Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/78391bf5-1171-35e1-9bef-eb0a933c67ef.roa
File:                     78391bf5-1171-35e1-9bef-eb0a933c67ef.roa (raw, json)
Hash identifier:          cmxZGz/l27J+LlJ1/tczuHpHSQJMwCNSLdoFlUsuSSU=
Subject key identifier:   2C:53:F9:F8:D6:3A:FE:E5:0F:D5:01:03:93:AD:A5:9D:D6:68:BB:A1
Certificate issuer:       /CN=7526f790-ccec-40fc-afc4-9d600cb8a815
Certificate serial:       010D0C9F4328584D3F64D1D0C3AA9B77C1B7B1F0
Authority key identifier: A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/78391bf5-1171-35e1-9bef-eb0a933c67ef.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     8075
IP address blocks:        2602:f742::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:d1:d0:c3:aa:9b:77:c1:b7:b1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7526f790-ccec-40fc-afc4-9d600cb8a815
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=06a16ae4-53f1-417f-bcb2-cb31e18b2a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:6d:81:77:76:39:67:8c:80:9c:1a:4b:bf:
                    9f:98:00:30:31:a0:d9:da:54:e8:d8:a8:81:1b:d9:
                    2c:01:51:31:ce:64:3e:44:e5:55:43:e8:bc:1d:78:
                    39:73:b4:5d:c9:73:65:86:d2:f9:85:f9:ae:60:53:
                    08:7c:5d:9a:57:5a:7d:4b:07:15:15:ee:7e:e2:3f:
                    1a:47:db:4b:4c:70:f7:02:3a:99:67:36:bb:ad:b6:
                    b5:97:ff:90:b7:de:6b:62:bb:a1:b2:a0:07:3f:f5:
                    30:e0:3b:f1:43:22:22:d4:b1:b8:39:70:f1:92:88:
                    2d:31:ee:ce:74:35:fb:e9:d0:34:86:b3:15:91:c6:
                    81:66:bb:5c:94:e0:04:9d:00:ad:46:65:b2:2e:81:
                    96:9b:6d:ed:ff:2b:3a:66:c1:01:35:b0:79:5e:ea:
                    49:aa:66:ca:3b:15:95:6a:3d:eb:22:64:e9:96:e3:
                    a9:ef:e6:c4:b3:8a:6b:55:e9:9d:4c:53:8a:99:b6:
                    15:c0:b0:29:3f:88:79:37:f0:92:07:e0:14:a9:0b:
                    8b:9e:dd:79:a7:b1:4d:84:ed:f5:0e:50:1d:67:c3:
                    93:59:68:bd:02:0e:03:d7:cd:2d:c2:82:02:69:f1:
                    08:34:15:18:4a:d8:b0:64:51:44:51:fa:af:3f:47:
                    01:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:53:F9:F8:D6:3A:FE:E5:0F:D5:01:03:93:AD:A5:9D:D6:68:BB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/78391bf5-1171-35e1-9bef-eb0a933c67ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl

            X509v3 Authority Key Identifier:
                keyid:A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f742::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:fb:92:d9:f7:7f:f6:86:4e:60:95:4e:2d:8f:e1:9e:f4:
         55:4a:e3:30:f8:55:7e:2f:8a:21:e8:8f:83:46:59:8a:93:da:
         15:03:f0:02:13:90:6c:62:9e:d1:fc:9e:61:2b:31:b0:c6:b4:
         2d:cc:3c:d0:be:19:2c:1b:c7:4f:68:22:e0:d5:d8:12:e4:96:
         12:55:2c:2c:5f:d8:ab:9c:44:a0:e6:4c:ed:2a:af:ee:16:08:
         c5:17:0b:df:20:a8:d4:c4:5f:f7:cd:7a:30:9d:84:ea:81:de:
         cd:24:12:56:56:42:3f:aa:6b:ca:94:d8:05:65:af:eb:ad:2e:
         e4:41:35:14:36:fb:d2:7c:90:95:8f:b1:0a:39:11:2a:4c:9c:
         4c:8c:15:4f:a0:66:a3:21:50:6c:f1:85:5f:fb:08:d6:85:28:
         8f:96:1e:28:07:6b:52:0b:2a:99:ae:aa:c3:2e:a9:40:8b:48:
         bd:64:5b:4c:d8:49:9f:48:68:36:48:a9:f6:9e:00:09:12:77:
         2f:c9:2a:c1:e1:a6:79:ff:f8:a8:43:d4:3d:b1:a6:84:03:89:
         83:a9:ac:a5:ca:af:26:64:3b:e0:58:d9:56:11:61:8f:4e:bc:
         5c:c1:75:af:31:1e:f8:f8:b9:90:cd:94:b1:4e:ac:71:73:dc:
         f8:9a:6d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:05 2026 by rpki-client