Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/bd176c27-6e4e-379c-a5ea-6e4cf7d1d08f.roa
File:                     bd176c27-6e4e-379c-a5ea-6e4cf7d1d08f.roa (raw, json)
Hash identifier:          rKrfn7nAxc8h6QfmcO3/XRrlW3AdYwW6ZGY3uqIxFIM=
Subject key identifier:   51:35:B2:33:6F:1A:BD:3B:5C:C9:2E:53:8F:63:EE:0B:A1:54:F7:CE
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F4328584DB7703C40413D4F9CF8ED0070
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/bd176c27-6e4e-379c-a5ea-6e4cf7d1d08f.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     213683
IP address blocks:        2602:f700:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:3c:40:41:3d:4f:9c:f8:ed:00:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=522a417a-4897-4247-aa20-4ed684749f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f2:c9:c4:58:69:2e:c9:d4:58:b1:19:ec:4f:
                    61:90:bf:bb:d0:ea:49:ae:60:d8:11:53:d9:c4:51:
                    7d:0b:3f:08:9b:09:90:0d:9c:04:f8:2d:5e:60:09:
                    e2:ed:d2:3b:43:81:94:12:88:eb:7a:23:8a:e1:52:
                    ee:d9:6a:5b:fd:27:52:b0:00:44:75:cf:51:cb:f4:
                    eb:d6:40:e6:fb:f4:30:4d:ba:7c:d7:c9:87:71:7f:
                    cd:4c:6b:5e:8a:af:db:aa:ba:78:3d:c5:7b:43:15:
                    15:ea:16:6c:e7:9a:4a:ea:ac:54:01:75:84:d1:96:
                    dc:bc:d5:b3:a7:31:5c:ab:54:47:a9:22:39:9c:13:
                    a7:87:d5:ed:a1:0f:b4:e2:a7:21:3f:88:73:cb:40:
                    11:0b:c5:03:0e:e5:5b:83:96:72:81:f4:36:7a:60:
                    df:6f:ac:99:b8:66:68:05:30:a1:79:fe:03:01:47:
                    44:6d:c5:17:97:1d:52:b2:df:98:e1:6f:9f:4c:03:
                    51:2c:90:78:e7:74:1b:f1:d8:ec:1d:68:11:9e:bf:
                    a7:6d:6f:82:36:27:05:18:33:1a:35:99:80:f1:9e:
                    a0:30:61:43:7b:fe:ac:6e:3b:f3:5a:a4:2b:01:d2:
                    d2:71:b0:7f:93:44:d7:a8:19:a2:cd:95:39:ba:45:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:35:B2:33:6F:1A:BD:3B:5C:C9:2E:53:8F:63:EE:0B:A1:54:F7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/bd176c27-6e4e-379c-a5ea-6e4cf7d1d08f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f700:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ea:43:30:89:8c:25:f3:d7:c2:d4:c0:f0:49:11:06:d3:fd:
         d9:99:bb:46:da:0b:fe:f3:c6:49:ab:5e:dc:00:fa:41:e2:30:
         88:60:1b:21:47:ca:3b:d5:ee:c6:25:1c:7b:80:2d:57:7e:a5:
         86:04:9a:76:3b:54:e0:12:0d:6f:f9:8a:77:f4:68:3b:e4:02:
         87:a1:f9:bc:7c:73:59:e7:0d:47:2b:f0:82:4d:25:da:2c:c5:
         10:6a:d9:c4:d0:16:19:cb:a9:cb:a7:43:76:0a:87:11:30:1c:
         33:89:8f:4f:a0:15:38:63:2d:3e:24:e0:ce:4b:3f:80:a0:be:
         b3:64:d3:4b:18:9f:34:eb:85:49:95:66:78:ee:f2:84:36:00:
         e4:a3:f3:17:e7:c0:82:96:19:a7:ed:a2:0e:aa:b7:de:1e:2b:
         63:10:11:44:37:20:69:41:43:50:dd:f9:fa:41:13:6e:ed:c3:
         7d:c9:59:37:fb:c7:24:6e:be:96:98:d5:0f:c4:7b:ec:10:de:
         c5:d0:ec:c4:f4:c5:9f:12:ed:5d:01:ca:ff:61:2f:df:98:bc:
         74:a1:7f:d1:de:8d:03:74:db:8b:6c:10:5b:b8:ad:a4:57:c5:
         79:d1:3b:28:97:ac:50:27:74:90:a6:cf:29:54:2c:60:88:01:
         f4:75:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:41 2026 by rpki-client