Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/9f4d9bcc-1e91-3cc0-977c-7f77b1874b09.roa
File:                     9f4d9bcc-1e91-3cc0-977c-7f77b1874b09.roa (raw, json)
Hash identifier:          +eIrbNqI4EwF+B/izcSCKM6QzZGiK1/CNu+b9SP87j4=
Subject key identifier:   55:AF:50:B5:FD:5A:B8:49:BF:0C:8B:A8:F4:E4:F7:25:FC:F9:FF:3E
Certificate issuer:       /CN=2dd62bbc-ac6b-44a9-9097-0de386a3ef8b
Certificate serial:       010D0C9F4328584DAC456D935C655DBFD43FD700
Authority key identifier: 2A:90:BB:00:F0:A9:B6:C5:A8:E4:97:F5:1F:6F:C5:6E:67:47:98:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/9f4d9bcc-1e91-3cc0-977c-7f77b1874b09.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     1050
IP address blocks:        2602:fb3f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:6d:93:5c:65:5d:bf:d4:3f:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd62bbc-ac6b-44a9-9097-0de386a3ef8b
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=52323d4a-3905-415d-b043-815d5612af27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c7:c6:0e:41:6c:03:05:ea:82:74:c3:85:5f:
                    f3:7b:7c:da:78:5f:84:b1:f2:28:c9:05:0a:d5:87:
                    96:83:6a:50:d4:c7:fc:24:07:99:41:fc:cc:e0:29:
                    6c:37:5b:0b:32:15:fb:c6:f6:62:75:d3:19:f6:21:
                    1a:1f:a0:14:cb:20:79:2b:f8:3a:53:1b:b4:52:8d:
                    e9:67:11:bf:3d:93:95:73:5d:44:e8:3a:95:09:21:
                    1a:eb:55:63:63:62:5e:2e:7c:e7:7b:a1:2d:c7:e2:
                    9b:c5:5a:b2:54:78:c0:8d:e9:d8:ea:50:15:8e:5f:
                    96:25:5f:71:cd:71:95:e3:e1:75:57:80:70:c9:26:
                    ad:ff:a4:e0:d6:e7:a4:02:4b:26:2a:e6:2e:11:09:
                    dd:9a:b9:1f:08:95:27:bd:97:d2:9c:00:cd:13:2c:
                    f8:13:95:fe:dd:12:7b:c1:ac:64:fa:08:8a:d0:7d:
                    76:2d:85:2c:64:7a:8a:be:45:f9:46:3e:a5:b9:e7:
                    4b:b2:4e:ec:ee:60:bc:ab:ea:21:f5:62:db:16:aa:
                    2f:17:9e:b2:53:10:6e:62:e7:2b:e3:77:57:55:8e:
                    4c:a0:18:d1:00:14:d1:a5:4c:56:e4:e7:92:50:24:
                    40:8d:5c:7b:82:36:b0:14:ad:6b:78:bc:18:17:47:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AF:50:B5:FD:5A:B8:49:BF:0C:8B:A8:F4:E4:F7:25:FC:F9:FF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/9f4d9bcc-1e91-3cc0-977c-7f77b1874b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:90:BB:00:F0:A9:B6:C5:A8:E4:97:F5:1F:6F:C5:6E:67:47:98:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb3f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:4d:a5:1f:8d:17:65:63:f1:cc:7c:da:55:a3:5a:e7:bd:6f:
         24:09:31:da:ae:74:7e:a2:00:07:a5:1d:5c:7c:0c:d3:f1:8b:
         32:64:31:3f:d1:f0:c3:9d:8a:fa:1d:69:58:dd:53:f0:3b:49:
         0b:42:9e:54:d1:41:86:e7:4e:c7:29:0c:af:22:87:ff:7c:b7:
         8a:7d:87:56:65:f2:6c:ef:00:0b:1d:04:06:3c:b1:01:ae:f5:
         07:48:ec:3a:92:30:ae:2c:7f:31:fb:54:8b:b5:39:a4:23:41:
         44:c6:87:13:5b:d5:5a:87:c9:24:c8:99:00:6f:41:31:9d:bf:
         91:a9:1c:c8:c9:72:83:37:ff:18:4c:f8:fa:8c:6d:01:0a:3a:
         ab:a0:82:85:17:a8:ea:88:56:49:77:fa:76:f2:44:6e:98:f3:
         09:8e:17:3d:76:45:0c:9b:8a:75:d5:ed:08:c1:60:29:e0:33:
         87:c5:a5:c4:90:58:fa:6a:20:d8:d4:27:3f:7c:20:bb:8e:c1:
         a5:d8:17:c7:91:af:50:b2:96:62:22:61:e4:35:46:e4:12:05:
         e2:c8:4b:7d:9c:87:72:41:92:48:eb:5f:db:ce:d0:83:2f:f9:
         d7:74:44:10:3b:9d:06:f9:e0:48:24:ca:44:27:35:b6:a8:4e:
         a2:50:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:59 2026 by rpki-client