Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/9f7f1252-7085-3aa5-981d-13d4b5cdcfb4.roa
File:                     9f7f1252-7085-3aa5-981d-13d4b5cdcfb4.roa (raw, json)
Hash identifier:          FsEzomm9lFR6YZmfXHKz+D4I80hFumxdWwi9bph5VLE=
Subject key identifier:   14:37:65:2F:00:75:B9:4D:AE:CC:65:AF:A4:16:50:BF:DE:44:78:99
Certificate issuer:       /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
Certificate serial:       010D0C9F4328584D492A6A08F0CAF149D971A100
Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/9f7f1252-7085-3aa5-981d-13d4b5cdcfb4.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     400013
IP address blocks:        2602:80c:100f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6a:08:f0:ca:f1:49:d9:71:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=5e073665-3a16-4abf-8254-d7b99cb8d1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:f9:f3:f2:79:36:56:aa:59:06:f9:cf:24:
                    f5:a2:c1:e2:b5:49:d4:a7:85:bf:9e:90:21:9f:4d:
                    1c:5f:c8:12:0c:73:cc:5d:52:f4:72:60:77:a5:e6:
                    6b:24:cd:eb:92:4f:e8:a8:28:f6:19:82:38:55:cb:
                    07:92:5f:8d:74:a7:c6:2a:e1:93:98:fe:a6:24:8c:
                    d5:69:22:91:52:3f:19:1f:0b:2c:cd:3b:77:fd:56:
                    1a:8f:e2:2e:90:2b:3a:bb:b6:da:9b:80:f1:28:5c:
                    71:3b:fb:78:f5:60:fd:e1:db:95:8e:ee:46:d2:af:
                    4c:1c:1c:3d:97:bb:53:36:67:4b:e2:19:22:e0:09:
                    05:60:c3:c5:64:43:57:c4:f2:3f:16:1b:a9:60:49:
                    ea:0b:f1:4e:a6:57:d7:11:a6:73:ac:07:50:82:9b:
                    7a:2c:d7:95:b3:07:d6:cc:92:73:a6:77:21:28:14:
                    be:62:17:03:b0:83:b1:89:4e:65:5f:75:92:f8:69:
                    d1:b0:e4:0a:31:b0:d9:7e:1f:d3:ee:9c:d7:b5:8a:
                    c9:b1:7c:d1:4b:23:83:80:4f:51:d2:95:51:aa:05:
                    7d:e0:b3:7c:44:69:d6:40:82:9f:33:0b:de:65:08:
                    f5:d7:76:ec:97:6e:d2:ef:97:39:80:f1:52:02:31:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:37:65:2F:00:75:B9:4D:AE:CC:65:AF:A4:16:50:BF:DE:44:78:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/9f7f1252-7085-3aa5-981d-13d4b5cdcfb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:100f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:d8:28:b4:a4:b5:4b:71:e0:d8:a1:2c:6b:4d:57:7d:10:
         3c:66:0d:ce:69:36:bf:72:9e:9f:25:3a:1d:67:c0:53:c6:ad:
         f7:9e:3d:d8:96:e9:6f:4d:5b:98:94:b8:a8:3a:e1:f4:03:c0:
         dc:25:8f:a3:c2:08:38:ca:3b:18:fd:dd:f5:c8:3e:9b:67:cf:
         04:54:1a:a8:07:cf:77:eb:c4:36:ec:fd:38:9f:5e:22:da:fa:
         86:7d:79:4b:9c:6c:a0:de:0e:d2:e1:d2:c2:3c:09:38:20:df:
         39:98:80:69:27:74:89:04:d3:02:a5:fa:bd:0a:36:fc:8a:69:
         2d:85:56:94:4b:5b:85:63:27:e0:51:14:1a:f0:1b:11:80:85:
         4a:99:88:9f:54:d1:47:84:da:41:c5:19:4e:90:74:6e:a6:93:
         18:e5:a2:59:56:f1:ff:7b:9b:99:22:32:4e:29:b2:d7:ad:b7:
         e8:6f:93:ce:6e:3e:00:88:08:00:e2:76:51:d3:1d:5d:5b:36:
         fa:46:ad:87:62:94:99:da:fa:e8:25:86:91:70:54:f0:4f:7d:
         d0:93:83:2b:0d:a1:84:4e:6d:49:5f:04:0a:9c:10:ed:1e:df:
         0b:17:e1:3c:0b:69:e3:7e:85:60:e7:e6:2a:57:5f:51:54:44:
         0c:61:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:00:20 2026 by rpki-client