Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cceb834d-6b62-3186-a463-5dbcb9ade471.roa
File:                     cceb834d-6b62-3186-a463-5dbcb9ade471.roa (raw, json)
Hash identifier:          6+m4o37FRw61fBfGR6pO651yZ9t3dYOhobjdQdy5nbY=
Subject key identifier:   4A:24:D7:2F:65:AE:C3:AF:AA:B8:57:97:E1:44:05:C2:A9:1E:32:33
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95F008FEA4A42CE53265E350
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cceb834d-6b62-3186-a463-5dbcb9ade471.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:204b::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:08:fe:a4:a4:2c:e5:32:65:e3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=7ab05030-0b9a-4fd6-92cc-494985c82712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:89:08:5c:e0:1b:51:72:ba:f1:80:5c:c9:
                    9b:e1:56:50:5a:cb:2f:1d:ab:f5:75:01:4a:9c:a3:
                    e2:77:df:a9:17:93:f9:f2:7e:c2:d7:f4:8a:84:99:
                    fe:8e:7f:5c:e5:1f:6c:ed:b0:a2:e2:7b:db:49:0d:
                    81:34:36:28:7b:ad:d5:9b:9f:fc:ae:85:25:93:ef:
                    33:af:af:06:ff:dc:db:69:b5:f7:1b:c2:81:c5:be:
                    9c:d5:dd:38:92:c3:ee:2c:04:41:53:df:04:c4:15:
                    df:c8:64:23:6b:98:5d:3e:45:df:a2:72:54:35:ee:
                    52:2b:53:49:36:d4:e4:78:6e:a5:bf:a2:91:50:f7:
                    08:bd:9e:b2:74:1c:b6:1b:45:9a:a3:e9:fa:c2:1f:
                    7d:f2:3d:07:57:d6:fe:6a:ea:b7:c1:ae:8c:0f:60:
                    aa:7f:ce:bb:fa:62:b3:e4:a3:62:90:82:cc:60:95:
                    0c:25:9c:04:72:9b:73:15:83:f4:cc:03:03:17:a2:
                    1f:45:67:df:4a:34:f5:bc:93:2b:77:82:fb:d3:be:
                    33:a9:d8:11:ea:64:77:a5:46:e6:2b:cc:2f:40:f6:
                    5b:00:7d:bb:ba:d6:88:68:83:cc:04:f7:3f:7e:ea:
                    7a:44:6b:d3:78:51:c0:e2:5b:b4:11:0b:09:3b:80:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:24:D7:2F:65:AE:C3:AF:AA:B8:57:97:E1:44:05:C2:A9:1E:32:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/cceb834d-6b62-3186-a463-5dbcb9ade471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:204b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:38:fb:ef:1b:26:a2:ec:ae:2b:93:12:5a:aa:ea:d1:a3:
         3c:e5:24:6a:91:6e:98:30:9f:3a:14:04:6b:bb:d7:47:ed:b1:
         90:75:34:08:99:3a:86:ba:5a:6c:a8:66:6b:58:54:bb:ca:5f:
         06:d1:fa:ac:ea:05:55:2e:e5:07:4a:b4:11:a5:49:e7:4e:0b:
         7e:bd:87:0d:7d:1a:96:ab:cf:3c:c7:b4:6f:9b:d5:06:78:34:
         53:05:6f:ce:bc:c1:2b:f0:7c:64:28:d9:9f:25:ec:ae:5c:95:
         ae:de:57:9b:c7:4b:4c:af:cb:02:b4:d8:a5:9d:dd:13:35:96:
         dc:f9:8b:df:10:2f:d2:a1:ba:2c:8d:a9:63:d6:ff:65:97:b7:
         9e:8c:0c:12:c2:09:94:f1:8c:ca:77:76:3e:00:d9:be:4d:0d:
         35:c2:0e:f7:99:05:a0:6a:ab:8c:b8:e9:e4:b5:ef:fb:c1:b0:
         5e:1b:c5:08:37:d2:7a:79:d4:65:cf:58:2e:cb:1a:f9:0f:e0:
         ba:d5:c9:ba:7c:17:38:78:c3:6f:fa:cd:39:bf:96:84:0b:08:
         cc:81:cc:14:28:6a:55:de:d8:c0:50:0a:ca:0e:f1:78:8a:ed:
         05:16:62:f8:2f:5c:3e:e9:15:3a:43:31:17:45:be:20:37:be:
         8d:7d:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:05:16 2026 by rpki-client