Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa
File:                     d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa (raw, json)
Hash identifier:          n3KNH+URCK5NfL/WgWje9YPH9qcim3oRzbwRGnTP9e4=
Subject key identifier:   3E:3E:7B:4C:13:2B:8C:1A:30:D7:12:C5:07:70:BB:34:40:47:B9:EC
Certificate issuer:       /CN=4b13bba8-5260-44f5-8f00-3cdfc8b95aae
Certificate serial:       010D0C9F4328584D1707F1B73C4506CE78657D80
Authority key identifier: AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     401637
IP address blocks:        2602:f71a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:f1:b7:3c:45:06:ce:78:65:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b13bba8-5260-44f5-8f00-3cdfc8b95aae
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=bb8d85d0-6421-4adc-9c1b-5364d7c0227d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:04:55:4f:c5:73:50:43:fa:db:5c:19:5b:f1:
                    1c:84:28:46:e1:2c:63:b5:c9:ef:7d:cd:e6:42:aa:
                    99:81:07:66:4a:37:12:37:07:aa:b1:ac:4f:f9:b5:
                    5e:93:8f:e8:c5:0b:c1:ee:e6:ed:22:2a:69:6c:93:
                    44:e3:22:22:4a:41:1b:6b:b6:63:d5:af:ff:c5:76:
                    7e:7c:33:48:aa:23:e7:13:66:be:b7:80:cf:f4:04:
                    e2:8f:c2:f3:d1:92:b4:0e:ad:df:71:46:93:b2:3c:
                    4b:4f:ae:cd:ea:66:63:8b:fd:b2:63:9f:c7:2a:88:
                    db:a0:f4:71:e8:12:d8:84:b7:85:c5:b6:38:d2:7c:
                    fd:ce:65:78:02:ef:d0:c0:ba:8e:ac:95:b2:5e:29:
                    f7:1f:c7:8f:0e:12:8f:df:c6:12:6a:87:03:a3:eb:
                    79:6e:06:69:df:a9:d4:e1:48:a1:c5:30:e9:70:58:
                    ed:46:bd:a9:43:de:91:1a:f0:2d:2e:2f:85:49:01:
                    2f:3f:13:1d:9a:d4:45:a7:d4:8c:a5:12:42:a5:bd:
                    ca:1e:35:42:b7:2b:03:c5:5b:de:45:83:4f:4b:18:
                    9c:ce:d0:e0:8f:36:4f:71:e6:48:38:bd:30:b4:7e:
                    10:05:f6:71:24:a2:50:29:fb:e4:2f:77:a4:48:ba:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3E:7B:4C:13:2B:8C:1A:30:D7:12:C5:07:70:BB:34:40:47:B9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e1:7f:8c:0e:9e:1f:d6:ac:62:0c:18:b9:a9:a3:36:1b:b6:
         79:86:6c:00:47:19:ac:98:f0:0d:e1:68:aa:93:39:d3:0d:bc:
         0a:c7:e6:f2:15:6f:fa:2d:52:e1:10:a5:05:31:86:ec:a6:fd:
         a3:25:dd:2c:d8:b3:ca:9f:ef:df:fb:5f:2e:25:5b:ea:5d:fb:
         97:22:79:3e:67:27:ce:ed:28:55:71:57:b2:c7:25:52:60:92:
         59:96:fb:f7:f1:dc:a6:f1:46:fc:18:5d:24:f6:47:34:9d:10:
         b4:0f:56:98:b5:21:f3:74:f4:46:32:1c:f2:f1:27:07:73:6d:
         b4:df:47:03:a9:85:ca:96:46:3b:b7:b9:13:1e:f8:24:98:80:
         b6:a7:f9:cb:fe:a8:7a:a1:a3:d2:60:5b:ac:2b:81:45:27:6f:
         32:a6:4a:d9:af:b9:06:0c:fd:ad:28:94:13:dc:34:28:44:12:
         89:2b:fc:4c:46:c9:e4:fa:a9:97:d5:01:ff:6f:92:71:df:e3:
         5b:07:ef:f1:39:1f:96:44:07:1e:f7:83:a5:72:59:fa:b0:12:
         83:cf:a4:d6:c2:cd:15:75:c6:8f:5e:72:e1:56:55:94:29:77:
         70:c4:14:e1:f1:35:05:e8:8c:12:c6:1d:e1:1b:04:4c:ba:ff:
         b9:5d:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:39 2026 by rpki-client