Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/94509b41-d76f-32b6-8e31-ead31b208606.roa
File:                     94509b41-d76f-32b6-8e31-ead31b208606.roa (raw, json)
Hash identifier:          b0PJKFR/GzKWSw2PBZZ8h5jOPFXPB4NHu4Rv9mR5kbc=
Subject key identifier:   BE:C7:F1:C7:3A:EC:C7:50:86:E5:66:4D:97:0F:E5:22:7D:C8:C0:E8
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584DA6B00F0CD090663629DC64A0
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/94509b41-d76f-32b6-8e31-ead31b208606.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     40818
IP address blocks:        2602:fdeb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:0f:0c:d0:90:66:36:29:dc:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=52d32192-419d-4fcf-81ee-a6993ed8c371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:22:3f:1b:c9:c6:ff:1a:4d:dc:f8:a7:2d:e8:
                    d4:d7:9c:da:40:92:e1:b0:3a:a2:8a:37:c0:82:9b:
                    f9:3c:21:72:c8:c1:9e:de:88:49:49:1d:cf:30:2a:
                    af:ce:4d:be:6e:bb:27:a0:58:a9:e5:c7:6c:fd:5e:
                    4f:2d:f0:cc:1c:ef:30:89:24:6b:6c:6b:f8:e1:a8:
                    bc:04:2f:12:e9:f0:d4:19:b6:ea:63:3a:8e:87:5e:
                    3d:2b:0b:cf:66:89:64:ee:03:f9:cb:11:2a:57:2f:
                    ea:c0:f2:0d:2f:5b:65:68:2c:53:d4:a6:9e:fe:55:
                    32:55:8b:f2:78:ea:51:71:45:bf:52:ab:64:3e:08:
                    7f:f7:ae:d9:6d:4d:a9:de:75:07:8a:4e:df:11:27:
                    0e:60:9e:f7:ef:a5:06:22:0a:ee:ce:98:c0:a1:34:
                    4e:3b:93:86:34:81:aa:8e:0c:e5:57:a6:52:fd:42:
                    4d:92:ac:bd:ce:cb:23:13:24:07:e5:83:21:76:0e:
                    dc:c3:ba:1f:66:aa:28:71:08:c7:7f:ef:67:47:41:
                    b0:31:d2:bf:9f:38:d5:c3:ee:f8:f2:da:c0:2a:06:
                    aa:17:8f:ce:17:16:76:50:4d:36:b4:c7:12:0e:ca:
                    55:a1:cb:6b:02:d6:11:40:95:ef:58:a1:a1:68:42:
                    1e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C7:F1:C7:3A:EC:C7:50:86:E5:66:4D:97:0F:E5:22:7D:C8:C0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/94509b41-d76f-32b6-8e31-ead31b208606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6a:c1:3e:f4:0e:f1:24:4c:54:47:12:b2:da:78:ba:7c:a7:
         f5:cf:9a:3f:7e:bc:1f:9c:66:0b:a4:64:4f:4e:2e:bd:bc:31:
         fb:c1:ce:5b:25:3d:af:97:99:c7:fd:1c:0a:3c:f4:69:77:dd:
         84:77:1c:b7:cc:19:6d:0c:b3:a3:23:74:82:7b:e9:0d:8f:35:
         64:42:f6:c3:b0:a7:4d:09:65:31:1a:2a:ad:44:d6:1b:7b:23:
         ed:85:4d:f2:00:07:71:a5:86:24:04:91:39:46:e6:96:af:19:
         55:0a:aa:31:d4:3f:bb:c7:48:a2:12:f6:72:f0:dd:ad:48:01:
         a9:f5:00:15:97:0d:ac:54:1d:c7:da:44:e4:7f:cf:0c:4e:cb:
         58:6b:01:18:79:86:2f:f4:6f:b3:7a:8e:56:23:25:f5:fc:c1:
         ce:53:83:13:8a:0b:0e:13:e1:e2:4e:09:a6:67:bd:35:5b:94:
         49:90:19:85:ca:96:cf:43:35:5d:45:7a:b7:7d:0d:8f:ca:25:
         c3:3f:e4:21:02:93:3d:0e:9e:b1:80:d5:aa:01:0c:a0:72:a6:
         a2:a5:16:98:4c:d9:fd:24:64:94:a3:2c:0c:74:04:c7:2a:75:
         3b:6c:c5:53:f8:e5:d2:b8:74:50:64:d0:74:70:b2:21:f1:14:
         7e:fe:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:53:33 2026 by rpki-client