Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fa7a3d4c-134e-396d-a7c6-30e98a4b6c4a.roa
File:                     fa7a3d4c-134e-396d-a7c6-30e98a4b6c4a.roa (raw, json)
Hash identifier:          J+p6qJ0WY/pc0wwQlcLT+Z5CO12e/sHoBzRgsB43418=
Subject key identifier:   F8:4C:65:96:E0:E8:D5:3B:30:2E:1E:FD:10:41:99:46:60:3C:6C:77
Certificate issuer:       /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial:       010D0C9F4328584E54B4EBB294E8B3315B09F780
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fa7a3d4c-134e-396d-a7c6-30e98a4b6c4a.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     212071
IP address blocks:        2602:f9bd:f03::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:eb:b2:94:e8:b3:31:5b:09:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=440ab17e-fa7d-410d-aa0c-ec7228c6a522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:6f:91:ea:63:b6:6d:39:79:da:c2:e4:ae:
                    55:76:b8:05:b2:1f:03:71:fc:f5:be:64:2c:aa:67:
                    78:7f:ed:c8:1d:20:d4:05:90:c8:aa:3b:2e:58:b8:
                    a4:6f:56:a1:05:d1:3f:47:df:5e:78:ba:f9:6a:a7:
                    f3:21:d4:bc:50:55:8e:17:50:b9:fb:cf:b9:1b:01:
                    34:31:6d:f7:2d:cc:80:fa:e9:1c:e9:a6:eb:06:58:
                    2f:82:e0:da:7d:08:19:b6:1a:84:e3:7d:85:b7:94:
                    ae:9e:8c:ee:fc:17:4a:01:6b:fc:26:e9:d3:5f:a4:
                    fb:58:81:18:d0:5f:27:ed:65:8e:9c:28:b6:93:06:
                    4c:1d:0f:93:a1:12:3b:5a:6c:b0:2b:b3:d9:01:ec:
                    ae:56:76:5a:e7:18:c0:f4:98:d2:2c:7c:db:3a:6a:
                    1a:ea:e0:2f:65:1f:f0:80:ad:ac:88:4f:4b:21:28:
                    dc:7b:29:2d:a6:45:9d:55:88:5c:fb:24:23:42:5c:
                    d7:da:f2:39:d3:70:79:23:b9:bc:8f:71:5b:8d:16:
                    d5:e3:5f:0b:18:33:f9:92:40:2d:a6:d1:6d:eb:17:
                    7d:7a:3e:56:57:26:b7:81:9e:41:f5:f8:18:b2:f3:
                    f3:f4:99:e0:88:3a:3e:c3:f4:fb:92:87:3f:25:d7:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4C:65:96:E0:E8:D5:3B:30:2E:1E:FD:10:41:99:46:60:3C:6C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fa7a3d4c-134e-396d-a7c6-30e98a4b6c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl

            X509v3 Authority Key Identifier:
                keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9bd:f03::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2d:05:37:da:c8:e0:2e:01:bd:6d:d2:a8:57:26:4d:4d:a2:
         12:f6:d6:63:02:77:87:f3:0d:23:4f:ca:e8:f7:1f:0d:64:e2:
         f6:93:de:93:16:a2:7a:05:5f:9c:c8:4e:08:a5:27:61:3c:57:
         46:6e:da:a2:2f:55:c7:05:8a:c5:6e:7b:45:de:e3:00:5e:74:
         a2:25:5e:49:1a:59:8c:24:30:3c:c9:e3:91:3e:ab:aa:30:70:
         b5:75:ea:2e:55:73:00:8b:04:f7:04:9f:0e:ab:05:3d:55:48:
         18:7c:61:32:8a:38:68:84:16:bd:9a:7e:eb:70:6b:cf:65:5d:
         af:ef:9d:17:8d:f0:52:71:57:c0:ef:c5:19:8d:a3:c0:9c:5e:
         f6:5d:e6:d1:bc:0c:bb:6e:b3:38:41:5b:d8:34:e6:31:8d:3e:
         07:78:c8:7e:9e:f0:33:76:94:46:ea:99:bd:a4:5f:e7:ab:04:
         f0:6f:d9:f9:2f:f9:41:62:44:88:03:47:7c:89:fd:2e:8e:f6:
         31:91:21:6f:f7:ee:c5:ad:ff:5d:ec:6d:00:c5:47:5f:d2:ac:
         04:03:9a:aa:77:ca:95:e3:e8:74:62:44:b6:55:e1:6c:c4:9d:
         26:26:bc:4f:92:e2:30:61:14:15:16:c6:18:f1:4e:e3:19:c6:
         ea:62:5a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:57 2026 by rpki-client