Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f742905b-e2ec-4e68-a030-ddc16eca060c/818a0c72-9404-333a-a9c9-981af657f617.roa
File:                     818a0c72-9404-333a-a9c9-981af657f617.roa (raw, json)
Hash identifier:          kBLbRgXojq180eg3vs9/0U6xXGOtrhJ7/To7SP9lwfA=
Subject key identifier:   64:10:76:82:3C:9E:0F:62:AB:DA:A7:EA:79:C2:6C:CB:8B:50:9A:17
Certificate issuer:       /CN=f742905b-e2ec-4e68-a030-ddc16eca060c
Certificate serial:       010D0C9F4328584D1F4A8B050BB754822ADDA000
Authority key identifier: DF:5F:19:C2:35:DA:C0:42:81:16:34:2E:6D:3D:74:38:E9:C5:DD:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f742905b-e2ec-4e68-a030-ddc16eca060c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f742905b-e2ec-4e68-a030-ddc16eca060c/818a0c72-9404-333a-a9c9-981af657f617.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     11007
IP address blocks:        2602:f58f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f742905b-e2ec-4e68-a030-ddc16eca060c/f742905b-e2ec-4e68-a030-ddc16eca060c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f742905b-e2ec-4e68-a030-ddc16eca060c/f742905b-e2ec-4e68-a030-ddc16eca060c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f742905b-e2ec-4e68-a030-ddc16eca060c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:8b:05:0b:b7:54:82:2a:dd:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f742905b-e2ec-4e68-a030-ddc16eca060c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=8f8d881e-9213-463d-a3bd-457c1cab5fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:43:aa:97:38:20:a9:23:1d:f0:41:00:ca:
                    aa:36:ed:e1:01:72:80:0f:7f:62:37:d0:ba:76:d8:
                    99:03:2b:4e:39:cc:82:60:c0:84:9b:7b:0d:b1:d8:
                    62:17:1b:14:82:c6:b2:40:d0:07:c2:32:2a:06:35:
                    c0:40:26:40:51:d3:02:1c:fe:4d:1a:f9:80:54:5f:
                    bc:37:de:98:c4:e0:c9:b3:93:92:38:11:9c:9a:05:
                    ce:1c:49:bc:a9:af:09:c7:4e:2f:68:c9:34:ee:f2:
                    d8:8a:3c:94:0f:b5:09:bd:0c:a9:bb:e5:45:23:78:
                    de:22:48:d4:38:48:ad:9a:4f:87:16:1c:ae:ad:db:
                    61:60:f5:f7:e8:96:a5:19:d7:e7:2b:b2:61:e5:8f:
                    5d:80:50:7b:69:42:20:f2:2d:f3:7e:74:5f:b5:78:
                    01:4b:eb:92:1f:73:80:eb:9c:3e:e9:8d:4d:02:4e:
                    e5:5a:4f:a5:ff:77:a3:68:71:68:c2:5b:b9:42:8f:
                    26:f0:56:64:6e:6d:e0:4e:54:f8:e6:3c:46:d1:43:
                    ed:a7:57:f3:6a:2b:e4:06:53:34:38:ac:c4:69:3f:
                    8e:80:81:b3:9b:99:90:27:c0:7b:30:08:6e:8d:4d:
                    7e:c4:6d:11:60:44:92:4b:65:47:75:44:c8:8f:dc:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:10:76:82:3C:9E:0F:62:AB:DA:A7:EA:79:C2:6C:CB:8B:50:9A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f742905b-e2ec-4e68-a030-ddc16eca060c/818a0c72-9404-333a-a9c9-981af657f617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f742905b-e2ec-4e68-a030-ddc16eca060c/f742905b-e2ec-4e68-a030-ddc16eca060c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:5F:19:C2:35:DA:C0:42:81:16:34:2E:6D:3D:74:38:E9:C5:DD:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f742905b-e2ec-4e68-a030-ddc16eca060c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f58f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b6:60:68:7b:d8:cb:c0:5a:48:9f:07:65:e8:a0:db:4b:9a:
         ca:7a:bd:9a:3a:b9:1e:42:4f:fc:9c:6f:18:76:48:db:4a:32:
         f9:93:bb:ad:07:57:c1:0b:71:00:db:d3:85:33:af:3c:8e:f7:
         ea:4d:e4:94:d6:8c:66:32:01:68:4a:af:f0:ae:9c:05:d0:2a:
         30:ea:f7:75:7b:e9:51:6f:ec:c2:a4:15:ed:51:74:c3:19:c0:
         6a:e9:08:ef:59:a8:9f:dd:3a:c6:47:b7:7f:87:36:a0:ca:24:
         4e:07:14:dc:79:35:0a:65:88:27:4a:65:66:e1:3d:b3:c5:57:
         ca:1b:33:42:c6:97:c7:cc:31:49:09:1f:bc:de:23:58:82:50:
         31:2b:cd:d3:3e:54:34:7a:3b:e6:f8:92:9b:b6:a5:ea:c1:58:
         a1:8d:a8:d4:d5:9f:95:b1:d3:8e:2d:65:f4:30:8f:94:53:b2:
         da:da:d8:33:b8:3c:d7:bd:9b:d0:d1:bc:84:f9:8c:c9:3b:3c:
         d9:84:32:8d:d4:6c:2a:f2:fa:3e:03:0a:96:b3:7f:d1:4f:ee:
         c0:f0:10:93:87:f5:19:65:b7:3c:d6:cf:3c:ee:7b:58:80:32:
         cf:25:ae:00:d0:f0:08:e3:b7:c1:c3:45:19:07:04:48:c4:19:
         35:77:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:12 2026 by rpki-client