Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa
File:                     66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa (raw, json)
Hash identifier:          nPbX839luikZyItdNqP42MNQKARoqYH0slij1C7yBW0=
Subject key identifier:   27:6E:0A:FA:F5:79:BD:39:5E:79:6B:AD:00:C1:8A:B2:92:DE:3E:63
Certificate issuer:       /CN=bbfa0893-69f8-4451-9526-12cfa4bebd97
Certificate serial:       010D0C9F4328584E0AF32ACF1CE1B9A8C5EB7E00
Authority key identifier: C5:2D:1A:47:91:DD:25:A5:33:FB:E5:43:71:C4:AE:53:17:B8:F3:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa
Signing time:             Tue 02 Jun 2026 22:56:33 +0000
ROA not before:           Tue 02 Jun 2026 22:56:33 +0000
ROA not after:            Mon 31 Aug 2026 22:56:33 +0000
asID:                     402411
IP address blocks:        2602:f3a9::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:f3:2a:cf:1c:e1:b9:a8:c5:eb:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfa0893-69f8-4451-9526-12cfa4bebd97
        Validity
            Not Before: Jun  2 22:56:33 2026 GMT
            Not After : Aug 31 22:56:33 2026 GMT
        Subject: CN=2ff49541-c2b9-4f87-beb4-fc11fefc4e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:ff:a4:89:a9:dc:f2:d9:ba:9b:63:ea:20:
                    5f:e6:1c:aa:82:88:23:92:bd:47:06:5e:5e:48:e6:
                    08:eb:ba:08:85:9a:23:f0:0a:8b:bb:05:a6:fd:7f:
                    5f:75:0c:d8:d8:78:fb:17:9f:a9:dd:fc:31:d1:f1:
                    61:77:e3:20:1e:70:e6:ed:30:ec:c2:ef:2d:b6:98:
                    2a:ae:45:ad:c4:00:c7:9b:e2:3d:67:28:72:1f:f8:
                    19:03:f8:f8:f0:1c:2b:f9:16:18:48:18:70:9f:40:
                    9d:bf:99:22:cb:77:6e:d3:85:dd:64:ba:2f:88:31:
                    4d:1f:5e:40:40:ca:1b:fa:f6:71:c4:d6:f7:5f:6d:
                    55:60:0d:17:80:41:c2:2c:53:73:22:a9:44:2b:23:
                    24:0e:72:03:e6:65:92:64:db:9d:9f:f9:86:c1:b3:
                    c3:96:56:3b:7c:62:7e:87:1f:35:2c:cd:82:6c:22:
                    d1:b6:0c:54:54:f6:95:96:4c:d7:5e:1d:17:c5:d7:
                    66:ce:9f:b8:4f:da:1a:50:e8:90:ad:af:cc:c8:a6:
                    8f:8d:32:eb:93:10:cf:de:85:26:55:d9:b1:15:48:
                    b0:6e:75:57:5b:fd:08:3e:dc:81:2a:9e:e5:45:3b:
                    96:e8:32:a5:71:32:8e:7e:ad:2e:41:07:c1:6f:cd:
                    fd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6E:0A:FA:F5:79:BD:39:5E:79:6B:AD:00:C1:8A:B2:92:DE:3E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.crl

            X509v3 Authority Key Identifier:
                keyid:C5:2D:1A:47:91:DD:25:A5:33:FB:E5:43:71:C4:AE:53:17:B8:F3:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3a9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:65:40:8f:fd:8c:7e:3c:f1:88:3d:7e:e0:e1:40:9e:b1:44:
         d7:e0:80:20:dd:ba:a1:77:8f:4f:b7:d8:da:94:23:bb:e2:4c:
         65:65:8d:25:35:11:9b:ef:1e:0e:12:a5:03:90:25:0c:85:63:
         ac:22:e7:64:f6:4d:b8:a3:8d:c8:ad:b4:2f:37:cb:60:c3:ab:
         4a:60:65:50:60:c0:1c:a1:81:5f:a1:38:9d:0f:a2:07:5b:e4:
         b4:68:fe:fc:15:e5:bd:59:7f:9b:bb:80:4a:89:6e:f0:ec:06:
         c2:75:cd:91:11:b5:72:69:af:b9:ba:a8:7e:c1:09:86:db:df:
         c5:00:c5:32:a4:6b:a0:72:69:59:7c:7d:63:03:0d:65:5d:3d:
         99:7c:80:27:91:6b:b8:e8:3c:0a:01:99:6a:6f:07:9a:42:36:
         61:00:74:43:89:22:a6:b5:22:36:05:ac:60:9b:76:d6:a7:8a:
         76:67:e6:47:63:ee:a9:1e:66:d4:04:f8:20:9f:49:b5:46:a4:
         1b:c1:59:8e:40:a6:e7:1e:6c:32:46:49:d5:ac:dd:d7:f8:a8:
         01:5f:f6:61:a6:e4:4d:8e:6b:37:2d:68:5d:be:6b:e2:0b:17:
         e9:be:c3:10:8f:4b:4a:db:aa:4f:4d:84:58:4a:87:8f:fa:47:
         a8:0e:46:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:04:23 2026 by rpki-client