Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/c40d1b6f-7d48-3bfa-b57e-900f863667f0.roa
File:                     c40d1b6f-7d48-3bfa-b57e-900f863667f0.roa (raw, json)
Hash identifier:          GmMpWicepwYmKhKLnCZEimJy8VSNAPmQpbk25ZKt0Tg=
Subject key identifier:   D8:71:11:E6:7B:69:43:32:9F:4E:85:C1:0C:98:19:5F:5A:52:DA:16
Certificate issuer:       /CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
Certificate serial:       010D0C9F4328584DBBA054E91807FC67A86B7FB0
Authority key identifier: A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/c40d1b6f-7d48-3bfa-b57e-900f863667f0.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     25735
IP address blocks:        2602:fb40:90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:54:e9:18:07:fc:67:a8:6b:7f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=f70ae562-4074-4ab5-8ffc-6c625a317152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b9:6d:61:c9:4f:20:95:c5:b3:6b:0b:ef:8c:
                    26:9d:12:90:da:18:26:86:f1:21:4e:73:6a:55:41:
                    4a:f0:13:ba:c4:e3:70:95:bc:f9:4e:af:95:11:64:
                    33:2b:e8:ec:3f:54:44:3a:08:90:53:a2:57:1d:01:
                    24:a8:b8:56:da:e6:59:cb:5d:dd:e1:e6:63:a2:05:
                    08:95:cd:21:d2:8e:d3:b0:87:7e:fe:25:4e:6d:ed:
                    c1:77:d1:bc:9e:5d:99:f3:31:d0:b6:2c:71:65:7d:
                    c2:25:91:69:43:01:bf:74:9f:7f:09:54:cb:80:72:
                    de:6f:37:c8:dd:08:af:d6:a2:70:15:93:84:c2:69:
                    f9:dd:44:cc:b6:4a:ef:b4:0c:54:78:49:3b:51:56:
                    13:89:22:a9:58:9c:73:0f:c0:44:27:2d:f2:17:aa:
                    50:35:63:f8:db:dd:9d:23:a8:74:f8:f4:68:40:c6:
                    f5:35:a1:b5:98:9b:47:6f:8e:d0:d2:b5:43:0a:da:
                    bd:98:f1:75:50:38:a2:3a:1d:f7:03:52:ad:af:53:
                    e4:b3:e3:fc:be:1e:7a:73:a0:48:d0:fb:b6:d5:a3:
                    b8:c1:27:fe:07:b3:81:21:e8:f4:d4:ec:83:8d:4e:
                    c3:0e:f3:70:fe:d8:09:c6:7d:f4:bc:3e:0a:c7:89:
                    a3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:71:11:E6:7B:69:43:32:9F:4E:85:C1:0C:98:19:5F:5A:52:DA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/c40d1b6f-7d48-3bfa-b57e-900f863667f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb40:90::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d3:59:3a:19:82:a0:95:af:86:74:c6:37:32:5e:90:b8:ee:
         0e:fb:ef:e3:a0:2f:9d:c7:cc:1e:c8:a6:34:8a:8f:87:90:f9:
         12:2e:30:be:9b:e8:4d:0f:4b:80:60:5d:f6:3a:83:79:39:41:
         39:63:ee:16:ba:65:83:ac:b1:80:e1:da:44:41:a7:2a:88:4b:
         6a:78:7b:89:a4:db:3c:4c:4c:09:dd:44:ce:77:e6:91:a4:b8:
         f2:a5:eb:6d:6e:c4:36:92:51:55:65:0b:05:38:c9:3a:7e:0b:
         da:3a:ad:cd:58:61:ec:af:c7:1d:c7:50:4c:49:56:97:07:30:
         b1:34:85:ab:1b:bd:d2:e1:26:99:e4:00:33:c6:e6:cd:75:cd:
         a5:71:c6:ed:79:49:55:1d:5c:93:68:90:4e:00:8e:3a:ce:e7:
         b0:91:9c:ad:16:c6:84:c7:66:4b:12:7f:2c:71:e6:c1:d3:d6:
         2b:06:96:90:9f:bc:b2:2f:c4:41:89:65:88:0d:11:60:9d:88:
         e8:3d:63:54:13:30:23:ac:f0:b8:1e:57:53:45:ae:34:92:21:
         0f:74:e9:e8:fd:be:21:2c:46:b2:1f:a8:94:c8:9d:9f:44:23:
         ad:86:59:e7:a0:11:62:b6:0a:25:d6:61:ce:87:09:ec:2d:d3:
         39:01:86:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:04:13 2026 by rpki-client