Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/e941d59f-200b-3728-943a-a6f50e46f88b.roa
File:                     e941d59f-200b-3728-943a-a6f50e46f88b.roa (raw, json)
Hash identifier:          j7W154vxihOHs7TMGXYdrwiMu7qjf2QLtx3zzDxCsaA=
Subject key identifier:   DE:6E:3E:6B:F5:67:46:98:E1:BA:9A:86:7A:83:AF:47:25:67:08:9A
Certificate issuer:       /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial:       010D0C9F4328584D20AF7C12FDE4385FE032E2C0
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/e941d59f-200b-3728-943a-a6f50e46f88b.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     53388
IP address blocks:        2602:f7a8::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:7c:12:fd:e4:38:5f:e0:32:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=c98e492d-b329-416f-9a5c-0ead40044068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:dd:9e:aa:c8:9d:e3:00:30:d2:e2:16:7c:
                    dd:f0:e6:c1:ab:99:65:1b:9d:1b:31:8a:6d:83:46:
                    0f:73:e3:5d:48:b3:9b:1f:49:b5:93:37:8b:db:4b:
                    fa:73:e3:5b:8e:b5:fe:2c:f5:49:18:d4:1f:c5:bb:
                    40:13:fa:e7:62:2a:91:0d:d8:62:81:e3:dd:14:2f:
                    f0:f2:97:83:5a:d1:7c:42:20:54:fb:65:3c:4f:7f:
                    42:18:31:8f:19:b5:4c:9d:53:a4:f6:6a:34:dd:e9:
                    76:ba:62:65:af:f2:a6:2d:09:fb:e4:7e:5e:fa:fb:
                    27:2b:93:83:6c:e5:52:d3:7e:4f:e6:33:8e:ea:31:
                    4d:39:65:5c:fa:f2:3f:a1:bf:9f:2f:9f:31:54:b3:
                    ad:e3:3e:0e:60:2b:3b:a3:fd:f6:7b:2a:57:8f:82:
                    e5:5b:57:bf:9e:7e:4e:be:a1:b7:52:90:2e:e0:02:
                    f9:e1:11:ae:79:5e:29:ff:79:bd:26:81:53:6e:7b:
                    1b:5d:5f:e6:39:6d:76:19:a2:59:f4:40:d6:8c:64:
                    9a:bf:9b:68:2e:d7:07:6e:8d:d1:00:29:e2:88:73:
                    a2:5a:7c:73:77:92:c8:3d:ed:b2:7d:e2:b3:0a:cf:
                    c5:c2:65:e5:9a:d2:01:0b:be:88:2e:78:09:46:be:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6E:3E:6B:F5:67:46:98:E1:BA:9A:86:7A:83:AF:47:25:67:08:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/e941d59f-200b-3728-943a-a6f50e46f88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl

            X509v3 Authority Key Identifier:
                keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d6:5d:f7:95:8d:c5:50:eb:77:78:95:d7:a9:60:b8:36:c4:
         85:55:02:b5:76:5a:f8:ce:22:c6:19:ad:da:6d:52:00:de:49:
         fd:d1:c7:d9:5b:3d:8c:44:f1:b1:08:ac:bc:67:21:0e:f7:70:
         48:56:db:1a:4e:88:63:a3:29:d5:0c:e6:1b:cd:64:78:fb:83:
         a0:55:3e:70:18:c3:56:12:7a:6f:13:f8:84:ef:f6:1c:f4:54:
         af:fc:e4:66:4e:dc:9e:14:be:bb:96:e2:13:d3:06:e0:42:5e:
         4c:33:46:4d:92:c3:0d:1f:a0:69:df:cd:81:1a:b4:51:94:ae:
         05:37:95:90:3d:79:d2:c1:f4:fd:ae:7b:47:ad:d6:45:19:2f:
         a3:ed:ce:23:b4:e7:a7:4d:17:99:dd:85:bc:d0:3f:c2:46:b2:
         00:15:3a:33:3e:50:13:56:15:ac:eb:ae:76:88:a6:a5:ad:31:
         73:87:32:ac:59:b2:81:5d:f4:f2:91:15:2f:ad:05:7c:8d:d7:
         4d:1b:f2:59:c9:85:d9:31:af:77:82:78:a0:b6:c5:12:6c:16:
         92:63:08:12:68:f5:f7:17:f6:9e:22:fa:f3:70:1b:dc:ab:bd:
         49:d5:82:48:3c:8a:68:b7:cd:5d:28:21:81:be:b6:87:61:09:
         69:f2:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:57 2026 by rpki-client