Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/126f55d1-cb61-467e-87ed-cea78f166df6/4ff1c9f5-a460-3b29-817a-dcd77ab2a202.roa
File:                     4ff1c9f5-a460-3b29-817a-dcd77ab2a202.roa (raw, json)
Hash identifier:          aIJOcXWpvkrG4NVzHKY27gb4jqTLebZU0OHTjwPwAgA=
Subject key identifier:   85:C0:44:62:91:5A:AB:4D:71:95:98:3D:6C:3F:43:F3:AE:A9:DF:04
Certificate issuer:       /CN=126f55d1-cb61-467e-87ed-cea78f166df6
Certificate serial:       010D0C9F4328584DC995ABDFED0F2D99892D3880
Authority key identifier: 79:65:CA:AD:2F:C9:1F:E6:15:A6:F4:E6:6C:BD:0D:C3:3A:E6:F6:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/126f55d1-cb61-467e-87ed-cea78f166df6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/126f55d1-cb61-467e-87ed-cea78f166df6/4ff1c9f5-a460-3b29-817a-dcd77ab2a202.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     399204
IP address blocks:        2602:fcc1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/126f55d1-cb61-467e-87ed-cea78f166df6/126f55d1-cb61-467e-87ed-cea78f166df6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/126f55d1-cb61-467e-87ed-cea78f166df6/126f55d1-cb61-467e-87ed-cea78f166df6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/126f55d1-cb61-467e-87ed-cea78f166df6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:ab:df:ed:0f:2d:99:89:2d:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126f55d1-cb61-467e-87ed-cea78f166df6
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=a2a2c7e2-5dba-414e-a424-3bee758f4ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:62:7f:cb:cd:eb:bd:c4:1b:29:ca:1e:b3:
                    ab:e4:9a:ef:fe:3c:23:93:57:37:33:9b:57:ec:9c:
                    3d:f0:70:e8:01:ab:88:b4:c1:10:d2:dd:f7:8b:ed:
                    93:74:69:06:1a:ee:0f:6f:20:a1:e7:cb:26:b4:4e:
                    60:0d:74:83:b2:26:8e:b8:7f:a2:ac:f9:f7:61:26:
                    38:fb:30:0d:39:a0:12:44:25:a4:c8:26:21:af:19:
                    d5:e9:be:3a:b6:5e:c0:38:d1:38:06:7c:62:79:cf:
                    9d:08:59:81:c8:12:38:5c:54:d9:ad:0b:b1:23:03:
                    54:ac:bc:cb:56:86:c3:70:81:c5:34:ac:d0:f2:40:
                    01:37:90:d6:67:35:ca:69:6c:57:9e:73:c9:70:61:
                    12:de:48:de:d9:1b:22:d1:cc:b3:d2:16:0c:11:56:
                    7f:e2:b2:cd:69:ea:63:ea:91:13:d5:64:4d:ce:69:
                    94:4b:c5:e0:00:de:13:18:99:32:e1:d5:f4:09:bc:
                    df:f8:49:e2:f6:44:d7:bd:04:1f:f5:a6:eb:f4:42:
                    08:dc:2d:75:45:81:e2:da:35:d4:0d:e9:3b:e7:dd:
                    90:19:bd:93:3f:3a:5b:e3:51:ce:cf:af:1b:e8:ca:
                    3f:e4:17:a5:3b:31:3d:22:b9:05:01:35:03:0a:cf:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C0:44:62:91:5A:AB:4D:71:95:98:3D:6C:3F:43:F3:AE:A9:DF:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/126f55d1-cb61-467e-87ed-cea78f166df6/4ff1c9f5-a460-3b29-817a-dcd77ab2a202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/126f55d1-cb61-467e-87ed-cea78f166df6/126f55d1-cb61-467e-87ed-cea78f166df6.crl

            X509v3 Authority Key Identifier:
                keyid:79:65:CA:AD:2F:C9:1F:E6:15:A6:F4:E6:6C:BD:0D:C3:3A:E6:F6:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/126f55d1-cb61-467e-87ed-cea78f166df6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a2:2e:f0:6a:56:ae:69:e9:1d:cd:99:93:c2:fb:21:ce:83:
         9a:d1:29:fc:75:fe:20:b6:3a:4a:a7:d7:e3:0e:aa:73:cb:f7:
         58:03:e5:f9:ec:a9:9e:bc:b4:4c:c8:99:6d:2d:eb:f3:93:a3:
         df:05:46:33:e6:f9:61:fc:5b:e7:e1:88:49:60:01:af:0e:40:
         21:32:78:9b:2f:62:24:06:2e:8c:ee:a4:ab:3a:8d:61:d2:69:
         ce:a5:57:88:bb:d7:5d:20:4c:03:d4:89:40:24:2f:66:7e:0e:
         6b:c4:6b:66:86:41:b3:f2:30:36:0f:9f:85:af:fa:ff:ff:24:
         96:6e:78:ce:ae:01:25:a2:20:ee:07:2a:c6:7c:04:5a:6c:3c:
         95:98:63:cf:ca:b0:8d:d8:d8:2c:84:7f:89:6a:94:62:84:4b:
         a8:e7:37:b1:57:76:52:7f:d1:74:e8:78:14:47:e4:9a:cd:7b:
         bd:2f:62:f1:5b:a2:10:38:c9:80:7c:13:34:7a:ad:cd:19:04:
         90:81:77:a5:d5:c0:c9:21:e2:5f:15:46:40:e3:cc:5e:d3:d0:
         6e:54:fb:58:9e:79:74:c0:bf:0b:8f:87:e4:6f:cb:8b:9a:0e:
         9b:34:57:c5:fb:60:38:d0:2d:34:5b:bd:7d:a9:b7:d0:35:c1:
         68:0c:72:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:02:36 2026 by rpki-client