Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa
File:                     643dea32-ad94-36d9-a6c5-90366af478b2.roa (raw, json)
Hash identifier:          CUzpCI9GKnaRD/Jc8Ca0WikoTA+FlKZ9h0+XU+QFVU0=
Subject key identifier:   24:EF:C1:3D:A5:1D:7E:6C:25:F6:D1:64:65:9E:12:D8:23:E2:BB:09
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584DB4A577C38D41073F761F4700
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     40249
IP address blocks:        2602:fb78:10::/44 maxlen: 48
                          2602:fb78:20::/44 maxlen: 48
                          2602:fb78:30::/44 maxlen: 48
                          2602:fb78:40::/44 maxlen: 48
                          2602:fb78:50::/44 maxlen: 48
                          2602:fb78:60::/44 maxlen: 48
                          2602:fb78:70::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:77:c3:8d:41:07:3f:76:1f:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=cf4ab37b-536b-4ac0-b571-07a035f141e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:36:93:c4:55:49:d6:21:7a:c0:36:03:18:
                    b7:55:9e:3b:09:34:ef:1f:e7:2f:5c:74:e2:cb:e5:
                    06:6f:31:b0:f2:20:33:d2:c6:b3:bd:ff:9d:1f:92:
                    3f:fb:c5:ef:b1:2f:73:d6:50:02:7e:c1:7c:da:31:
                    71:4b:61:d4:4b:0c:9a:da:6f:73:3c:2c:a0:96:79:
                    aa:55:71:a1:a2:7c:a6:72:e8:ab:b4:bd:55:ea:4a:
                    69:a9:3b:32:45:1c:b9:e6:b5:e0:96:e7:e7:5d:83:
                    c4:60:02:96:83:4a:71:92:c1:20:0e:c1:c0:26:52:
                    86:8b:a5:12:61:e6:db:d5:db:c0:d4:dd:ae:29:32:
                    f8:f3:f3:b3:7b:e0:37:a3:4f:c9:c0:fa:aa:73:ed:
                    9d:27:ee:31:15:0b:29:5d:42:41:25:d5:40:bc:94:
                    84:f6:3d:ed:6c:71:f6:fe:bf:e6:92:7f:b0:7d:28:
                    b2:0f:5d:61:4a:fc:ea:d8:63:e9:ab:4e:49:db:a9:
                    b6:2b:b6:25:cd:67:a4:0c:a3:87:02:ff:86:39:76:
                    a7:f2:7b:4f:9f:2d:d1:16:bb:14:32:4a:24:ef:2a:
                    53:7a:2b:05:09:2c:72:58:ad:43:de:b0:54:b4:d4:
                    5b:85:e8:83:7e:5b:96:71:dd:64:c4:fb:03:6a:9c:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EF:C1:3D:A5:1D:7E:6C:25:F6:D1:64:65:9E:12:D8:23:E2:BB:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:10::-2602:fb78:7f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d7:67:52:2e:cb:bd:b5:27:f6:59:bc:b5:c2:85:cb:a6:e9:
         0e:7d:1f:7a:a8:de:6b:03:59:0e:b0:fd:2f:12:f3:b4:67:a8:
         dd:8b:af:a4:48:1a:42:eb:84:66:73:48:00:4e:4f:23:83:65:
         e1:03:a0:d1:09:e0:5e:6c:f6:0a:be:5e:27:1b:76:3a:f1:19:
         b9:b2:df:e2:b6:95:6b:07:0a:c8:ff:0c:e1:a4:17:90:1a:ec:
         fc:cc:0a:3b:aa:30:c3:33:a9:09:c6:a8:8a:fd:4e:40:d9:79:
         b9:1d:79:94:f2:1e:aa:41:48:e2:06:03:d0:e0:c7:58:fb:ae:
         61:20:6c:81:1c:ee:f7:4a:fa:54:3e:91:75:ed:26:47:5c:6d:
         cc:69:89:1a:0c:fc:13:6a:0e:58:1d:45:7d:f3:12:9c:d5:72:
         b8:c9:e1:8b:c9:e3:96:57:d6:99:aa:6b:e6:9b:df:a2:39:4e:
         72:45:82:0e:fc:70:d0:3d:7d:ff:a5:ba:43:75:b1:56:b0:94:
         ea:c0:2b:dd:07:bb:54:13:61:a4:c0:d3:1e:03:6f:f9:8a:25:
         81:0a:27:e9:b9:84:00:07:a5:f4:4f:f3:48:18:94:73:e4:b8:
         7e:1c:a3:de:0b:e5:bf:33:38:f5:6f:a3:79:ff:60:b6:5f:bf:
         07:0a:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:20 2026 by rpki-client