Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/cbed3da7-ba4b-3d14-8402-10a446571c45.roa
File:                     cbed3da7-ba4b-3d14-8402-10a446571c45.roa (raw, json)
Hash identifier:          kgVfWuv9fxj6J6oaHF67R/5V8UrGHqTQULq77yDmxW4=
Subject key identifier:   DC:7D:38:EA:A2:A8:2A:CE:86:F3:BC:09:53:93:44:4F:FA:E5:86:B2
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F4328584D343A162991D15FC1658C1280
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/cbed3da7-ba4b-3d14-8402-10a446571c45.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     33436
IP address blocks:        2602:fd09::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:16:29:91:d1:5f:c1:65:8c:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=7b25b0c6-2363-451d-96de-b702241eafa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e0:9f:6b:60:f9:49:32:43:f9:6c:3e:21:c2:
                    a6:8c:d6:e8:4a:f2:b0:3f:c6:a3:9a:10:a7:bd:50:
                    54:ef:fe:96:75:c3:11:38:c4:81:f8:5d:b6:08:6b:
                    07:5c:4e:c9:bb:1f:8f:29:04:b0:d6:0b:32:62:88:
                    f2:55:a1:fa:a1:3d:c0:06:1c:e0:41:5c:d5:a2:15:
                    59:e4:9d:4b:f4:6a:4d:93:9e:b1:45:40:17:2c:96:
                    59:69:9a:b5:ce:2b:7a:97:5f:b1:08:84:28:d1:db:
                    5e:41:5f:06:30:c2:0e:0d:de:1d:a4:fb:e5:a7:9a:
                    ca:38:16:60:36:ae:9e:a1:25:7d:17:2e:ff:94:96:
                    70:6b:b7:76:76:9b:46:69:d9:76:4c:4e:09:0e:99:
                    e2:3c:5c:80:fe:16:9c:e6:7b:ce:11:c4:7d:ee:13:
                    61:73:23:0d:53:c5:1e:d3:46:6b:f3:73:3e:8d:c6:
                    05:64:5e:1c:c9:59:f4:78:dc:69:28:c6:d7:c7:6c:
                    f4:c7:69:12:72:4a:c6:e8:0e:f6:cd:39:8d:3e:a4:
                    10:a8:86:c6:45:0b:58:88:c2:53:f9:b8:ad:c3:f8:
                    22:0d:8e:f5:de:66:8f:3f:3b:68:b6:9f:b5:ce:f8:
                    95:fc:fa:cf:7e:9a:11:d9:b3:7c:75:2b:23:ef:3e:
                    1f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7D:38:EA:A2:A8:2A:CE:86:F3:BC:09:53:93:44:4F:FA:E5:86:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/cbed3da7-ba4b-3d14-8402-10a446571c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd09::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:5a:09:3a:9f:b5:b7:73:ad:8c:0d:6f:c4:8d:7e:56:bb:
         14:8e:cb:71:05:6b:15:83:0b:93:dd:3e:c5:d9:30:75:f8:e0:
         ad:af:da:82:dd:6a:82:0a:7a:2e:68:8a:81:00:01:db:f3:61:
         b1:27:c9:13:2c:f2:fa:ed:9f:df:32:5a:93:cc:8e:d9:88:b8:
         74:e7:c3:86:b1:ec:9c:70:ba:ba:5e:1a:11:d4:83:4f:34:c2:
         af:94:f9:3b:c6:af:c9:a4:cf:24:43:85:6b:55:25:6c:ee:8e:
         5c:18:ee:58:91:25:d5:b8:43:95:bb:5b:63:c4:cf:1f:28:88:
         11:05:58:60:ed:19:64:57:75:18:db:b2:74:b9:d6:8d:4a:50:
         6d:77:24:4a:61:13:51:aa:6e:9f:6d:73:6c:13:3d:60:93:95:
         3b:96:cc:cd:dd:5e:2a:0c:8d:01:9b:46:56:e5:fa:4f:60:eb:
         4f:f3:c7:5e:77:4e:78:f4:f5:d0:28:16:f2:0e:6e:02:9d:82:
         f5:b7:32:9f:bb:9a:72:b2:44:67:da:f2:aa:b5:c0:f3:19:d3:
         48:97:33:cf:cb:14:32:9f:74:ea:7d:ad:7d:38:72:7c:e2:cf:
         f6:f3:62:65:7e:36:ac:29:1b:d0:39:e3:83:27:31:da:f1:d8:
         68:08:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:13 2026 by rpki-client