Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/6a0f3759-b3fe-3db7-9176-d4e683ef1654.roa
File:                     6a0f3759-b3fe-3db7-9176-d4e683ef1654.roa (raw, json)
Hash identifier:          uW3m7Teqx6KIJcewLg0Q3xnEYCZzFHKisMB4x3CDHWg=
Subject key identifier:   95:F3:03:62:7E:01:01:D1:04:74:CA:28:E8:48:BD:09:B9:60:2A:9E
Certificate issuer:       /CN=55459e1c-c761-4deb-9fd3-660282edd2d7
Certificate serial:       010D0C9F4328584DA3BE9FB65E40FC2B3BA60F00
Authority key identifier: C3:4F:9A:8B:59:B3:0A:DD:B7:96:1A:37:18:7B:73:FF:1D:6F:2B:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/6a0f3759-b3fe-3db7-9176-d4e683ef1654.roa
Signing time:             Sun 26 Apr 2026 23:42:25 +0000
ROA not before:           Sun 26 Apr 2026 23:42:25 +0000
ROA not after:            Sat 25 Jul 2026 23:42:25 +0000
asID:                     402440
IP address blocks:        2602:f3e3::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/55459e1c-c761-4deb-9fd3-660282edd2d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/55459e1c-c761-4deb-9fd3-660282edd2d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:be:9f:b6:5e:40:fc:2b:3b:a6:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55459e1c-c761-4deb-9fd3-660282edd2d7
        Validity
            Not Before: Apr 26 23:42:25 2026 GMT
            Not After : Jul 25 23:42:25 2026 GMT
        Subject: CN=62f31aa1-c915-444b-8dbf-5df685780fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4a:ce:ab:d8:80:2f:c2:7a:9b:8e:a8:67:b2:
                    02:97:16:14:f2:8f:37:19:b4:1b:5f:ed:a8:e7:87:
                    a5:d4:c2:60:e8:1b:36:75:fe:5b:24:ff:8f:eb:ff:
                    e1:e1:47:8b:18:66:cb:84:d5:25:a1:df:5b:e5:bb:
                    db:ef:42:06:8b:f2:58:37:43:cc:10:5f:2c:e0:65:
                    cd:14:3e:da:41:27:ac:83:0d:cc:d2:a7:f1:40:ee:
                    a1:a2:e4:12:33:cc:23:c9:de:99:0a:65:5a:7e:2e:
                    7b:bc:a6:07:f6:0d:9f:dc:fb:e0:e7:96:1e:2f:bf:
                    c2:10:ad:ef:5b:a7:7b:ab:de:79:4e:1e:c6:1a:05:
                    d3:64:cc:ce:b1:c3:d3:0a:7b:d0:ec:ac:9a:88:29:
                    70:7b:fb:4b:2a:93:65:88:13:7d:ca:d8:4d:cf:50:
                    a4:6b:c0:72:bb:da:19:dc:6f:67:4f:6b:20:b4:bb:
                    7b:75:de:52:96:7f:6c:ba:9c:89:30:a7:da:f0:6c:
                    df:de:49:f5:d9:1c:5d:3b:a6:a9:30:8f:4b:e4:9b:
                    48:ea:6a:b5:a2:33:7b:4f:b7:ac:d7:61:b5:24:f1:
                    c1:17:69:cb:8f:34:08:17:3c:47:8e:cc:a6:35:60:
                    9f:7c:95:93:e2:16:ee:2e:e4:c2:35:1e:b9:d0:7a:
                    f3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F3:03:62:7E:01:01:D1:04:74:CA:28:E8:48:BD:09:B9:60:2A:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/6a0f3759-b3fe-3db7-9176-d4e683ef1654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/55459e1c-c761-4deb-9fd3-660282edd2d7.crl

            X509v3 Authority Key Identifier:
                keyid:C3:4F:9A:8B:59:B3:0A:DD:B7:96:1A:37:18:7B:73:FF:1D:6F:2B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3e3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:1b:09:b6:35:f1:cf:88:5a:85:ad:7d:38:46:84:96:f8:16:
         4f:67:0e:19:17:fb:aa:3d:1d:8c:a3:4e:50:12:95:b6:f8:50:
         8b:d1:32:47:82:59:11:57:76:50:ea:fc:38:1e:be:89:94:80:
         27:01:f9:76:ef:c6:25:4b:6e:94:38:c5:1a:04:c0:39:68:63:
         d4:a6:cc:e0:82:09:e3:cb:e6:ed:a9:d1:f9:3c:32:64:ed:cf:
         31:66:57:c2:6f:7e:e6:91:46:ed:88:fc:68:2f:0c:09:9f:65:
         b3:26:9f:aa:1c:3b:a2:85:17:be:87:83:ad:0f:6d:12:57:9f:
         d2:98:ba:79:53:97:3c:66:b8:ab:ee:d9:5f:1f:fd:4e:25:1f:
         ab:54:c1:cb:0c:39:ff:88:98:7d:ef:3d:a0:59:6f:c0:84:57:
         ca:09:d7:61:75:d7:6d:e6:2e:78:bc:16:ad:4e:52:43:4f:ca:
         e5:4a:ea:79:08:e4:c8:ed:96:29:55:dd:30:44:a3:1c:4f:04:
         f5:6e:e3:33:7b:69:f9:91:53:8b:b9:8a:13:45:ae:06:5b:14:
         cc:04:e7:e9:09:e0:9c:c5:68:d5:ad:a9:6a:02:07:b7:1a:e3:
         67:95:88:b4:06:ed:e4:fb:99:00:89:30:61:a5:27:d9:b3:f0:
         29:31:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:53:57 2026 by rpki-client