Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa
File:                     34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa (raw, json)
Hash identifier:          mrsU4NJw/NMvYEO92Fc0O2/TEl36UJzKuhkh8ooJeRE=
Subject key identifier:   B8:D4:84:78:03:C0:FD:80:09:D5:32:AD:5B:C9:5D:E0:48:B9:8A:F1
Certificate issuer:       /CN=371ab6b7-8872-4856-a33d-61dbefb13d34
Certificate serial:       010D0C9F4328584D300A19DAEC93467CECF45000
Authority key identifier: 79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     11064
IP address blocks:        2602:f80b::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:19:da:ec:93:46:7c:ec:f4:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ab6b7-8872-4856-a33d-61dbefb13d34
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=4edd420e-5646-43de-88f8-037640bf65bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:91:a0:cf:d6:7b:f5:67:95:97:9e:73:1a:
                    34:f8:54:3f:97:fb:43:8e:94:c8:5d:50:cc:f1:79:
                    9f:94:cf:fc:79:87:8c:62:b7:6f:cd:2d:e9:93:8b:
                    a9:71:e6:47:49:86:2b:75:ed:d3:51:8a:89:64:1a:
                    f0:9c:c9:f1:c8:57:bc:92:ff:1a:86:39:fd:41:2f:
                    e3:7b:97:b1:3f:f4:51:92:37:23:71:56:98:68:d7:
                    99:4d:10:a4:9d:3e:5b:93:01:18:22:d4:22:c1:02:
                    8e:fd:8d:0d:1b:0f:3f:b9:0f:20:8a:60:6c:0d:d4:
                    35:76:cf:2b:1e:fa:2b:11:57:e4:99:b8:26:aa:b8:
                    d8:3f:04:60:df:15:db:42:aa:30:0c:b0:46:b9:c8:
                    dd:6b:1a:ae:b8:e7:e2:8e:b9:30:a0:4e:ef:f5:e0:
                    fd:25:93:e3:9b:81:b6:9a:48:8c:5e:8f:41:f7:d2:
                    a9:9f:64:d2:ac:b0:a7:2a:18:69:1f:d0:66:eb:9c:
                    5f:c6:b4:54:d2:a8:8d:5b:79:03:66:40:12:01:57:
                    84:e1:d1:f8:63:08:20:e2:d1:18:d5:51:a8:55:a7:
                    50:19:0a:d9:d7:a6:6f:fc:c8:d4:0c:72:dc:4b:2b:
                    40:07:ca:36:e0:27:21:74:d9:90:ab:8c:43:2c:49:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D4:84:78:03:C0:FD:80:09:D5:32:AD:5B:C9:5D:E0:48:B9:8A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl

            X509v3 Authority Key Identifier:
                keyid:79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f80b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:48:00:0a:3e:e4:57:84:7c:7e:d1:a9:2e:34:27:7f:61:6f:
         af:15:cf:0f:e1:53:0a:4a:c0:1e:e4:d9:15:44:5e:e5:88:7b:
         d0:58:9e:34:9c:ea:e7:bf:75:a3:97:a3:4f:e8:ed:ae:97:1a:
         2b:f1:18:e1:02:41:8b:e5:0b:ad:33:71:b2:c7:21:e1:12:f2:
         0a:d2:20:a4:27:a8:56:5a:7b:ba:bd:be:5a:b9:90:e3:42:9a:
         69:48:9a:ba:71:a4:ff:28:b3:2f:80:b7:62:f2:55:5b:c3:1b:
         79:f3:d6:8e:e7:16:3e:71:f1:59:90:63:a1:96:f3:1f:54:fb:
         f6:30:c6:86:94:69:3a:79:c4:6b:3d:4a:aa:9e:3f:3c:31:97:
         28:e3:af:ef:64:76:9c:12:a8:7f:f8:40:c5:66:14:99:95:07:
         a9:33:dc:4f:78:72:a6:91:49:25:e0:92:45:9a:18:fa:6f:fc:
         2a:df:ca:71:22:fc:e0:f0:28:ab:a2:6b:8d:6b:ec:77:7e:5c:
         b9:0d:f3:12:1c:6e:84:92:00:f5:b0:0e:6a:60:bd:58:aa:99:
         61:85:81:1e:7e:70:9a:b0:f7:b4:21:ed:bf:51:8e:e6:12:cc:
         d7:e4:c1:b9:c5:b3:0d:9a:73:84:d6:f1:c1:a3:f2:12:11:d2:
         1f:16:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:43:47 2026 by rpki-client