Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa
File:                     76b42bc4-57ac-394d-ba88-7d614145118a.roa (raw, json)
Hash identifier:          gUAQ+XhXyfeKJhSHnjJGHRyzNG98M+LWgOThJrKkFIc=
Subject key identifier:   2E:75:5F:FD:C2:85:0B:8F:92:8B:33:2A:EA:AC:08:E1:22:6E:ED:B5
Certificate issuer:       /CN=add35f11-0294-4be9-94b7-49cac2bcb001
Certificate serial:       010D0C9F4328584E6144A92A84B62EC27D2F7C00
Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     212149
IP address blocks:        2602:fbf5::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:a9:2a:84:b6:2e:c2:7d:2f:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=406ffafc-9259-416d-a815-07c9c7836251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ae:6e:14:94:57:53:a0:c7:26:a8:2e:2f:4f:
                    71:86:a6:0a:75:22:4b:71:d2:c4:32:64:15:e5:36:
                    a7:f8:b9:3a:02:76:4b:5e:3e:2a:06:c0:9f:d1:17:
                    0b:69:cf:d6:53:85:53:2d:42:47:ae:d2:b6:97:cf:
                    d3:8f:bc:48:43:64:c6:62:a6:f4:84:f4:fc:1a:54:
                    0c:48:53:5f:4e:d3:67:50:e8:8c:fa:05:cc:87:e4:
                    2b:e2:10:0c:e9:5a:98:8b:b0:94:d1:87:5c:f5:24:
                    43:39:ce:ff:01:db:ae:2b:60:03:76:3d:92:a1:bf:
                    fc:48:41:c2:20:8c:a4:de:ad:55:2f:56:19:62:0b:
                    3c:f0:80:95:a5:0f:01:70:99:ea:99:aa:28:47:92:
                    9f:79:83:3a:c8:08:db:67:65:af:6d:ed:fb:92:74:
                    64:d3:c8:50:f0:e3:d8:cf:82:59:1f:47:68:2c:8c:
                    c7:f8:7a:ff:04:b2:32:06:8d:b5:06:fd:03:28:4e:
                    dc:a7:47:4a:30:9b:64:21:d8:ea:20:c1:5b:b8:55:
                    b9:32:1b:3e:7e:1d:1c:f4:21:02:f2:f2:93:ff:9a:
                    e7:2f:4e:05:74:21:52:a5:7b:58:8a:44:5c:9f:f4:
                    70:58:60:1f:e2:5b:b1:87:27:b8:41:49:dd:42:ac:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:75:5F:FD:C2:85:0B:8F:92:8B:33:2A:EA:AC:08:E1:22:6E:ED:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0e:9e:76:77:32:b5:34:d4:e4:15:5a:22:3e:60:39:d3:66:
         fa:0b:e2:a3:28:45:2b:c1:aa:08:68:13:f1:ae:e7:ac:9e:13:
         2a:26:d0:2c:72:11:29:47:80:ae:47:18:4a:db:d5:ad:22:4e:
         9f:be:a7:86:e7:9f:d0:ef:f5:49:df:57:88:b0:2c:9e:a3:2f:
         8f:43:4e:ee:c1:fa:d2:9c:20:e0:86:e0:b4:29:74:ba:ee:4a:
         32:0a:1a:ee:7c:ae:a8:a1:00:06:15:9c:e3:a4:0c:6f:53:92:
         04:23:af:d2:bc:f7:24:bc:1d:55:0d:e4:3e:be:ab:3e:17:42:
         56:0a:e6:88:2f:71:37:87:65:07:92:a8:9a:19:b5:d7:bb:7f:
         75:c7:14:ec:44:30:ba:45:45:79:11:67:c7:35:51:7f:73:87:
         c4:61:aa:9c:2f:25:b1:62:c5:7e:92:d3:c2:46:91:d4:7d:21:
         fe:70:e1:6c:c1:3d:33:ed:c0:7d:d9:99:4a:93:87:de:86:10:
         f5:93:b9:de:bd:9a:f4:2a:61:19:90:19:31:9d:3a:53:1f:f8:
         24:7c:6c:fc:b7:d7:18:47:69:9e:17:8f:33:48:4b:72:8f:59:
         df:bc:1d:9d:3b:6d:a9:77:b0:a1:78:96:bb:99:ba:73:f9:26:
         c2:6e:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:30:47 2026 by rpki-client