Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/52158dbc-adfa-3c98-807d-3384da2a4909.roa
File:                     52158dbc-adfa-3c98-807d-3384da2a4909.roa (raw, json)
Hash identifier:          I9oZIMALcb+Iwe7LPYtulO9IJxbHrIK0iduK0w75Jio=
Subject key identifier:   8E:F5:50:91:BF:D7:3F:B1:19:6B:37:E8:02:7E:F1:3D:BC:CD:06:21
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584E7634DF01C6E18B4469E03D80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/52158dbc-adfa-3c98-807d-3384da2a4909.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     399976
IP address blocks:        2602:80c:2041::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:df:01:c6:e1:8b:44:69:e0:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=0f9f7799-3f13-470a-a147-58d8a26a48b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:b4:21:38:49:08:a6:99:c9:eb:0e:19:1e:
                    ee:26:4f:44:53:23:e2:89:9e:05:44:3d:f9:71:61:
                    f5:51:a7:1b:91:be:21:a2:f6:78:6d:98:7b:a1:f4:
                    ea:9d:db:ff:61:da:ce:f5:c0:46:61:c3:16:01:b1:
                    cc:0d:03:41:fd:59:71:7d:42:f4:18:9e:b4:96:94:
                    ce:9b:28:12:ea:18:3a:bb:b3:34:65:13:71:42:b2:
                    0b:44:e4:3a:43:88:12:ac:86:06:b2:3c:26:1f:2a:
                    b1:dd:e7:08:4d:8c:34:45:58:81:c5:4a:86:08:b9:
                    89:fa:36:02:cb:b7:cd:f1:11:61:70:ae:d4:43:f1:
                    ef:42:6b:d4:e9:6d:4c:8d:97:8f:4f:9d:2c:a0:83:
                    b0:da:68:47:85:19:fb:cd:2b:5d:a8:a4:49:85:23:
                    3c:1a:ba:8d:82:27:50:36:c2:9f:b4:ea:ca:6b:38:
                    11:7b:9c:9a:d9:b0:bd:1c:29:05:fe:8e:fb:41:fb:
                    b5:d1:88:f7:6e:01:ab:5c:77:27:ab:73:1e:ec:fb:
                    c6:cc:84:a6:29:fb:73:e1:a2:69:7b:53:ec:24:d6:
                    f0:1f:06:5a:0d:96:b6:b7:02:91:02:c9:1c:0f:97:
                    61:fb:68:00:3b:40:b5:79:26:a2:58:ed:90:b2:dd:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F5:50:91:BF:D7:3F:B1:19:6B:37:E8:02:7E:F1:3D:BC:CD:06:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/52158dbc-adfa-3c98-807d-3384da2a4909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2041::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:b2:e1:a6:67:fb:a1:9b:a3:54:72:60:e6:f8:3d:1a:e1:
         ad:a0:ce:d1:ce:0f:6a:7c:e6:70:4d:9d:a9:05:75:44:41:f4:
         bb:b2:c5:c7:7d:d3:68:a6:17:f8:7a:34:1c:3e:68:1f:6e:ca:
         08:a3:db:03:00:36:d3:d2:f1:58:16:88:d9:97:06:18:fa:a0:
         a4:a1:54:fd:2c:81:a5:e2:66:60:f9:a4:37:74:3a:28:c2:3b:
         72:bc:9d:c7:3a:b5:f8:76:1a:34:f6:cd:72:7d:04:3b:e3:69:
         3f:69:3a:8b:d3:5d:7b:5b:9e:16:c8:ce:a8:d6:50:74:3f:04:
         2a:6a:8d:15:23:c3:cd:b1:e7:aa:00:73:96:2d:81:37:e4:c3:
         75:89:3f:e6:6f:fb:31:de:49:fd:22:11:fc:1c:31:03:dd:73:
         f5:c6:70:15:7e:bd:eb:a1:52:1a:87:6c:a2:4b:96:5f:31:6d:
         35:31:9b:93:1b:3a:ad:c7:cf:cb:b0:a9:c4:86:5e:1f:1f:72:
         2b:80:02:d7:e5:50:6a:76:86:f3:33:cf:9a:06:dc:86:52:f1:
         46:d5:82:39:41:67:65:0f:b8:a7:60:73:76:9a:c4:f0:8d:7e:
         c7:ac:38:8c:67:37:96:f0:f4:f6:a8:77:22:e3:a0:0a:1b:57:
         1c:f3:e4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:39 2026 by rpki-client