Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/4f68236d-b761-39da-8613-00ddeb0d854f.roa
File:                     4f68236d-b761-39da-8613-00ddeb0d854f.roa (raw, json)
Hash identifier:          TRYtOKDh0gZ2O2WtAxfF4P8mzpVRJHG00MGeO3PCI5s=
Subject key identifier:   B1:F8:AB:F1:0F:88:24:C0:B0:50:4C:1E:A4:BC:4D:06:5D:58:1C:DB
Certificate issuer:       /CN=f330fac3-f4ae-4421-9305-7e1649195c36
Certificate serial:       010D0C9F4328584D2EC893728BCDC4444A895340
Authority key identifier: EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/4f68236d-b761-39da-8613-00ddeb0d854f.roa
Signing time:             Mon 16 Mar 2026 02:12:54 +0000
ROA not before:           Mon 16 Mar 2026 02:12:54 +0000
ROA not after:            Sun 14 Jun 2026 02:12:54 +0000
asID:                     39753
IP address blocks:        2602:f848::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2e:c8:93:72:8b:cd:c4:44:4a:89:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f330fac3-f4ae-4421-9305-7e1649195c36
        Validity
            Not Before: Mar 16 02:12:54 2026 GMT
            Not After : Jun 14 02:12:54 2026 GMT
        Subject: CN=5d3a66cf-35a5-427a-97e6-506eca8371ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:13:37:14:03:b0:7b:93:3f:b4:cc:a8:b0:61:
                    a3:f2:62:cb:6d:ca:59:3d:b8:b1:ac:06:fc:85:3b:
                    30:cb:cc:47:ce:0d:c6:b4:47:e9:d6:e5:87:0a:ba:
                    08:ff:f9:24:35:d9:c2:83:aa:62:79:c2:3a:45:60:
                    31:57:a5:cd:45:88:5d:a3:31:f4:d7:37:25:bb:d5:
                    02:be:d4:9d:98:2b:37:fc:a2:49:e6:28:86:62:f5:
                    40:0a:01:08:f8:68:91:82:7d:00:e6:a3:01:f0:e9:
                    ed:4f:c3:57:0c:66:99:6c:07:ac:6e:32:b2:3b:27:
                    5a:f8:81:67:62:a8:a4:25:0c:a0:f2:19:b5:44:e4:
                    ef:21:aa:29:fd:90:0a:6f:05:a5:05:5f:d1:c5:bd:
                    e2:4f:97:87:54:27:92:02:af:6b:69:e8:1d:72:64:
                    68:1e:0f:7d:00:3b:73:c4:60:28:37:ca:72:1a:11:
                    87:3e:64:0d:5a:27:4e:49:d1:1f:b9:d5:d7:8b:1f:
                    ba:bd:22:3e:d0:41:f7:1c:ad:3e:fa:65:d1:db:54:
                    de:90:27:b3:d2:d2:81:a7:a0:79:c1:f5:4b:b0:10:
                    40:4c:13:bc:17:5e:d1:09:00:b8:65:df:3f:42:bd:
                    07:36:6a:55:ec:08:1e:31:9a:ac:f9:8b:d1:a6:01:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F8:AB:F1:0F:88:24:C0:B0:50:4C:1E:A4:BC:4D:06:5D:58:1C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/4f68236d-b761-39da-8613-00ddeb0d854f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl

            X509v3 Authority Key Identifier:
                keyid:EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f848::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:60:aa:da:7c:e0:18:df:25:e1:68:cf:31:f4:72:60:cf:28:
         96:fa:5e:4b:3c:77:9c:9e:70:cc:dd:7b:66:e6:b6:3d:7a:87:
         ea:bb:81:c8:1b:38:41:d2:38:7b:43:c2:ba:d2:41:57:8b:b4:
         fb:1c:3a:03:92:bb:23:a4:33:bb:5b:b9:fe:a9:31:99:08:ec:
         b1:68:13:3d:f7:9c:b3:a9:fd:03:ed:b2:d8:ff:5a:34:12:48:
         9b:80:05:ea:56:7e:35:81:db:31:8a:34:3e:83:27:8f:bb:8d:
         8b:6d:24:71:e1:c5:98:af:df:20:26:17:68:0f:60:d2:69:d4:
         d6:96:55:a4:28:7a:e7:20:d4:8d:da:06:2f:ed:8e:f6:0d:4b:
         1f:db:a7:de:a0:ef:a1:68:90:11:8e:59:54:d8:46:15:65:54:
         7a:8e:ea:e2:94:ed:6c:7f:15:5b:e8:9c:87:bc:e9:5d:4a:36:
         c0:ff:0c:e8:9f:ed:97:f8:07:ca:a4:80:aa:cc:cd:a4:bd:a2:
         6f:dd:44:8d:a5:de:74:0e:66:4e:02:d5:27:c7:7a:90:69:6c:
         c5:ac:20:39:c7:8a:7e:33:b8:a7:92:df:fe:7f:35:fd:86:98:
         a7:1f:9e:42:50:9f:12:df:9a:14:c5:f5:d8:55:91:4d:95:45:
         e1:48:fc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:19:00 2026 by rpki-client