Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5c2a3d9c-06cf-3783-96af-58915b7ce628.roa
File:                     5c2a3d9c-06cf-3783-96af-58915b7ce628.roa (raw, json)
Hash identifier:          8zueVZK+q8qMe9tMbQql0uWXg1aIpxoYNRgKEirGyFc=
Subject key identifier:   98:44:EE:A6:6D:DE:33:53:E8:0F:0C:A0:B4:54:C5:1F:DF:28:D2:D1
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95F00A8C95C1BF7FE6592700
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5c2a3d9c-06cf-3783-96af-58915b7ce628.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:20b6::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:0a:8c:95:c1:bf:7f:e6:59:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=5545a22c-ac33-4059-874d-305bb452506b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:df:37:92:10:d5:68:46:03:56:5a:de:60:ee:
                    96:e9:69:68:96:df:f5:e5:06:14:b7:81:ae:98:f7:
                    8d:ae:61:c5:a2:df:ed:2a:59:c2:94:bf:3d:26:a1:
                    8f:4d:38:fc:1e:e7:2b:3a:7d:6c:c7:93:37:56:00:
                    69:db:e0:3d:87:e9:09:3b:ff:a1:68:bd:ee:88:29:
                    d6:75:ad:eb:67:db:a4:bc:72:f9:17:a1:64:6b:88:
                    f6:d7:60:90:3e:df:2e:72:f8:24:bd:de:2e:f3:be:
                    db:73:85:4f:4d:d4:0a:1a:c2:1f:20:76:0e:31:79:
                    11:68:bf:70:4b:68:63:64:fe:55:fc:01:18:e9:4d:
                    79:61:12:08:51:0a:9f:5f:b3:3a:ae:20:12:ed:1c:
                    6b:f2:aa:e3:65:6f:33:ad:68:86:9d:da:40:f9:7d:
                    0e:46:03:50:81:5a:c3:5f:18:0c:33:0b:98:44:be:
                    91:06:8a:81:b7:37:0e:d0:8f:5c:ae:95:88:b7:4c:
                    be:c2:a9:55:24:ea:ba:f0:e0:50:76:c1:03:ea:ca:
                    c9:e9:2b:0a:f1:2e:f7:8d:48:ef:25:07:8b:61:b7:
                    ae:7e:9c:8e:45:9d:87:08:d2:ab:ac:cf:c8:34:c4:
                    f5:23:e0:53:9a:c5:8f:a0:11:d4:90:b3:22:2f:e9:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:44:EE:A6:6D:DE:33:53:E8:0F:0C:A0:B4:54:C5:1F:DF:28:D2:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5c2a3d9c-06cf-3783-96af-58915b7ce628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:36:90:3f:ed:85:ef:4d:31:4f:a5:29:45:b2:e4:8d:2d:38:
         b1:65:70:b2:0f:3b:7f:a6:53:d6:9a:84:1e:64:c1:4f:99:03:
         ff:aa:d4:23:84:fb:d8:7d:b9:f0:86:ec:cb:db:b2:92:00:f8:
         c5:6e:53:ff:d0:a9:b3:0f:59:7c:47:84:61:b7:3d:03:4c:4f:
         85:d1:68:0e:36:38:e9:0f:f5:da:cb:97:dc:c7:5e:f1:2f:c4:
         63:d2:7b:0f:33:67:fd:c1:f6:d1:da:d4:ea:b4:ae:5b:c5:12:
         6b:bb:46:60:0c:25:0f:10:dc:49:cf:a3:cd:57:dd:e1:55:51:
         5b:6e:26:37:e7:d8:53:05:e8:38:a7:45:e1:77:63:28:f6:c7:
         68:24:03:df:de:32:93:88:7d:7d:3e:f5:a4:0c:65:1b:ef:5d:
         6b:b8:ab:7a:f4:54:3b:e4:ef:f2:f2:a5:9d:52:b1:d2:6f:02:
         a8:10:b7:f9:82:18:54:74:03:8f:d5:87:7b:f8:08:4f:57:bf:
         17:92:47:92:49:88:61:56:59:e7:cd:c2:d5:7e:55:8b:7d:af:
         ea:3e:80:1e:ab:89:27:64:9f:38:7d:74:37:77:8e:c2:33:fc:
         c2:35:62:f6:16:a3:d0:ed:05:5c:04:c4:c4:67:e2:4b:33:f8:
         0f:c1:1a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:22:08 2026 by rpki-client