Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa
File:                     2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa (raw, json)
Hash identifier:          NKXNJBguoMG9pcPT0nwJrZdm7T9XrbOkhWkeI10FkDI=
Subject key identifier:   31:49:2D:92:04:6D:1B:DB:87:ED:34:CC:F9:33:02:00:3B:CB:A0:EF
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F4328584DA2800E7019221A2EFB2FDD00
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     40663
IP address blocks:        2602:fc24::/44 maxlen: 44
                          2602:fc24:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:0e:70:19:22:1a:2e:fb:2f:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=f785807d-e05e-4092-8e6c-5c2b42c44d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:11:83:6e:67:2f:83:dd:75:30:4f:15:df:
                    19:41:f7:f8:30:35:73:e9:a3:7b:6e:3f:54:69:21:
                    d1:a6:ce:9c:08:a9:82:d7:42:f1:f9:a6:b8:55:3a:
                    e1:ac:d6:52:f0:83:44:6c:3c:4b:74:3b:05:c4:43:
                    23:24:b3:b6:1b:0f:a2:8c:45:d7:4f:d6:10:c2:19:
                    36:8d:fe:a1:9d:e8:ba:e2:c7:56:c0:f8:18:d6:9f:
                    be:b4:8f:46:fd:65:2e:21:08:40:17:ab:40:78:9d:
                    45:3b:d1:58:25:fb:53:c6:a0:77:19:78:f6:f5:6f:
                    2b:a1:1f:18:07:5a:73:37:e5:4e:34:96:92:9a:e7:
                    f5:28:86:21:5f:7b:89:e8:5e:63:fb:7d:61:4a:e2:
                    50:3e:69:7a:66:0e:6d:26:a4:dd:c1:02:77:7c:b3:
                    09:d1:95:15:63:73:16:f6:c2:be:71:b0:e6:f5:f9:
                    3e:7c:29:28:e6:7b:ed:b0:d4:cb:1d:ad:7d:e8:07:
                    19:64:da:f2:6a:a1:8e:f5:f3:c9:b4:57:f0:c3:38:
                    33:d4:c8:af:fc:d0:d2:27:50:da:65:34:3e:13:8e:
                    10:3d:4a:50:61:0c:18:03:85:6a:6b:fe:b4:69:47:
                    00:37:18:44:4e:f0:1e:e5:f3:59:10:e9:69:7d:ea:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:49:2D:92:04:6D:1B:DB:87:ED:34:CC:F9:33:02:00:3B:CB:A0:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24::/44
                  2602:fc24:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b0:64:1a:13:43:a4:34:15:2b:d6:ac:a5:79:04:61:ae:eb:
         b7:20:54:68:18:14:61:95:5b:f6:6f:6a:b8:a1:b5:25:49:ff:
         00:27:ea:9e:eb:52:aa:c7:c4:90:62:2b:8a:16:ff:1c:40:33:
         fc:fa:0b:51:6c:ff:55:16:b9:f4:83:f8:f3:25:bf:4b:b2:fe:
         ef:5e:a9:e9:7a:04:a2:87:3f:e1:0b:b2:b5:ec:fd:7e:98:d0:
         81:9d:da:8a:3e:8c:75:31:3e:4a:42:42:77:16:4c:cc:91:2f:
         98:b3:36:54:45:b2:da:6e:8c:7c:b2:e2:b2:e2:01:5c:ab:76:
         e6:40:ca:46:e2:76:1f:0a:87:ec:99:e7:61:81:d4:10:64:82:
         45:6a:1d:65:a2:34:76:e4:18:16:f2:d7:16:52:f8:ad:06:58:
         7b:82:f5:38:c0:28:42:10:6d:49:d7:55:ad:9d:5d:c7:50:8a:
         d6:22:25:a0:35:f9:9f:42:97:17:8b:de:3a:d8:48:b3:83:b0:
         d1:6e:d0:2e:ac:20:57:7c:da:b7:ef:bd:af:00:c3:c5:c9:f4:
         1c:cc:d0:fc:9a:9f:dd:f8:3e:f8:6b:47:80:f1:db:4b:24:70:
         cd:48:11:23:41:a0:3c:e3:50:4d:83:64:52:a0:fa:2b:76:0d:
         e9:e0:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:11 2026 by rpki-client