f3:e5:e0:72:dc:ad:34:ec:9e:d9:18:66:2b:
                    65:53:d4:4e:53:2f:74:0e:0a:4b:aa:ee:e8:f2:c2:
                    db:de:59:7a:c8:32:50:b6:f0:b0:f5:18:4d:32:6f:
                    a4:92:a0:82:77:1f:92:bf:17:24:00:08:d2:40:75:
                    d9:98:2c:a4:41:8a:3c:c2:54:9a:8e:8a:45:a8:45:
                    71:c5:df:b9:60:5e:1c:1f:ec:3a:47:31:85:f8:b9:
                    08:61:8d:60:b5:b9:29:29:21:87:ce:c2:c8:22:51:
                    05:eb:56:0d:e0:29:ea:85:59:77:4b:19:d9:9b:34:
                    fd:16:9b:a6:c6:6a:d8:a3:a8:2d:e6:6f:2c:ab:e9:
                    54:9b:e2:6a:01:db:f5:0e:a4:b5:f6:2a:b9:fa:11:
                    4b:54:d4:78:de:5d:d7:ef:e7:87:3f:59:44:54:7f:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:92:9C:48:72:B4:B4:2E:01:59:BE:C7:17:D7:1C:6E:AB:6D:5D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/46719863-913f-3b59-91e2-df68d7344d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl

            X509v3 Authority Key Identifier:
                keyid:72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f79a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:3a:5a:46:d1:af:3d:a8:d2:f0:ac:71:4b:78:d3:7d:de:
         dd:86:3b:2e:39:63:31:56:70:3d:62:eb:40:bc:57:59:f9:9e:
         e2:2f:28:15:ab:e9:30:f8:26:66:27:4d:e0:ad:d4:e2:12:36:
         04:fb:70:42:ce:6c:de:7b:dd:b3:69:d4:5b:8b:54:8c:78:2b:
         72:70:07:45:08:fa:ec:07:76:d8:34:41:09:46:f9:4b:aa:38:
         65:84:fc:a7:6e:b2:2f:a4:23:56:5b:e7:27:12:ff:11:ee:4e:
         99:1f:28:da:f7:af:df:3d:1c:39:95:50:8b:03:9b:f3:1c:ab:
         38:51:d9:50:3e:7b:62:d8:6f:21:83:58:88:a9:ca:7e:4d:e5:
         a2:a5:6d:b1:ae:ba:6f:8d:37:97:38:15:bf:41:ab:fd:d9:1e:
         ad:69:d5:b5:10:27:06:8c:7f:ec:9a:49:23:fa:5a:59:3d:c9:
         c0:ce:98:75:2f:31:80:c1:93:d2:86:69:9a:eb:64:ff:86:8b:
         38:6f:3e:b5:2d:57:9d:b1:15:c1:e1:f2:6f:3c:9a:67:50:af:
         88:47:a2:20:ed:21:1c:33:70:e0:b5:4b:89:5c:63:c7:00:0a:
         f3:49:e9:30:cf:3b:3e:b9:c3:a4:d9:cf:81:a1:64:35:d3:38:
         8a:63:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:50 2026 by rpki-client