Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a656001b-bd35-370a-bb4e-55d8a1d6df08.roa
File:                     a656001b-bd35-370a-bb4e-55d8a1d6df08.roa (raw, json)
Hash identifier:          TPjRCn+qnRSu9iUocIUjEfz/rZ1HN+TpM+8lnV2n/4c=
Subject key identifier:   69:45:22:78:A6:72:AD:12:3F:61:EB:80:EE:11:65:86:44:E1:B9:84
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584D316F5B9667E9AC29F76A1D00
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a656001b-bd35-370a-bb4e-55d8a1d6df08.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     16740
IP address blocks:        2602:f5c1:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:5b:96:67:e9:ac:29:f7:6a:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=dd58932f-5dbd-42ad-8a81-6646332fc2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:c5:65:d8:61:15:d6:74:f3:2e:c8:29:e8:
                    e8:1f:d6:e2:b6:ce:d8:a4:dc:07:41:b0:3e:8a:02:
                    9b:eb:1b:43:bb:42:54:e6:32:cf:ba:af:e2:3f:b5:
                    4c:96:f8:bd:5a:e4:df:5b:a7:be:6d:2a:8e:46:c8:
                    fa:94:0d:74:29:04:c9:21:8f:90:c5:81:9c:f6:35:
                    d5:84:d4:ff:5d:c3:a8:13:2a:82:7b:4d:29:a2:d3:
                    e2:2a:07:ed:1e:88:2a:62:9a:85:32:2d:cf:bb:43:
                    87:be:18:03:89:1c:5c:ff:df:76:94:9f:5e:63:b5:
                    6b:11:03:5a:1f:d4:bd:d6:3f:6e:d5:9f:84:02:22:
                    26:b5:a8:4a:fe:ae:28:ad:d0:ad:73:21:77:4c:2f:
                    d4:0c:d3:e5:55:ce:2d:1f:52:99:39:b1:6c:6b:83:
                    16:87:09:0e:c4:58:76:f2:5c:07:21:a9:11:5b:6a:
                    48:8b:09:aa:10:0a:1d:3b:26:7d:e8:34:bd:c8:d1:
                    81:38:91:39:c6:22:43:c4:42:e0:aa:7c:11:f5:7a:
                    fa:9b:3a:41:b6:10:ae:97:41:c7:50:ba:4a:d0:87:
                    2a:f8:77:41:b0:41:42:25:24:79:0b:46:80:0a:0e:
                    07:00:98:be:9a:da:d7:28:d7:42:f6:ba:3b:00:a4:
                    f6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:45:22:78:A6:72:AD:12:3F:61:EB:80:EE:11:65:86:44:E1:B9:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a656001b-bd35-370a-bb4e-55d8a1d6df08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:db:3c:22:a7:75:b2:e7:a3:2c:ae:b2:20:45:13:58:ed:c3:
         eb:7a:c3:47:57:10:0f:88:b6:3d:e8:00:df:36:78:3d:4f:f0:
         c4:23:f8:df:46:8b:ab:bd:20:fb:84:3e:ad:6e:69:0b:54:a4:
         e4:4c:08:f1:a1:c1:be:3a:0e:2b:77:b3:fb:f1:2b:ff:a5:d0:
         1d:05:17:56:14:68:91:a9:46:85:4f:ad:60:54:fc:46:19:99:
         10:57:51:3b:35:1b:a7:bd:cf:2b:71:a6:6e:82:f4:fa:b5:be:
         53:e7:58:55:ff:18:fb:ea:23:16:74:e7:d3:91:d0:f2:4c:32:
         ad:ad:c0:30:00:e1:db:b8:0c:30:6b:8b:11:08:95:dd:39:1a:
         7d:6d:05:f0:9d:a7:47:2e:0a:6e:4d:e6:57:82:8a:8a:a6:f1:
         66:20:dd:99:25:4b:3f:4f:fc:35:ba:ca:71:72:d8:b4:26:56:
         1e:e3:39:a9:bc:ac:ff:ba:5a:1c:2f:89:9a:07:f5:03:aa:39:
         01:4a:74:ca:d0:bd:5e:68:73:d4:34:09:26:0a:4f:e1:d9:09:
         71:a9:74:00:c4:8b:0d:d1:49:ef:45:55:4d:e2:b4:03:8f:65:
         fb:8e:82:02:36:78:21:50:99:cc:fc:70:dc:e1:d8:5f:fd:56:
         08:9f:b8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:52 2026 by rpki-client