Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/586dce8f-b206-383e-ab72-f0bec45f5f94.roa
File:                     586dce8f-b206-383e-ab72-f0bec45f5f94.roa (raw, json)
Hash identifier:          WLKuepvoIsA3ArRi32ez9t7wdrhdZMGjiE13umKIfOQ=
Subject key identifier:   47:68:E4:65:C8:AB:A9:5A:1E:A7:E1:80:72:6B:43:2F:37:80:6F:D7
Certificate issuer:       /CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
Certificate serial:       010D0C9F4328584E13CBCF3C69D4363247723E80
Authority key identifier: C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/586dce8f-b206-383e-ab72-f0bec45f5f94.roa
Signing time:             Sat 06 Jun 2026 02:59:31 +0000
ROA not before:           Sat 06 Jun 2026 02:59:31 +0000
ROA not after:            Fri 04 Sep 2026 02:59:31 +0000
asID:                     396982
IP address blocks:        2602:81d:e001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:cb:cf:3c:69:d4:36:32:47:72:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
        Validity
            Not Before: Jun  6 02:59:31 2026 GMT
            Not After : Sep  4 02:59:31 2026 GMT
        Subject: CN=0a4696ff-ae9f-403c-b70d-862a0e6ac7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:b7:3b:12:3d:1a:a7:2d:89:7c:ce:08:00:
                    8d:e6:bc:80:78:69:36:06:93:cb:0c:cd:ce:6f:92:
                    59:d2:4e:d5:1a:1c:89:06:43:f8:4e:39:b5:7c:ac:
                    42:c2:32:64:af:c4:4d:77:a4:45:1c:1c:3c:b9:c4:
                    3d:3a:7a:1f:f1:d7:68:c9:73:0d:55:4f:de:dd:51:
                    35:c0:77:29:5e:bb:11:05:2c:c2:cc:9b:b0:d5:ea:
                    34:5b:27:44:81:2c:bc:6a:01:d1:74:29:fb:16:df:
                    df:68:d5:83:de:e7:db:92:47:ac:9f:13:5e:ed:68:
                    11:44:26:f5:6f:8b:4a:ad:93:ca:7e:89:33:44:b1:
                    e8:df:79:a0:46:f4:31:25:19:19:be:26:24:70:96:
                    b7:05:c2:97:f9:18:d8:28:31:a3:7e:a6:9c:85:af:
                    50:35:df:9f:c6:81:c2:11:ca:25:bf:0f:d9:78:8a:
                    bc:d0:37:ce:6b:99:d9:b1:26:f2:67:da:5a:bf:1f:
                    f0:d3:1b:c1:91:cf:06:af:45:55:93:c5:34:d3:43:
                    e1:04:ff:1f:61:8c:8e:04:15:61:f6:e8:a3:c0:6a:
                    68:e7:94:2d:e7:41:11:83:37:06:66:c5:77:56:7f:
                    30:70:0b:8b:db:29:af:b7:7c:8c:14:4c:fa:64:90:
                    e8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:68:E4:65:C8:AB:A9:5A:1E:A7:E1:80:72:6B:43:2F:37:80:6F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/586dce8f-b206-383e-ab72-f0bec45f5f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl

            X509v3 Authority Key Identifier:
                keyid:C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81d:e001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8f:0a:1e:55:d6:42:6c:ab:6c:49:47:e6:19:e2:02:62:19:
         e7:90:1b:78:3e:1b:ba:ac:ab:64:dd:27:ed:0b:87:85:44:a5:
         d1:22:2c:d0:30:04:42:d8:71:3b:1e:db:97:83:d8:b6:fc:52:
         5b:b5:c7:3f:e2:20:25:e7:a8:1e:80:04:b4:33:21:39:d1:33:
         25:a1:50:45:9f:9b:3b:54:9c:fd:10:aa:7d:cf:83:27:4b:71:
         2d:16:6c:cb:8d:c8:b4:fa:09:71:e2:ec:74:5a:04:9d:19:45:
         6f:5a:ba:91:2e:10:49:0e:18:8c:a7:79:6b:dd:2c:07:5a:25:
         4d:24:18:87:59:e1:04:0b:b2:5a:e1:4c:74:f9:33:df:eb:3e:
         6a:ef:bf:06:9f:32:fa:1d:2d:4b:a4:8c:5c:55:1c:84:81:69:
         16:8b:61:14:61:41:69:6c:23:82:b1:59:c5:ad:5a:4a:bc:dc:
         d1:c7:4d:67:03:ea:b9:3a:cb:65:86:48:b5:de:61:24:f0:e9:
         8e:15:0a:43:30:0f:fe:27:a3:8d:46:9d:e0:8e:95:d2:b0:43:
         53:55:9a:c4:79:30:ba:26:53:f1:5f:4c:40:7c:3f:ce:49:e3:
         0f:24:83:2a:88:49:cb:4e:68:ce:4f:39:2c:c5:d8:c0:60:13:
         8c:6d:a8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:49:42 2026 by rpki-client