Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/e1a46aeb-0e61-38e7-af60-1a1d63f91a0e.roa
File:                     e1a46aeb-0e61-38e7-af60-1a1d63f91a0e.roa (raw, json)
Hash identifier:          ACpLomaxA1Dv2krHd0Nh2Tb0DdLVexfwgG0jCZa12W8=
Subject key identifier:   FB:8D:9F:EF:CB:F4:F4:06:8B:54:FA:36:A3:46:1A:37:23:18:F0:D2
Certificate issuer:       /CN=7918d277-f6b6-4b59-8e89-61eac2611774
Certificate serial:       010D0C9F4328584D492A40425E58EA7EEE9F0E00
Authority key identifier: D4:8C:D4:71:32:D8:FD:1E:CF:9A:27:A7:8F:CF:A8:48:13:62:03:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/e1a46aeb-0e61-38e7-af60-1a1d63f91a0e.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     16926
IP address blocks:        2602:f505:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7918d277-f6b6-4b59-8e89-61eac2611774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7918d277-f6b6-4b59-8e89-61eac2611774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:40:42:5e:58:ea:7e:ee:9f:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7918d277-f6b6-4b59-8e89-61eac2611774
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=e89644e1-ac37-458b-95ce-bae04ec789d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:81:40:eb:5b:05:c3:8a:9b:13:b7:5b:89:
                    ea:21:7f:58:8a:0f:21:28:27:8b:b2:ba:87:52:06:
                    91:32:4d:26:61:f3:aa:54:a1:29:91:b3:dc:e4:7b:
                    8e:2c:12:96:9a:8c:f8:27:65:31:ec:12:fc:65:fc:
                    26:b1:01:f6:c1:5d:56:28:3c:ab:14:92:44:e9:eb:
                    bb:2a:f3:8e:00:20:d9:c2:57:79:00:18:a6:6e:22:
                    07:ee:2a:fe:38:0f:d4:85:8f:d0:73:dd:78:5a:9b:
                    e9:2f:eb:c5:0d:ba:fb:61:4c:be:b4:be:a9:e7:fc:
                    98:bc:5a:be:7c:06:0e:f5:77:28:51:f0:52:01:80:
                    bb:33:a4:db:cf:f3:a2:c9:e3:56:07:cb:c5:cd:4e:
                    ef:47:be:bb:7a:a9:b8:8d:7f:de:d8:8e:b8:d9:53:
                    20:56:dd:e6:29:2a:48:9d:c5:15:f0:54:d0:94:7e:
                    15:2e:2e:fb:06:04:d8:35:21:23:1f:9a:6f:b5:06:
                    1d:9e:a0:ff:fc:b9:da:9e:ad:51:61:69:71:c5:3a:
                    ed:99:cf:93:fa:4a:d4:67:fd:b3:db:80:e1:01:9e:
                    ba:60:c9:5a:e4:2b:f1:e9:1b:35:09:6c:59:01:17:
                    b8:2f:13:61:21:ad:f8:0e:e0:54:0d:29:b5:16:a0:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8D:9F:EF:CB:F4:F4:06:8B:54:FA:36:A3:46:1A:37:23:18:F0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/e1a46aeb-0e61-38e7-af60-1a1d63f91a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7918d277-f6b6-4b59-8e89-61eac2611774.crl

            X509v3 Authority Key Identifier:
                keyid:D4:8C:D4:71:32:D8:FD:1E:CF:9A:27:A7:8F:CF:A8:48:13:62:03:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f505:50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2c:81:1a:e8:b4:90:fe:d2:75:55:a7:63:c8:c2:02:a5:b5:
         f9:9d:17:d5:76:67:38:67:7d:3c:88:7e:08:6a:c3:a8:39:23:
         b2:9c:84:b5:85:59:32:24:e6:a2:2d:68:6a:66:df:68:c4:18:
         59:df:6f:37:86:ed:28:2a:2a:ec:67:d6:82:35:39:cb:c5:ae:
         74:0a:ee:ff:80:22:f5:0f:5c:17:1c:3e:11:a5:b2:8c:8c:f3:
         ea:10:10:bf:4c:b4:5c:08:b7:0f:73:cd:63:b6:53:27:b2:75:
         b2:fb:0c:a7:ff:13:5a:e9:b9:6f:07:c9:71:e2:df:d6:91:58:
         33:31:14:0d:71:27:fe:ce:37:52:48:36:f5:fd:5a:b8:5f:39:
         32:d4:64:29:bb:6a:63:14:59:eb:b3:c3:98:5a:de:13:47:98:
         88:10:2a:7b:4d:8c:7e:ad:1b:26:7b:26:1a:a0:49:91:43:6a:
         3e:50:1e:3d:52:e7:cf:60:66:4e:ff:34:1e:97:a8:47:1c:04:
         00:be:77:cd:84:04:db:87:dd:f1:c3:0b:a6:40:4e:cb:45:12:
         80:10:bc:35:0d:d2:88:f9:55:dd:7f:e5:9f:1c:ff:02:3a:02:
         1c:41:f6:dd:1d:d3:cf:47:69:47:4e:14:31:a5:24:5b:66:78:
         ce:d2:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:42 2026 by rpki-client