Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/4e3db602-2812-31c2-8bb9-a601c1e8bcab.roa
File:                     4e3db602-2812-31c2-8bb9-a601c1e8bcab.roa (raw, json)
Hash identifier:          N64Gv4muIxyQnEBhUghFlGZCw7UJDvVITdSEiZLjPiY=
Subject key identifier:   01:3B:E5:3E:45:05:10:FE:63:8F:95:CC:45:C7:41:B6:16:62:F3:90
Certificate issuer:       /CN=594bef5f-8d11-4b6d-91ca-9cf560ae8674
Certificate serial:       010D0C9F4328584D492A55A47DDBB7120983AB00
Authority key identifier: D7:DA:E9:99:35:74:C7:76:00:E8:1D:4A:78:CF:9B:37:C7:7E:8E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/4e3db602-2812-31c2-8bb9-a601c1e8bcab.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     396891
IP address blocks:        2602:f9f1::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:55:a4:7d:db:b7:12:09:83:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594bef5f-8d11-4b6d-91ca-9cf560ae8674
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=0c2663a3-d73d-4b00-b7ae-2f5b3b501f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:29:c3:5c:4a:ee:2f:c4:92:f1:14:31:61:
                    9d:1e:bf:4b:50:83:1d:99:c0:db:9c:7c:33:e4:c5:
                    a4:08:ad:83:f1:43:e0:5e:fa:72:eb:bc:27:4f:d1:
                    25:f2:5c:0c:c0:13:8a:a3:c5:f0:63:50:7b:de:15:
                    c5:e1:17:a9:cc:39:0f:f1:10:c3:e7:a9:37:7c:dd:
                    be:92:53:92:89:d6:19:b9:1c:84:77:39:1f:be:56:
                    ca:2c:21:be:21:a6:f4:33:f7:04:8a:36:3c:0f:d1:
                    57:e6:38:93:b3:22:99:b0:c2:63:73:e7:ee:48:a5:
                    4b:8b:02:ea:aa:09:0a:75:6c:81:0f:e6:bf:26:aa:
                    ea:cf:46:3a:24:2b:99:2d:7d:0d:cd:53:cb:72:2e:
                    3b:88:71:dc:3f:4a:d8:6b:5a:07:11:93:3f:e9:b3:
                    19:26:e0:35:a9:59:3e:92:47:1c:d5:62:7e:8d:b6:
                    42:21:e0:32:16:b9:62:e3:3b:e4:39:d1:6f:0f:dc:
                    36:a5:78:10:06:69:1f:03:0d:d1:c5:c8:58:2e:1d:
                    9b:c2:8f:14:33:73:15:0b:2e:a1:5c:cb:36:52:12:
                    86:ca:1f:5c:d0:8c:d5:7b:24:66:26:b6:9d:11:d9:
                    25:5a:95:b5:ca:5c:aa:26:40:d6:9f:f6:6d:13:7a:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3B:E5:3E:45:05:10:FE:63:8F:95:CC:45:C7:41:B6:16:62:F3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/4e3db602-2812-31c2-8bb9-a601c1e8bcab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.crl

            X509v3 Authority Key Identifier:
                keyid:D7:DA:E9:99:35:74:C7:76:00:E8:1D:4A:78:CF:9B:37:C7:7E:8E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:21:cc:58:e2:59:ea:c5:82:84:6a:c3:9e:94:85:93:ed:8d:
         a9:6b:c8:e4:40:a6:9a:54:9c:5f:4d:93:3f:98:5d:eb:5a:f2:
         c6:ee:6d:af:27:88:8a:d2:eb:40:73:4d:b1:44:77:7b:5a:9a:
         fc:e8:cf:66:e5:41:ac:62:e3:82:29:38:dd:df:0e:14:e4:94:
         f6:de:15:53:95:40:72:62:21:a5:15:51:83:31:e4:df:4d:90:
         4e:e1:b9:77:6c:e8:4c:6d:66:d5:be:ef:29:1d:a2:ea:f8:0b:
         df:55:fa:dd:33:7b:dc:4c:1c:c2:ee:fe:b6:ef:06:06:54:be:
         ca:c8:4a:6d:29:8b:ff:26:8a:b2:17:0a:b3:c9:38:c8:76:3f:
         99:bc:c4:80:a1:df:03:9a:a6:2e:f6:9b:66:c0:a9:40:0e:b4:
         eb:30:4e:d1:81:70:35:d2:53:a8:aa:0c:f5:2b:56:68:b0:d3:
         93:0f:ad:f1:ad:b4:8c:19:69:37:54:0b:11:7c:f1:37:90:f5:
         90:ac:d2:1d:9d:7c:f5:55:4a:6e:b7:9f:c1:8c:6c:35:88:ba:
         79:e7:45:4c:64:0b:a2:59:a3:9d:9d:91:37:13:f4:f7:d7:d0:
         88:c1:f0:0a:fa:5e:ff:30:8f:ea:6b:9e:ca:1c:c4:90:a8:58:
         ee:05:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:21:50 2026 by rpki-client