Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/d1327112-6fee-3b10-9c7a-5bbf717bff8d.roa
File:                     d1327112-6fee-3b10-9c7a-5bbf717bff8d.roa (raw, json)
Hash identifier:          Y1fTzkpFbgeNsM45ZQGPAFxW0oDWPYDL/vKGyWkzqpk=
Subject key identifier:   BF:AD:B3:65:86:F5:34:33:36:34:2D:7E:97:1F:91:CC:33:6A:E1:EA
Certificate issuer:       /CN=932105b1-ce56-44a7-9670-6f4e56578ef8
Certificate serial:       010D0C9F4328584D4A8F8738D3F8394C3DCA3F00
Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/d1327112-6fee-3b10-9c7a-5bbf717bff8d.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     136557
IP address blocks:        2602:f7f8:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:87:38:d3:f8:39:4c:3d:ca:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=62b5b8dc-a1d9-44c2-9e56-469740d36a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e5:98:db:85:b5:7d:72:7d:63:7d:92:34:3d:
                    30:fa:d2:80:c0:e6:56:a5:3e:04:86:b8:b4:a2:90:
                    0a:8e:2a:9c:0e:64:78:90:07:58:30:52:97:52:0f:
                    d9:33:b4:76:21:70:1b:c2:98:85:e3:e1:00:ad:84:
                    1c:76:41:5c:cb:77:da:6a:67:d7:69:bc:93:5b:95:
                    c5:d7:0c:f9:dd:08:51:38:2d:34:f3:b1:81:73:8f:
                    1f:15:e9:47:05:77:a7:48:96:d8:5c:68:56:1a:f7:
                    c7:7c:48:b0:2d:68:06:71:b9:dc:13:a7:35:b3:44:
                    c8:62:01:e2:3e:c1:11:9b:01:04:9a:9f:23:7e:85:
                    3e:17:87:ce:10:7b:e8:62:4b:80:da:ee:63:49:69:
                    d0:c4:82:c9:27:82:09:b8:0c:90:87:85:ce:42:c0:
                    30:2f:0d:e0:49:71:ac:50:04:83:50:8d:16:ca:c7:
                    fe:eb:24:de:03:03:b2:9c:68:ff:9b:cc:00:20:67:
                    c9:5d:a2:ea:3d:c7:77:71:47:e8:8b:fc:ce:33:f8:
                    14:9f:6d:20:7d:a2:c8:1e:cf:13:f0:49:2a:b3:b4:
                    98:01:da:6e:fe:3b:71:20:12:df:d1:c9:55:11:41:
                    1c:51:b1:a7:45:29:ab:f7:9b:34:94:4f:70:73:6b:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AD:B3:65:86:F5:34:33:36:34:2D:7E:97:1F:91:CC:33:6A:E1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/d1327112-6fee-3b10-9c7a-5bbf717bff8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7f8:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:19:20:1d:58:3c:af:60:ba:0b:49:d9:30:f4:4d:77:68:5a:
         d7:94:22:c4:2b:43:e4:5b:5e:85:00:b2:b3:ef:02:0d:cb:a2:
         88:f0:fa:87:91:3b:aa:b9:c3:b7:95:3a:0c:ae:5e:f8:af:2d:
         14:49:d5:d2:8c:2e:7d:1b:50:de:81:cf:c9:2b:ad:55:47:1e:
         79:77:a4:50:2e:1b:cb:7d:c4:5e:14:cc:21:27:13:c2:07:25:
         0d:73:fa:91:55:ac:48:7b:0b:87:56:b9:f7:cb:f8:3a:e4:56:
         7d:61:a4:02:72:2c:c4:02:6d:ba:4a:a0:88:a9:fe:e4:43:60:
         b2:e0:81:08:75:93:3f:a7:98:b8:0c:53:f3:9c:54:74:96:60:
         51:a0:f8:88:af:46:97:12:58:55:58:b9:df:fc:79:13:bd:0a:
         9b:14:5d:09:8c:ae:7a:7b:ec:60:89:3a:91:19:1d:38:fa:39:
         a0:91:96:8e:ff:47:87:04:96:ed:4e:f9:15:79:e3:ad:d1:49:
         20:3d:bb:14:66:27:df:9f:f6:5b:9b:02:c1:c8:35:48:de:b2:
         d3:20:17:b5:b8:77:96:93:72:de:5b:3f:91:3c:6d:1a:3f:09:
         01:54:0a:32:c0:b6:23:10:19:54:1d:5b:d2:7c:74:ec:b0:eb:
         ce:1d:2f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:20 2026 by rpki-client