Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/d913233a-3a0a-3239-a40b-c8e6be0927d3.roa
File:                     d913233a-3a0a-3239-a40b-c8e6be0927d3.roa (raw, json)
Hash identifier:          n7t+4IzgSr6zYxeowNkaCj1MiCIXcI5a0QhIYjCFHJc=
Subject key identifier:   62:0F:03:AE:F2:36:2E:55:39:F4:01:7B:CA:DF:CC:D5:21:35:0A:08
Certificate issuer:       /CN=2ca5e7d8-de7d-48b8-9cb1-491065714227
Certificate serial:       010D0C9F4328584D8AC55A6F3BCD5D077C0880C0
Authority key identifier: 26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/d913233a-3a0a-3239-a40b-c8e6be0927d3.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     25618
IP address blocks:        2602:f585::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:5a:6f:3b:cd:5d:07:7c:08:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca5e7d8-de7d-48b8-9cb1-491065714227
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=3a6e31a1-1dff-4a93-bef9-7a13b9fe4bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:59:7b:7f:44:ad:94:d1:a2:0e:41:b6:de:
                    19:0b:78:4b:74:5a:d0:9c:7b:99:75:e5:96:d8:84:
                    eb:07:50:f1:6d:b0:bc:c2:d1:a0:d6:08:03:6b:72:
                    0d:71:5d:47:ad:a1:a1:29:4d:b3:5f:0f:00:cd:e4:
                    52:10:b7:ff:3b:b7:bb:e7:23:2b:1a:3b:0b:1b:cd:
                    94:d1:62:3e:41:c1:79:cb:80:13:03:00:08:3a:9d:
                    92:74:45:5d:e4:1d:fe:80:b4:d8:ce:46:11:4d:fb:
                    d5:04:4b:5b:a1:52:31:98:42:e4:8f:83:5c:6a:51:
                    0e:df:e5:04:dc:97:e8:34:11:4e:ab:e2:dc:68:1a:
                    07:bf:01:ad:2d:45:3e:16:d1:c1:f1:a8:74:f8:9c:
                    28:fd:d3:7d:0e:b9:2f:86:f7:a6:2c:0c:5d:ec:a4:
                    61:cf:4d:d0:5d:e5:7d:43:22:d9:19:29:ac:bd:b7:
                    6e:7b:d2:e7:1a:b4:60:37:a1:81:e5:71:62:6e:80:
                    d5:0b:c7:81:fb:01:3c:21:2c:12:ec:e2:9b:13:8a:
                    32:ea:3a:b7:52:e4:a4:cb:50:3e:36:fd:3f:95:cc:
                    ff:4a:ad:6c:96:92:71:83:68:08:f3:fa:b2:b6:ad:
                    fb:ce:28:00:af:bb:14:24:48:98:4c:1d:d8:dd:f3:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0F:03:AE:F2:36:2E:55:39:F4:01:7B:CA:DF:CC:D5:21:35:0A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/d913233a-3a0a-3239-a40b-c8e6be0927d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.crl

            X509v3 Authority Key Identifier:
                keyid:26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f585::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:24:64:16:de:d5:67:be:fe:e7:ea:93:ab:ac:91:0c:45:
         2d:ee:6d:9b:08:e0:8d:2c:77:e8:36:82:f3:95:03:51:b3:47:
         ce:dd:a4:4f:b1:2c:90:77:9b:0d:08:d2:72:a2:74:4e:20:d9:
         2e:85:51:1a:29:08:e8:7f:0d:1e:29:7e:62:31:1b:aa:10:a0:
         a0:1e:25:0f:13:f3:61:ce:85:6b:e9:fb:7e:f5:74:3c:7d:8d:
         49:9a:50:ff:d8:39:55:79:6e:37:8b:ff:53:b2:a0:b2:71:84:
         45:60:04:b1:ca:dc:2b:e7:be:f7:28:dd:0a:b3:fc:ff:8f:ef:
         0d:11:46:1c:b2:a1:33:22:b9:f4:a8:c9:3e:83:ba:7b:c1:47:
         b2:f9:c6:8b:6b:eb:0c:46:29:29:d1:23:96:e3:93:9a:04:fd:
         d7:0b:f2:e1:6f:d3:13:13:a1:e0:bf:b0:fd:bc:3e:c7:19:74:
         e1:04:ac:f1:5f:ee:ce:76:2a:ea:a2:2f:b3:ef:30:61:53:35:
         36:ba:b8:95:d3:6f:51:f0:77:6a:81:06:b5:bd:80:d9:3e:0f:
         19:a8:39:e3:96:88:3e:32:1b:34:2f:d6:d0:3f:1c:c0:52:08:
         33:63:a6:48:ad:e7:fd:36:b5:64:34:80:3f:4f:f9:b4:96:ed:
         a4:7d:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:28 2026 by rpki-client