Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa
File:                     49fab721-ee4d-39f7-95aa-244180f7663d.roa (raw, json)
Hash identifier:          eZBai0fQRx0VskON6OavaYSMNjn0YFhw32lEspaTDnM=
Subject key identifier:   04:B0:74:FD:4C:57:93:21:AE:2F:2C:B6:26:CC:9A:C7:30:C5:BC:4A
Certificate issuer:       /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
Certificate serial:       010D0C9F4328584E4F1F3A4E8594B3B4000F2754
Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     19468
IP address blocks:        2602:f76f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:3a:4e:85:94:b3:b4:00:0f:27:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=b013d4be-4e7a-4d85-8c2d-7a67489025ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:29:db:eb:05:6b:73:25:dd:84:e4:83:d6:
                    8c:c6:18:f0:ac:6a:ba:6e:87:5e:e0:a2:bb:a6:05:
                    f8:99:45:4e:70:9e:ce:02:88:75:f2:2f:92:6c:2b:
                    33:1d:3d:05:13:e1:ea:3a:6c:35:19:64:c7:77:b3:
                    6b:43:1c:6b:5c:de:55:85:c6:70:11:ed:1f:2c:e0:
                    62:a7:cf:ba:60:f4:74:e4:e5:3e:38:8d:ed:ca:5a:
                    3f:2a:63:e8:39:e0:99:3c:51:62:d6:7d:c4:07:a7:
                    ad:e0:cd:50:7c:e6:f1:07:07:84:3f:52:08:a4:4f:
                    d3:de:ad:b0:d8:c5:f9:ce:b5:38:11:48:bc:39:00:
                    a4:02:9c:b7:a8:e3:0e:58:03:82:66:22:e6:25:b8:
                    81:2f:63:4d:b7:70:74:a5:97:cf:77:b9:28:06:7b:
                    b4:52:7a:6f:4a:5e:87:17:4b:f3:f3:cc:81:c9:91:
                    be:18:f2:1d:3c:a1:ab:44:d1:31:c9:1c:2f:b4:ec:
                    07:aa:0c:ea:75:d5:16:36:04:5e:af:29:f0:7d:0d:
                    5a:7e:dc:30:4b:c0:2d:7f:e9:57:1a:ff:4c:1a:8a:
                    c0:f1:5e:dc:15:6e:34:bb:a7:e9:36:2a:36:9e:e7:
                    70:e2:65:19:d9:b4:b8:f8:c6:3f:64:12:7e:d6:06:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B0:74:FD:4C:57:93:21:AE:2F:2C:B6:26:CC:9A:C7:30:C5:BC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl

            X509v3 Authority Key Identifier:
                keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f76f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d7:23:51:14:77:e9:30:ee:8d:13:b5:7a:3e:d4:53:0e:0d:
         87:85:68:6e:04:0b:c4:94:26:00:46:c3:67:23:3d:33:49:65:
         61:06:4b:4c:47:6b:41:1a:9a:43:06:21:99:b2:e1:5b:5d:1c:
         dd:4d:b9:16:17:e4:48:4b:81:4e:29:41:59:cd:2e:18:ad:a3:
         c8:42:e6:91:62:40:d6:67:24:39:88:8c:51:28:ab:96:c3:c0:
         7c:a3:40:0c:0b:2e:3f:9f:7f:9c:49:89:e0:86:99:47:8a:35:
         f1:db:6c:02:7d:24:04:52:25:ec:10:74:c9:84:5b:a4:8b:96:
         50:ba:f3:36:8c:c6:6f:97:c8:57:95:2c:72:a7:3f:d3:85:2f:
         06:6a:a4:cb:fc:1e:ce:4e:fd:68:63:0c:4f:63:93:3c:cf:61:
         af:1f:24:ea:2d:7a:fe:aa:e6:f6:bc:30:83:35:6b:53:54:c9:
         3c:30:ac:cb:c5:8f:9c:8e:6c:ca:35:a8:7b:80:6a:5a:89:ed:
         51:99:45:83:52:0b:f1:91:a6:fe:70:6c:fb:b5:6f:48:5f:b5:
         17:50:e9:f8:d1:e0:48:41:4a:e2:30:f0:1b:06:a2:a6:77:d8:
         26:01:76:e7:51:35:42:77:65:18:c0:70:29:d2:c3:7a:28:1d:
         6a:1f:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:19 2026 by rpki-client