Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/73403b9d-387a-308b-b2e2-da2bcb661138.roa
File:                     73403b9d-387a-308b-b2e2-da2bcb661138.roa (raw, json)
Hash identifier:          r+EHJ/LyMd7JHQieXd3L68KNeMBibAHbBLOgfDwBZt8=
Subject key identifier:   BD:2C:04:92:6B:B0:E3:D6:A4:F0:FE:54:E8:44:D2:FD:25:92:20:66
Certificate issuer:       /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
Certificate serial:       010D0C9F4328584DA8158111DF75A127C1EBF100
Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/73403b9d-387a-308b-b2e2-da2bcb661138.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     40701
IP address blocks:        2602:f965:10::/44 maxlen: 44
                          2602:f965:20::/44 maxlen: 44
                          2602:f965:30::/44 maxlen: 44
                          2602:f965:40::/44 maxlen: 44
                          2602:f965:50::/44 maxlen: 44
                          2602:f965:60::/44 maxlen: 44
                          2602:f965:70::/44 maxlen: 44
                          2602:f965:d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:81:11:df:75:a1:27:c1:eb:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=09043207-9798-4245-a7ba-7f502fa532de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:e2:aa:ed:a0:ab:e4:2c:7c:5d:6b:de:5a:
                    f6:8c:8c:61:5b:14:a2:36:08:16:66:56:e0:3b:b0:
                    4b:6c:88:df:b5:08:8b:4e:16:a7:98:94:90:4c:25:
                    bc:1d:27:22:c7:2e:96:be:b7:10:3b:b6:32:59:7d:
                    75:45:74:62:6b:b3:7d:7c:4f:d6:74:6d:ae:45:a7:
                    09:cf:de:9c:92:1b:3c:b4:6a:c6:93:98:c7:a1:33:
                    d3:11:05:9a:28:bd:7d:1c:72:eb:96:dc:e1:b9:92:
                    8c:49:4f:db:3d:4e:fa:52:90:b7:3b:35:51:61:51:
                    cd:9c:43:b7:ac:f9:8f:e4:67:95:c4:de:2b:7a:6d:
                    45:b7:4b:a0:df:f2:bc:99:f3:21:66:29:c5:c7:02:
                    51:cf:0e:91:8c:fb:31:c0:84:2f:84:48:f2:c3:82:
                    c4:05:1f:96:5b:9f:23:6e:87:a5:e3:fe:2d:a0:19:
                    02:df:ff:17:a9:16:93:d1:f9:71:58:b2:6d:59:ad:
                    f1:a3:75:f3:37:f4:3e:1f:3b:9b:b9:15:29:6f:ca:
                    ef:f9:79:0d:02:38:72:13:53:dd:b4:3e:b0:e7:48:
                    21:71:e3:d8:ea:f4:c6:de:ed:df:a8:3b:43:6c:15:
                    3d:d7:c5:70:a8:75:60:28:43:59:b4:0d:a8:7c:37:
                    da:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2C:04:92:6B:B0:E3:D6:A4:F0:FE:54:E8:44:D2:FD:25:92:20:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/73403b9d-387a-308b-b2e2-da2bcb661138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl

            X509v3 Authority Key Identifier:
                keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f965:10::-2602:f965:7f:ffff:ffff:ffff:ffff:ffff
                  2602:f965:d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:bd:bb:2a:72:49:b3:a1:8d:2c:c1:3a:e3:4e:b0:0d:69:1d:
         72:07:2d:47:e8:e9:64:24:53:62:a0:59:fa:83:60:bc:a5:08:
         5d:9b:9f:91:f8:44:27:10:c2:50:d8:69:e3:ae:b1:ea:6f:09:
         4b:ed:45:5b:f6:12:f5:04:78:76:1e:a0:0a:5c:f7:41:60:b0:
         ec:c1:27:9e:f0:a8:9f:81:02:cb:c6:19:d7:05:f0:09:5d:b6:
         f6:33:ab:15:14:d0:68:78:f3:ba:40:ae:15:f5:0e:db:86:48:
         c9:04:65:c0:a2:5c:57:62:47:97:0f:95:bb:9b:ce:54:23:f5:
         22:6e:09:70:ad:74:97:69:95:6a:25:78:01:c9:40:62:47:25:
         86:16:21:68:3e:99:f6:f3:f4:3d:33:3c:16:cc:73:28:48:e9:
         61:a8:aa:ef:6d:d5:4e:03:c5:cd:a0:b2:04:de:24:30:61:45:
         ed:fa:57:fe:28:29:e3:f8:e7:16:b2:b6:c3:71:61:35:fd:74:
         70:fe:53:d3:43:e2:f0:da:30:20:e5:60:de:7b:21:b0:a1:22:
         be:e5:ba:ed:4c:f7:a4:9d:b6:00:7b:85:db:90:5d:59:18:cd:
         ab:3a:3b:f0:d8:dd:73:51:5f:bd:48:f4:35:ce:6a:a5:21:48:
         01:3f:f0:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 07:29:43 2026 by rpki-client