Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/f6502fe4-9069-3035-a883-0e08f96d62e9.roa
File:                     f6502fe4-9069-3035-a883-0e08f96d62e9.roa (raw, json)
Hash identifier:          HdGjO7cMTX6w7elDF8marQHdCmE47Rrc+EKKr8tjwj8=
Subject key identifier:   5E:59:E1:12:94:8A:35:30:C7:E9:EF:84:CC:3A:DD:54:07:53:99:CC
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584D300A52F0D785BAB9C2CA70E0
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/f6502fe4-9069-3035-a883-0e08f96d62e9.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     26858
IP address blocks:        2607:43c1::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:52:f0:d7:85:ba:b9:c2:ca:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=a5528711-f53a-4248-9dab-1d5c03a5b2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:62:c6:14:c4:eb:ca:11:f2:e6:a9:86:c4:
                    03:be:73:87:d1:bc:48:ac:49:93:f9:53:55:60:4f:
                    9d:26:d9:89:54:dd:7f:0f:f7:ba:a0:b7:b0:20:f4:
                    fe:48:80:11:7e:39:a6:c5:d3:ff:5d:cf:11:33:a1:
                    4a:6b:0d:ec:95:23:06:28:4e:2f:13:5f:c8:bb:de:
                    f4:da:2d:10:7e:8f:fc:55:a3:b0:e0:11:33:6f:23:
                    03:49:64:be:dc:de:ac:37:be:1c:05:5f:b9:78:63:
                    f6:6c:ca:d0:1e:db:16:00:b5:99:85:20:07:67:e5:
                    20:4e:a5:e0:11:6c:43:a4:37:ac:61:22:4b:46:df:
                    1a:30:87:4c:c5:cd:34:58:de:b5:60:dd:4b:4e:e7:
                    1e:df:58:21:77:50:66:72:e1:df:ca:ed:e4:e9:bd:
                    75:bf:cc:8c:d0:9e:91:c2:c6:b1:71:7f:8f:9c:b8:
                    6c:b2:78:db:f2:c9:94:b0:3b:48:92:f9:58:fe:e1:
                    5e:0d:41:5b:dd:e5:ae:e8:21:4d:2f:67:49:02:8a:
                    95:90:82:8b:78:29:26:67:9e:70:8c:83:98:bd:b1:
                    21:7b:e3:69:d0:0f:06:ac:d0:67:53:52:78:af:0f:
                    a0:fb:11:02:d4:ac:29:55:59:28:86:e4:10:bc:7b:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:59:E1:12:94:8A:35:30:C7:E9:EF:84:CC:3A:DD:54:07:53:99:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/f6502fe4-9069-3035-a883-0e08f96d62e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:43c1::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:73:81:84:65:9a:e5:9e:0c:07:18:60:93:3b:06:9d:a9:dd:
         7b:58:3f:97:27:33:99:af:1b:2b:60:6b:6e:5f:53:63:70:8e:
         b3:d0:d8:df:92:4e:39:17:c5:fb:52:ef:1d:b4:10:2b:10:34:
         34:a4:b0:54:d5:11:53:de:25:4b:b0:19:56:fd:9d:18:96:55:
         2a:2c:46:dd:c2:9f:72:a1:68:5a:8e:db:43:96:47:d8:1e:d9:
         2e:76:a9:88:f0:65:1a:b9:bb:97:96:4b:33:9d:8d:32:c4:c2:
         fc:63:5d:d4:52:73:7b:70:9a:bf:83:fa:2f:b8:b7:5e:ed:66:
         f0:49:59:02:55:fd:ee:1c:85:d0:5a:d7:6b:d4:f1:97:91:0e:
         85:75:00:1f:0c:48:63:4f:01:7c:29:ce:fb:b5:51:02:fe:f0:
         76:9d:85:ab:4a:07:74:56:e4:3b:20:9d:4c:5b:b9:92:81:bc:
         f8:b7:32:8d:ed:48:24:a3:43:7b:e6:f0:95:75:71:f0:8f:cb:
         96:15:ba:6b:df:4c:bb:19:e4:6c:bf:a1:8c:32:05:97:2e:a1:
         be:64:b3:c7:f3:8b:6a:1d:09:2c:e3:92:7d:f5:4f:cf:f4:81:
         e5:e4:c4:4e:cf:1e:bc:2c:00:95:60:49:69:15:9a:f5:b6:3d:
         0d:fc:f1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:28 2026 by rpki-client