Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/aef7e15b-22db-303f-9943-b23451fa024d.roa
File:                     aef7e15b-22db-303f-9943-b23451fa024d.roa (raw, json)
Hash identifier:          mbyU6Bmr6EWvbLfqZSiQzbuN45v6SNJWM8a7tHZna4M=
Subject key identifier:   33:EB:BD:8C:3A:68:78:A7:70:EA:BE:08:00:7B:2D:A1:F8:E5:35:A5
Certificate issuer:       /CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d
Certificate serial:       010D0C9F4328584D300A24BD4DF470D920513A80
Authority key identifier: FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/aef7e15b-22db-303f-9943-b23451fa024d.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     21665
IP address blocks:        2602:f706::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:24:bd:4d:f4:70:d9:20:51:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=54ba9d8d-e51f-42e9-9f84-9726b371687c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:95:0d:e3:dd:12:0f:3c:d2:cd:33:3c:2d:
                    41:88:a5:fe:60:78:6c:a7:fc:15:06:fc:0e:78:c9:
                    c9:dd:f9:35:b0:da:3b:14:ea:88:57:24:5f:57:40:
                    4d:c1:ba:c0:64:1c:15:27:ec:2f:ef:59:e8:9b:ff:
                    ea:62:fb:4f:19:0b:d8:22:ac:9c:34:a6:20:02:35:
                    ec:73:38:4f:93:46:48:8c:b8:89:bc:08:62:8f:c7:
                    47:d4:27:37:f7:7c:0a:04:f5:e8:32:76:8a:d5:e1:
                    69:34:83:78:9f:21:48:fd:98:24:dc:60:35:19:dd:
                    6e:c7:be:f5:4a:a4:88:40:2d:5a:00:43:e3:bd:c8:
                    5a:a8:9b:30:7f:45:a6:78:6e:73:2d:01:3a:c9:51:
                    36:0d:b2:72:b5:62:3c:ee:58:6c:bb:bb:e1:8e:9b:
                    88:93:a5:a6:4f:28:71:c0:b7:d9:9f:0d:a9:6a:f0:
                    67:30:c3:4e:40:ac:60:ee:cd:3c:91:82:09:a8:cf:
                    ac:cc:9f:c4:a8:64:c9:3a:54:74:cf:19:d6:73:80:
                    c5:57:9e:b0:45:2f:2a:28:ff:eb:85:4a:59:39:5c:
                    fe:57:9d:14:1a:01:82:2f:5a:b4:29:fd:34:5d:81:
                    37:af:2e:e9:77:8f:a5:97:a9:9d:7c:bf:14:62:7b:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EB:BD:8C:3A:68:78:A7:70:EA:BE:08:00:7B:2D:A1:F8:E5:35:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/aef7e15b-22db-303f-9943-b23451fa024d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f706::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4d:76:5d:99:aa:ff:b1:b4:74:13:da:92:a9:cc:ad:34:c0:
         70:6d:45:ba:40:b6:d7:14:5f:e0:ba:0a:de:27:5f:45:3a:3a:
         3f:e4:5d:a5:bb:c1:77:f4:3a:19:12:ad:ac:a8:70:45:08:0c:
         0c:4d:f9:e6:23:28:2b:97:54:4f:c5:8a:7a:70:b4:c3:5f:cd:
         f0:00:f1:11:c5:42:b9:74:7e:f9:a6:ea:88:d5:d7:be:51:c9:
         be:b2:f0:85:60:20:c5:68:26:00:8d:02:0c:80:79:06:52:58:
         94:bc:08:33:a1:30:2c:94:2b:3f:73:ba:e5:9d:85:f3:15:3a:
         3f:e9:3e:cd:0a:fe:c2:15:54:90:df:b1:c3:16:03:e2:fa:52:
         08:49:90:84:fc:58:48:d4:76:e4:4b:c4:63:b5:41:87:99:a3:
         72:30:6d:a0:25:42:7e:68:50:49:dc:49:e2:69:0a:72:e3:44:
         f7:9e:53:61:e9:d1:09:48:04:fd:fd:c3:04:ca:b6:bc:b2:b5:
         89:e7:6c:63:39:18:d9:fc:34:e6:25:1d:d5:cb:8d:90:89:f7:
         06:92:a4:23:cf:56:02:7d:a2:f9:2c:af:62:06:de:d0:91:47:
         85:1d:99:15:ae:e8:21:51:74:95:3d:c9:d8:0a:9d:2f:ba:59:
         f8:2f:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:16 2026 by rpki-client