Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/7697f5d3-ce67-30b3-8bde-d010330b0b43.roa
File:                     7697f5d3-ce67-30b3-8bde-d010330b0b43.roa (raw, json)
Hash identifier:          +cgchS+O/V0pvmY+N2YiPRhPZNkZcEnT+b5xvt2vMlM=
Subject key identifier:   54:E7:C3:02:51:2D:E3:4D:CC:EF:D4:B0:15:E3:83:B4:46:10:4C:58
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584D8AC54819BD21F0B097A20780
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/7697f5d3-ce67-30b3-8bde-d010330b0b43.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     206216
IP address blocks:        2602:fb54:149::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:48:19:bd:21:f0:b0:97:a2:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=08d92b7e-a42b-4ba1-918c-a05a386393aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7c:c7:06:71:26:c8:46:c5:77:53:a2:c9:e0:
                    0b:ac:28:3a:0a:b1:77:a1:b7:3b:c9:1d:b1:6f:1d:
                    ef:ef:96:23:85:a8:df:44:05:76:90:97:a8:b3:2a:
                    89:69:28:9c:e9:75:7f:50:92:66:3a:2f:08:c3:9c:
                    a7:a5:17:48:fa:f0:0a:99:9c:f2:99:75:e3:3a:5b:
                    b8:15:ab:bf:21:67:9f:90:10:6f:73:b9:4e:ea:dc:
                    8a:a6:ec:92:8f:94:ff:af:5d:62:7f:94:f6:e4:39:
                    25:8d:50:a6:a3:85:13:ff:4c:8c:ff:05:d7:47:36:
                    46:69:2b:51:5c:89:7a:bd:57:ab:03:69:3a:a4:6f:
                    14:90:10:ab:cc:af:c8:7e:35:46:5f:e9:ed:08:01:
                    f4:f9:fb:88:0b:fa:09:95:82:53:98:72:76:fa:2a:
                    f1:1c:38:ac:fc:1d:10:f4:c6:d2:6b:87:0c:eb:1e:
                    17:67:1b:8c:49:1c:5e:55:ee:e9:26:de:80:a3:46:
                    20:da:e8:69:f7:f3:2a:9f:d8:01:55:a8:57:13:b3:
                    fb:9a:bb:0c:cd:af:d9:fb:f4:9e:8c:d1:40:53:28:
                    c0:e9:f6:79:f3:65:23:94:45:d3:ff:d6:b2:30:7d:
                    77:0c:d4:f5:1e:ad:9b:de:22:4a:38:57:70:9d:96:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E7:C3:02:51:2D:E3:4D:CC:EF:D4:B0:15:E3:83:B4:46:10:4C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/7697f5d3-ce67-30b3-8bde-d010330b0b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:149::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:48:30:0b:61:2f:c1:e4:90:7c:80:6c:2b:8f:7c:39:42:33:
         eb:d7:2c:12:79:08:d7:6c:1e:9e:82:81:86:99:58:f3:69:9e:
         89:fb:13:b0:99:7e:7d:7d:8d:68:0a:b3:38:24:9b:5f:6a:cf:
         02:07:87:0d:c4:fb:15:43:c5:a6:7e:38:c5:e0:ca:47:e8:d3:
         cb:45:da:dc:bf:23:c5:75:41:c0:a2:1c:7d:39:28:32:a9:8b:
         0c:be:c3:b7:4e:1d:31:d9:aa:94:40:98:cf:a2:f6:3e:d2:96:
         46:e1:ee:97:af:07:a4:3b:f9:58:2e:ad:49:67:a3:28:0c:ff:
         ed:2b:fb:d7:c7:bf:f1:27:e1:f6:7d:6c:90:e2:70:3d:b4:b5:
         5b:51:b4:ed:e9:33:a5:2a:5e:5c:a1:3f:b3:12:09:d7:5b:36:
         46:59:ed:7b:1e:89:7e:e6:ad:14:91:23:66:0e:31:e1:08:82:
         33:97:d0:ef:be:7c:90:f7:2f:e9:10:97:74:ac:fa:ed:97:8f:
         3d:fa:d6:86:ec:00:54:a1:c8:ed:37:c3:06:ca:4b:1a:99:4f:
         d7:d6:59:59:8e:05:2a:50:9b:17:58:87:f0:88:25:e0:4d:98:
         19:87:d6:de:28:4d:55:16:a8:8c:4c:18:81:3c:44:10:2b:fb:
         30:ea:f0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:24:53 2026 by rpki-client