Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa
File:                     a0ed00a4-2dcb-32ed-a058-569efce134bb.roa (raw, json)
Hash identifier:          kDcJLN8EJf5wLKaRMc4l1dBuKmZioqNFhVCUYa1/91E=
Subject key identifier:   A8:5E:61:9C:3B:D2:1C:9D:05:89:CF:76:77:0A:3A:BC:3A:DB:4D:FA
Certificate issuer:       /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
Certificate serial:       010D0C9F4328584E86F4F9BADF0DCCB7E8CC14C0
Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     62900
IP address blocks:        2602:2d5:f0::/48 maxlen: 48
                          2602:2d5:f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f9:ba:df:0d:cc:b7:e8:cc:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=d609e55d-2b38-4a54-93a7-30b8b63fc30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:23:3c:6a:34:57:5d:85:8a:bc:87:cf:4d:
                    d0:76:26:d7:f6:cb:b9:5f:9d:e8:e9:d4:82:33:80:
                    ef:f9:c2:8b:6f:e3:c6:a5:9d:69:07:b1:9d:56:ae:
                    6d:bb:a3:49:59:74:fb:dc:30:1f:94:e7:9a:b4:d5:
                    9b:a9:99:cc:f2:7c:fc:16:37:86:93:31:11:8d:e7:
                    ea:d7:dc:55:b1:9c:bd:77:e0:cc:fa:5b:30:01:df:
                    c8:9c:03:b7:c6:36:72:87:23:3b:8c:4a:6e:c0:ef:
                    f4:ad:5c:4a:ef:d4:3e:56:a2:cb:8b:8f:80:dd:22:
                    0f:99:27:db:4e:ce:be:66:74:f3:2f:bc:23:ea:72:
                    7f:63:62:ef:0c:9e:99:8d:f3:7f:ad:65:05:43:e2:
                    75:c0:41:ec:02:53:be:6f:27:1e:bf:dc:05:49:e9:
                    ad:8f:0d:f8:a8:bc:d4:1b:cd:d6:a0:89:1b:ef:4e:
                    27:3b:2e:b7:8a:02:69:d7:c8:c2:b7:08:3f:42:19:
                    28:96:58:2d:18:e9:1b:95:5e:4d:7c:4f:d2:67:07:
                    6b:44:cb:b9:3a:5e:ff:6b:e8:e1:3a:5b:de:c1:69:
                    53:81:81:ad:fb:b1:e8:d1:bd:db:86:1e:4e:26:a3:
                    26:ae:60:17:e9:50:52:f4:d3:ac:71:4d:98:64:7b:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5E:61:9C:3B:D2:1C:9D:05:89:CF:76:77:0A:3A:BC:3A:DB:4D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d5:f0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c3:10:0c:25:1d:7e:99:66:15:2e:2d:27:13:de:11:65:a1:
         9e:56:44:25:8f:cc:0e:b4:60:98:0c:b8:57:40:0d:ea:7a:95:
         0a:a3:8a:45:93:85:9b:ff:3a:34:b4:4a:92:c5:a0:bb:c2:c0:
         84:36:9a:67:d5:7b:ab:dc:5e:3c:38:47:30:5d:02:21:73:46:
         74:59:ca:a8:c9:7a:7b:05:67:5a:67:41:e3:c9:f4:5f:c6:87:
         a3:94:c8:1f:7f:ce:c4:f5:32:48:b4:5b:b0:6f:94:c9:cd:20:
         92:23:5a:3a:ca:95:98:e4:0b:34:99:11:6b:3c:8f:f8:96:d7:
         21:7e:74:ed:8f:78:92:32:fc:e9:0f:c1:a3:7c:bf:2f:dc:ae:
         ca:ed:28:a9:e7:d3:e9:53:24:39:9f:f3:1e:e2:88:28:d7:11:
         85:f2:a3:f8:da:3a:b6:7a:81:44:79:65:d1:e9:42:85:d1:80:
         6d:d7:f1:b6:3c:37:a1:17:59:99:c3:94:54:06:6d:89:5e:e5:
         9a:a9:fa:88:f0:18:bf:86:58:25:5e:35:b1:9b:51:b1:c9:30:
         a1:e6:e0:6c:4b:8a:14:c0:24:25:6c:28:e4:18:8e:1c:c3:20:
         34:21:14:39:27:e3:cb:b8:f1:85:b1:9b:cd:a5:07:b4:5e:e0:
         ac:61:4f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:15 2026 by rpki-client