Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/f42a1026-3aa1-3d11-9f79-e7cabb078147.roa
File:                     f42a1026-3aa1-3d11-9f79-e7cabb078147.roa (raw, json)
Hash identifier:          Oh+PG3wQjz9v3lUw3qJZ7oM0xhBIJzMY6OA0XJ7LtIk=
Subject key identifier:   12:EF:A2:84:95:FA:CB:5D:58:E3:F4:7C:72:8E:F4:FC:ED:EC:B3:F8
Certificate issuer:       /CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
Certificate serial:       010D0C9F4328584DC29AE5F87BD2E80AD4D9C280
Authority key identifier: 84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/f42a1026-3aa1-3d11-9f79-e7cabb078147.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2602:fd12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:e5:f8:7b:d2:e8:0a:d4:d9:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=c8796e69-add9-4410-a5ee-d728dd9c40b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:00:0d:f4:36:39:80:b9:45:52:b2:15:d7:61:
                    09:cb:34:51:68:c8:57:f8:4d:65:d0:10:27:f9:d1:
                    55:94:70:ce:6c:07:cc:f5:3f:02:6d:00:40:01:4e:
                    e1:bd:4c:3a:76:f5:d3:6f:c3:20:55:e0:15:d7:8a:
                    6d:92:c9:85:84:e8:51:3a:b5:92:66:42:e2:e5:ca:
                    2a:28:27:91:af:eb:2d:4d:fb:9c:a4:a3:16:36:d3:
                    55:19:3e:c6:f7:5c:ff:cc:76:02:a9:6e:ac:85:11:
                    bc:04:e2:71:ca:5f:fd:a5:71:58:c3:ce:36:9e:13:
                    61:ff:61:66:f4:7c:20:11:4b:b7:dc:82:8d:26:4f:
                    90:81:3f:25:8f:c5:c9:bc:cf:23:62:cc:1d:56:bc:
                    2d:df:ae:03:b7:51:18:81:a6:46:6a:e9:52:85:11:
                    7b:d0:84:06:e1:77:b8:8a:2d:42:da:46:ee:82:6a:
                    a7:ba:60:82:d4:fd:51:df:6a:b7:11:e7:38:81:50:
                    1b:43:df:3f:53:8f:b0:0f:53:c2:4c:24:26:b3:4a:
                    6d:7c:9f:e8:ce:b6:49:53:e6:76:36:48:7c:f6:02:
                    e4:d4:50:23:60:f3:12:81:ae:f6:7b:69:38:4f:cc:
                    b4:55:92:26:a2:f9:67:bc:9d:bb:93:3a:01:19:e2:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EF:A2:84:95:FA:CB:5D:58:E3:F4:7C:72:8E:F4:FC:ED:EC:B3:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/f42a1026-3aa1-3d11-9f79-e7cabb078147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl

            X509v3 Authority Key Identifier:
                keyid:84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:14:ba:f1:db:5a:75:6a:c1:b4:ad:ef:c2:34:b9:bb:e1:72:
         70:68:55:82:9d:b8:c1:86:f7:98:ab:f8:20:1e:a2:9c:df:27:
         7f:8e:49:ce:1d:11:d1:76:58:b0:d7:5b:44:9a:eb:4b:2c:ba:
         30:01:6d:a0:55:aa:6e:97:24:52:21:a0:6a:68:16:5e:25:ff:
         b0:ca:e5:7b:38:a0:53:6f:c7:e2:68:c4:1e:34:a9:32:d3:ff:
         58:f4:1a:5f:f2:29:1b:1b:98:79:fb:64:f8:0f:c5:4b:64:48:
         9b:68:a2:19:a4:f9:5d:3f:2a:ed:c0:bd:b9:15:d5:2f:63:69:
         0c:bb:60:ea:97:5b:fa:8b:b6:8f:59:e9:1d:e7:8c:2b:25:4f:
         9e:d5:29:d0:88:88:98:60:be:e3:3e:8a:6c:03:71:1c:b1:cd:
         c2:ac:25:e0:ae:ba:96:c6:02:14:2b:9c:04:a1:33:06:69:53:
         52:35:75:51:59:a4:6d:94:23:ef:45:41:89:21:32:65:53:88:
         3e:74:00:de:10:31:4f:b6:18:76:16:60:2f:df:6b:09:12:fe:
         00:09:58:e4:6d:95:56:6e:85:4e:41:ff:3d:e8:fb:d7:34:2c:
         a5:58:04:95:a7:67:91:44:19:26:6e:a6:f2:8f:9d:8b:7e:9b:
         d5:12:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:50 2026 by rpki-client