Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa
File:                     cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa (raw, json)
Hash identifier:          tWCzigcyAo5UJ4GgNTBN3pAG2tqeLGHuHfrA2q6iOYE=
Subject key identifier:   56:B1:A6:AF:78:FA:B9:5B:71:C9:CD:04:B2:6A:7B:82:93:63:8C:5D
Certificate issuer:       /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
Certificate serial:       010D0C9F4328584DE58082AED2379F0931D395E0
Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     393746
IP address blocks:        2602:f95b:3::/48 maxlen: 48
                          2602:f95b:f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:82:ae:d2:37:9f:09:31:d3:95:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=0d3e1056-49a1-4bae-bd50-7b7aceddc34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:73:c9:eb:35:f8:c3:d7:1c:87:93:a2:3a:
                    b0:df:71:09:f4:80:ec:69:7d:68:43:26:8d:10:65:
                    42:8d:f3:46:f5:58:de:db:51:66:e5:2b:e1:ba:09:
                    f1:b3:22:ba:c8:87:d9:74:f3:99:10:d0:5b:5c:18:
                    4e:d9:d7:16:67:08:bf:01:a5:18:ed:f6:40:30:5a:
                    0b:40:84:5b:4b:ef:34:c8:ec:3d:de:55:a7:fe:1a:
                    2f:3b:8d:81:8a:0d:f6:11:5e:f6:17:e4:d8:16:ef:
                    a9:68:6a:6f:84:6c:ad:8f:f4:43:b7:30:e2:0e:28:
                    9f:7f:19:f2:62:a6:e6:33:00:84:cb:19:05:10:80:
                    2e:d1:95:1d:28:89:78:fb:7d:00:a1:62:c3:28:f9:
                    f5:10:a8:98:76:c4:fa:34:fa:ad:cd:28:04:81:9c:
                    c3:26:7c:48:23:d2:ad:3f:a5:6d:a2:2d:50:0f:3b:
                    fe:7b:15:83:37:40:9f:a7:9e:23:b5:70:2e:c8:6b:
                    55:27:91:37:dc:ca:31:cc:22:29:df:bb:81:0a:29:
                    11:bf:3a:eb:5b:5b:99:a3:93:6b:5f:fd:b2:cb:6c:
                    04:3c:40:1c:9b:ab:c7:11:74:c6:4e:76:1f:c7:16:
                    0e:c0:09:e0:b5:d3:d2:d6:fe:8b:18:92:ab:8d:2c:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B1:A6:AF:78:FA:B9:5B:71:C9:CD:04:B2:6A:7B:82:93:63:8C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl

            X509v3 Authority Key Identifier:
                keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95b:3::/48
                  2602:f95b:f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:7c:f6:d5:43:d0:58:a0:1a:a7:22:dc:a2:05:c8:d0:a2:85:
         a6:7a:2c:4f:ba:eb:22:49:ba:8b:a4:dc:53:7f:ca:ec:3c:88:
         13:41:34:09:f5:39:63:21:8e:3c:66:79:46:90:8f:10:39:5b:
         98:2c:34:5d:6a:81:b5:46:a0:1f:0a:2a:91:99:b8:8e:24:7b:
         db:34:9b:2a:c5:04:72:09:83:03:66:eb:e5:06:54:10:3d:f3:
         57:be:55:79:80:e2:6b:c1:fa:4e:c4:f8:b9:18:26:5b:f6:7b:
         e2:a4:33:47:11:d0:7f:89:0d:1e:8d:04:b1:80:17:a8:1c:ad:
         46:84:d7:7b:76:fa:d5:59:e5:1d:df:1b:55:72:32:3f:d8:8c:
         54:b3:18:ac:20:1c:55:e7:58:1a:ca:e8:80:57:9a:47:42:d3:
         d4:a5:46:4c:b5:77:b9:fd:63:51:db:aa:91:cd:ac:7c:79:9e:
         27:d1:06:8b:4a:0d:5a:1b:e9:7f:87:ea:5f:40:ee:81:41:9a:
         f4:6e:e4:1d:6a:09:ca:08:02:95:14:92:50:21:e5:70:64:5d:
         70:ad:d5:9a:83:65:01:21:77:22:81:a2:20:c5:b3:20:09:95:
         64:03:eb:ef:7f:20:a1:0e:17:03:7e:db:73:30:f6:5f:47:0f:
         4f:0b:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 04:52:47 2026 by rpki-client