Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa
File:                     b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa (raw, json)
Hash identifier:          VuOFZEluXyjmH6gEIkaxPsCLLEeG7COhfwKry4pPJvg=
Subject key identifier:   40:A6:F1:4B:02:28:5B:63:51:5D:8F:D1:6D:53:63:C0:C3:0A:4E:10
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584E2AD44B15157841B18C231780
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     401659
IP address blocks:        2602:f5c1:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:4b:15:15:78:41:b1:8c:23:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=90d6f4b5-2af5-43a6-9895-2e8423780fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:73:be:37:c1:7c:2a:9b:f4:6a:ad:99:bc:
                    be:6e:75:d4:4b:25:ce:de:66:24:ad:32:8a:c4:49:
                    a5:c8:41:8e:ad:00:6e:f6:0b:bc:cc:33:94:2e:78:
                    51:fb:dc:bf:5f:53:7d:bf:e5:f2:53:7a:aa:96:0a:
                    48:3b:44:9a:fd:c0:5f:91:ae:49:a0:e7:55:33:fa:
                    16:d3:44:47:ea:3a:d4:43:88:17:cc:35:fa:74:ae:
                    b6:c8:06:41:10:aa:0e:85:d5:c7:5b:72:15:55:4c:
                    30:76:88:ba:1d:ae:62:aa:6c:97:91:b9:0b:7c:1c:
                    89:20:26:4b:e9:34:f7:8e:dc:fb:1e:81:0a:99:7c:
                    8c:07:e7:d0:58:b3:30:a7:b0:60:38:dc:14:9b:e1:
                    b2:d3:5d:5f:df:7a:d4:2f:e5:a7:15:df:b6:f8:b8:
                    a8:00:0b:4c:af:be:b9:d8:80:fd:e1:07:c9:d5:dd:
                    32:a2:97:78:16:87:75:7a:3d:0b:5f:69:21:78:b8:
                    7a:2f:4a:40:bf:f0:ae:14:0a:e7:f6:3e:26:17:d0:
                    81:3f:94:1c:f1:40:c6:e5:7d:31:f5:b6:d9:81:a9:
                    e9:94:71:dc:2b:55:c8:8d:78:1d:c8:d6:02:b2:32:
                    dd:3c:04:62:02:f0:ca:1d:89:dd:2b:ac:39:e7:a1:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A6:F1:4B:02:28:5B:63:51:5D:8F:D1:6D:53:63:C0:C3:0A:4E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:1d:cd:21:70:b6:8a:c2:fd:33:92:c0:2b:3d:58:78:57:
         45:0e:60:ab:94:d1:92:ed:4b:c9:b7:34:da:8a:06:ca:a1:95:
         b7:6c:65:af:44:1f:43:ec:bd:82:6b:3e:d4:16:8e:47:5c:c8:
         7d:f3:2b:ba:93:8d:ef:13:e2:ff:ba:89:34:0d:66:06:7f:0a:
         9f:3f:e9:ec:0c:05:e2:dc:e6:19:1c:3c:53:59:42:e6:91:dd:
         02:37:25:ac:7f:d8:e1:c2:56:59:0b:30:ab:d8:f5:da:d5:dd:
         7a:f7:cd:b1:4f:21:90:7d:12:1e:f1:0a:8a:f9:74:d3:25:4b:
         ab:b4:ff:74:98:07:79:ac:b9:0b:91:6d:d0:fb:21:00:8d:20:
         fa:0b:18:1e:5a:a1:d5:19:3f:6a:62:c2:04:05:5b:dd:8f:e0:
         05:cf:ec:ed:5d:81:93:e9:ed:b0:83:8c:de:4b:cc:fc:e1:1e:
         b9:bb:82:d3:1f:8f:9a:6a:35:7b:17:5e:8f:35:8f:b9:2c:23:
         98:ce:cc:e4:a0:e5:97:09:9d:b7:2c:ca:04:5f:38:3e:54:d4:
         0f:0a:c8:0a:75:58:8e:b0:dc:f8:11:1a:4d:0d:af:aa:93:36:
         e5:70:19:b2:2f:c4:0a:a4:52:9e:f3:c0:3e:2c:a0:6e:02:e2:
         ae:94:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:57 2026 by rpki-client