Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/02e386ef-7238-3083-9a51-cb8b38483b70.roa
File:                     02e386ef-7238-3083-9a51-cb8b38483b70.roa (raw, json)
Hash identifier:          lyaqKBgcwj4gaqQN1DXQN28R75hNB4F1xSQ7SKwUDa8=
Subject key identifier:   7D:43:83:97:D3:FC:9D:0C:E6:D6:57:14:95:2E:20:D6:83:2E:48:B1
Certificate issuer:       /CN=1ff41215-3026-434d-963c-327afdcf5cbe
Certificate serial:       010D0C9F4328584D5234FD5977DBFE6229B4D680
Authority key identifier: AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/02e386ef-7238-3083-9a51-cb8b38483b70.roa
Signing time:             Sat 28 Mar 2026 18:44:38 +0000
ROA not before:           Sat 28 Mar 2026 18:44:38 +0000
ROA not after:            Mon 01 Jun 2026 18:11:24 +0000
asID:                     396982
IP address blocks:        2607:d0c0:bffe::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fd:59:77:db:fe:62:29:b4:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff41215-3026-434d-963c-327afdcf5cbe
        Validity
            Not Before: Mar 28 18:44:38 2026 GMT
            Not After : Jun  1 18:11:24 2026 GMT
        Subject: CN=853bf1de-8569-4b47-9502-8d5bf4fa7294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:61:13:82:2b:9a:dc:7a:22:6e:8f:d9:41:
                    92:a9:1f:23:00:80:1b:6f:20:fc:35:4d:66:a5:4e:
                    72:e0:b8:bb:eb:b3:95:3a:50:a0:93:93:8d:b7:75:
                    d9:63:38:d2:63:43:3a:20:b4:bb:f8:a7:df:76:19:
                    53:c0:11:2d:a0:35:82:d6:86:e3:ba:74:76:03:4c:
                    bf:ae:e3:87:44:cf:66:c5:20:a3:e2:6f:ee:ce:0b:
                    01:f6:f3:27:10:5b:c3:e1:c8:69:b7:17:19:5b:ee:
                    0e:32:9d:c9:a4:c6:f4:b2:15:ad:bc:49:51:b6:f9:
                    34:fc:18:7c:20:d8:d8:26:bd:83:97:71:80:bb:b4:
                    bb:4b:21:20:1c:d1:95:d6:52:ca:a9:70:d2:0f:ec:
                    aa:01:1b:4c:69:34:25:97:99:b9:b7:7e:e6:10:fe:
                    ed:98:e6:a7:b8:53:1b:f3:69:65:d7:14:6d:17:99:
                    54:43:98:49:53:0c:ab:eb:33:aa:e2:74:3d:8b:5a:
                    db:5d:04:17:9c:46:6f:36:5a:24:8f:64:bf:0f:eb:
                    23:bb:00:b9:e9:d0:d5:21:86:ad:d7:94:7e:95:a4:
                    55:d2:69:7c:28:36:1e:33:48:ed:0e:1d:b9:f8:17:
                    e6:9a:55:b4:5c:7f:fa:1c:42:eb:e4:fe:e9:1b:1c:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:43:83:97:D3:FC:9D:0C:E6:D6:57:14:95:2E:20:D6:83:2E:48:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/02e386ef-7238-3083-9a51-cb8b38483b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl

            X509v3 Authority Key Identifier:
                keyid:AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d0c0:bffe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:da:ff:ef:52:5d:0a:28:8c:69:29:84:63:2b:6c:85:21:da:
         5e:3b:a4:f4:a1:dc:56:e4:1f:a7:c3:f2:41:33:2b:40:7b:f5:
         0c:4c:da:75:45:24:86:19:d6:69:d7:22:3a:9a:f4:ea:6b:58:
         a0:7b:d6:4d:93:72:96:66:2c:6b:d5:0f:3e:1e:27:23:b2:a2:
         53:84:a9:90:51:9a:bc:f6:14:74:cf:f8:f9:e1:b6:d6:2f:47:
         ec:89:77:cf:52:e0:6a:71:b2:c8:04:ab:ce:c4:3c:09:ec:61:
         b8:04:49:da:56:0c:26:f8:fb:3f:50:fb:ee:21:bd:ad:c6:23:
         b4:db:29:6c:8f:3e:59:fd:9b:64:e2:51:83:75:73:7c:08:03:
         5f:69:0e:da:dc:c8:5e:07:ac:5d:1d:05:63:24:fb:f6:f6:c0:
         03:b5:ff:18:4e:8f:c9:76:27:d7:9e:64:84:f9:77:18:14:55:
         d9:41:85:e7:8a:c8:c6:23:39:d5:4b:ae:4e:f8:81:ea:26:b2:
         4a:59:14:dd:fb:01:99:ef:3e:aa:ed:60:43:80:83:71:67:80:
         b0:5f:e0:db:2e:5d:b5:31:d1:20:0d:0c:34:04:cc:31:9a:76:
         dc:fa:49:1e:69:27:96:ce:62:05:98:96:b7:28:7f:4e:7e:dd:
         fa:e1:17:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:11 2026 by rpki-client