Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa
File:                     8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa (raw, json)
Hash identifier:          Qj5fV7jS+lJixHi7qPizWrjeh5wBp9/kK1mvIRZXNJ8=
Subject key identifier:   C7:FB:75:5B:8D:C2:DF:E2:AC:00:DF:7A:7F:2C:F5:0B:28:76:09:B8
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584D2D3F84D2ACE31E6F4AC63380
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     401012
IP address blocks:        2602:f956:70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:84:d2:ac:e3:1e:6f:4a:c6:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=715ef73a-279c-4f51-a8f8-15996b82beba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:ea:c4:a8:7a:43:bf:ab:29:04:fb:d0:33:
                    df:a7:7d:f5:4e:e6:d3:d0:6d:e1:a4:f5:fc:4d:7b:
                    fa:0b:a2:3e:ad:a1:50:dd:4b:fb:73:c3:23:89:47:
                    d8:72:a3:ea:65:1f:5a:95:86:81:0c:7e:4a:2b:bd:
                    44:2d:17:98:26:92:80:61:42:de:94:e8:3f:a9:20:
                    7e:23:4e:80:e9:e4:46:ef:79:5e:bb:2c:26:cd:2e:
                    51:4e:b5:24:9b:ec:82:38:28:17:cd:4c:2d:02:d3:
                    fe:e8:4d:bd:5d:c6:e9:10:c7:af:a1:ba:c6:4b:26:
                    6a:7a:7b:17:a2:59:8f:5f:89:7b:f8:e1:f4:ec:55:
                    c2:81:58:7b:d9:b6:30:b5:cf:a3:3d:d3:e0:60:ce:
                    2e:42:80:55:e4:99:b8:da:70:94:9e:e9:c6:0d:1a:
                    08:98:ab:f1:21:c6:5d:1d:13:72:ec:5e:f0:2c:92:
                    c0:30:f1:56:91:2f:f1:11:29:f5:9a:b5:3f:aa:14:
                    01:25:81:70:4b:4f:d0:fa:49:80:bb:26:8a:62:cf:
                    8a:94:b4:c0:ed:8c:0e:68:fd:ac:c9:e0:77:bb:f0:
                    1a:37:21:37:23:fc:c0:c8:a7:2c:6d:b3:bd:bb:31:
                    73:27:f1:d3:8d:6f:8c:e5:13:bd:c3:de:dc:01:d3:
                    c1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FB:75:5B:8D:C2:DF:E2:AC:00:DF:7A:7F:2C:F5:0B:28:76:09:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:72:50:aa:ee:0a:fd:7b:d8:99:7e:34:50:0e:69:7a:d9:
         0b:2a:b6:3c:bd:a1:f1:d3:45:f3:37:22:05:a1:43:11:a3:39:
         fe:dd:52:89:e9:1a:2d:13:e8:99:e6:c3:39:0a:13:f6:f0:0c:
         50:93:95:f2:b3:a8:e4:0a:d3:fb:94:b0:f6:57:33:fd:22:60:
         f8:cc:ca:15:c5:b7:1b:96:20:28:a1:c8:ae:13:84:5f:20:12:
         ec:d5:f0:83:62:a6:33:f6:f6:7c:88:f8:7c:12:cd:b2:00:e9:
         8a:b8:ff:7d:69:ee:2f:98:8c:65:e9:1b:24:48:78:e0:18:b1:
         e8:22:86:d3:2d:42:7f:8b:36:9a:c7:73:b0:01:26:3b:c0:72:
         b3:d1:f1:bb:c6:de:e3:22:5b:8c:c1:e8:72:f8:5b:ac:f3:0a:
         c0:6f:25:24:a9:80:09:6b:12:0d:8f:e6:72:1b:29:99:a1:b2:
         f7:b3:37:d1:a2:cb:18:f3:bd:83:cf:54:27:66:f5:37:1b:26:
         17:a3:a0:ff:33:9d:11:3c:95:c6:02:5e:da:0b:83:d7:4e:ff:
         89:ac:0a:77:9c:7c:0a:ae:7e:fc:a5:e5:56:8f:ed:85:98:bd:
         d2:f4:8b:0e:bf:88:3c:0b:6a:99:b5:8e:94:2a:ed:30:32:5f:
         77:6f:d0:a9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0tP4TSrOMeb0rGM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0
MjYzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk
NzE1ZWY3M2EtMjc5Yy00ZjUxLWE4ZjgtMTU5OTZiODJiZWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwDqxKh6Q7+rKQT70DPfp331TubT0G3hpPX8
TXv6C6I+raFQ3Uv7c8MjiUfYcqPqZR9alYaBDH5KK71ELReYJpKAYULelOg/qSB+
I06A6eRG73leuywmzS5RTrUkm+yCOCgXzUwtAtP+6E29XcbpEMevobrGSyZqensX
olmPX4l7+OH07FXCgVh72bYwtc+jPdPgYM4uQoBV5Jm42nCUnunGDRoImKvxIcZd
HRNy7F7wLJLAMPFWkS/xESn1mrU/qhQBJYFwS0/Q+kmAuyaKYs+KlLTA7YwOaP2s
yeB3u/AaNyE3I/zAyKcsbbO9uzFzJ/HTjW+M5RO9w97cAdPB0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMf7dVuNwt/irADfen8s9Qsodgm4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJj
MjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvOGVlYjFlYTItN2Q2Ny0z
MGM4LWJhOWYtYjk1OTE1NDZhMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIyYzI3Y2EtZmI3Yy00Y2FkLTlm
OWItNGY3NTRmODY0MjYzL2ViMmMyN2NhLWZiN2MtNGNhZC05ZjliLTRmNzU0Zjg2
NDI2My5jcmwwHwYDVR0jBBgwFoAUz7laojwbIP8QynSPJVz1CYmivlEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1
NGY4NjQyNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5VgBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB1IclCq7gr9e9iZfjRQDml62Qsqtjy9ofHTRfM3IgWhQxGjOf7d
UonpGi0T6JnmwzkKE/bwDFCTlfKzqOQK0/uUsPZXM/0iYPjMyhXFtxuWICihyK4T
hF8gEuzV8INipjP29nyI+HwSzbIA6Yq4/31p7i+YjGXpGyRIeOAYsegihtMtQn+L
NprHc7ABJjvAcrPR8bvG3uMiW4zB6HL4W6zzCsBvJSSpgAlrEg2P5nIbKZmhsvez
N9GiyxjzvYPPVCdm9TcbJhejoP8znRE8lcYCXtoLg9dO/4msCnecfAqufvyl5VaP
7YWYvdL0iw6/iDwLapm1jpQq7TAyX3dv0Kk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:20 2026 by rpki-client