Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa
File:                     7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa (raw, json)
Hash identifier:          STD5bQqP3SgGJAwQjiYBoJE9RqN+W2Oc5VbytEhKy+M=
Subject key identifier:   EE:BD:78:C7:82:DF:F1:F9:6F:1C:DA:B1:0D:2F:B5:3F:11:B2:9D:37
Certificate issuer:       /CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
Certificate serial:       010D0C9F4328584D2A74C3091CABE17401C26D80
Authority key identifier: 0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     14217
IP address blocks:        2602:f96f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:c3:09:1c:ab:e1:74:01:c2:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=fe387cd3-b206-40a9-9d90-e96dc5362181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:5c:2e:d7:a5:09:70:86:e7:fd:f9:24:b1:
                    ca:16:e0:c3:f5:c2:3e:c6:11:7d:c2:fd:6d:b1:f8:
                    0e:17:d7:5f:ca:78:db:55:bb:96:c5:19:01:85:50:
                    09:d0:80:81:c1:0d:68:bb:bc:04:18:47:7f:56:cc:
                    66:20:71:c2:40:09:a2:fc:7e:0f:74:de:de:b7:e2:
                    85:e4:c6:52:ae:9e:bd:03:3a:b5:3b:a6:3b:94:6c:
                    ff:a6:20:55:80:23:56:d0:e4:9b:5b:d7:ac:f7:97:
                    64:4d:5c:ea:90:42:41:01:e8:15:31:66:fc:36:28:
                    24:59:f4:99:eb:4c:54:d1:25:ae:8a:04:db:b5:4e:
                    68:76:26:ab:36:5f:cd:19:29:87:15:f8:86:6a:b0:
                    e8:82:c3:01:85:e3:c7:e5:f4:bf:06:6b:6f:74:90:
                    02:ac:8c:05:28:63:17:f8:7e:ed:e2:53:f5:f2:f0:
                    e5:73:29:db:c9:13:8c:b8:17:3c:b3:1d:12:ba:1a:
                    c2:2d:f3:14:2a:4d:f3:bb:fc:fb:97:03:51:6e:43:
                    9b:93:05:21:c5:65:bd:3c:79:31:fd:ef:24:0f:00:
                    c9:51:7d:b8:33:3c:56:76:9e:06:c0:64:e7:96:2c:
                    cd:14:5a:f0:a8:1a:e4:fe:93:22:7f:05:e5:33:97:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BD:78:C7:82:DF:F1:F9:6F:1C:DA:B1:0D:2F:B5:3F:11:B2:9D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c2:15:2c:0c:10:0f:e3:cb:ac:5f:e2:4b:ad:4a:6e:3b:4e:
         f2:2c:c0:a1:36:00:0a:64:38:4f:9c:1c:3a:7b:57:3f:ec:35:
         05:41:58:a6:9a:1e:52:46:f6:db:89:b3:0f:98:f4:2f:4f:bd:
         1f:51:00:23:96:8e:2c:49:0a:47:47:3b:45:cf:b9:84:16:bc:
         98:e1:2a:f5:14:81:68:8d:70:b0:b2:13:8b:32:12:bb:ec:f8:
         48:25:06:86:38:28:46:17:aa:92:5f:4c:35:44:f5:e3:8a:1a:
         f7:a5:3d:64:2e:6b:b0:41:01:4c:b8:d3:39:71:7b:90:56:bf:
         93:f6:16:3e:e5:04:87:24:a8:65:4b:1e:68:5f:17:9d:8c:1c:
         83:38:ec:65:06:b5:c1:02:18:50:bf:bd:a4:51:84:1e:9c:44:
         55:8d:aa:0a:52:16:6a:a9:13:b1:ae:23:71:90:83:57:3f:54:
         77:a5:79:cb:fd:25:d2:b0:5a:9e:a4:2f:86:a1:5f:35:e6:5d:
         09:8f:30:73:07:40:63:5f:f6:33:d3:06:b1:81:cd:33:78:70:
         ed:29:0f:de:b4:cf:ad:73:25:c2:07:2c:85:c9:1d:db:e2:fc:
         ab:7f:21:df:d9:8a:26:5b:1b:03:f8:d1:bf:d3:c9:b1:1f:8e:
         51:b6:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:07:15 2026 by rpki-client