Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/dd609ba8-3c7d-3678-85e2-6a61566dffc7.roa
File:                     dd609ba8-3c7d-3678-85e2-6a61566dffc7.roa (raw, json)
Hash identifier:          SbHmW/c8Dum8mN5TQWZKMXyENRYjKl3H7NXw/AsK8TQ=
Subject key identifier:   68:48:99:CC:65:E9:80:C8:8F:03:3C:6D:51:D3:61:8B:22:51:73:EA
Certificate issuer:       /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Certificate serial:       010D0C9F4328584DA6B0164E16A541E997D17300
Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/dd609ba8-3c7d-3678-85e2-6a61566dffc7.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     833
IP address blocks:        2602:fc19::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:16:4e:16:a5:41:e9:97:d1:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=98066995-7eca-46b0-9a6f-600f73ed2668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:72:fc:6d:cd:eb:34:66:bb:5c:9b:8b:95:
                    f9:19:1f:a4:ad:a8:5b:e4:c3:7d:98:b1:91:45:56:
                    67:f5:ee:a9:3b:e1:d1:05:42:4e:92:16:18:c6:76:
                    84:8e:53:00:a0:d1:2e:24:f4:e7:a3:3e:b3:0b:a3:
                    e3:4c:71:3c:02:93:d8:e3:8a:f0:5d:76:d9:9a:66:
                    76:c6:3b:72:d1:9b:d9:c6:96:7b:f1:4b:88:25:3a:
                    80:33:bf:37:ef:4d:4e:21:4d:4a:c7:8f:1a:c0:a9:
                    12:7b:00:4c:da:2c:c5:c0:ba:45:84:01:73:89:1b:
                    a5:70:03:48:92:c0:94:ff:8b:6c:09:9d:de:7e:c7:
                    8c:f5:01:c9:77:88:e2:22:cd:06:92:bf:4f:d6:36:
                    6d:c9:54:0d:e1:34:4c:7b:29:e8:f9:c7:15:35:85:
                    0b:8f:bb:0e:d5:71:f0:81:cc:69:4c:cb:0a:f5:07:
                    df:c6:4b:81:98:41:df:63:c0:8a:3f:be:5e:36:35:
                    32:f7:f5:23:55:9c:f6:47:d0:b0:63:17:9d:18:61:
                    67:fb:f8:8e:0c:85:74:1e:84:b9:06:46:a9:8f:a0:
                    49:0f:9e:b9:bc:e7:9e:c1:03:e7:4b:b3:d7:3d:96:
                    57:50:cf:e6:b0:ad:e9:36:d0:23:96:c9:9f:bf:ed:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:48:99:CC:65:E9:80:C8:8F:03:3C:6D:51:D3:61:8B:22:51:73:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/dd609ba8-3c7d-3678-85e2-6a61566dffc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl

            X509v3 Authority Key Identifier:
                keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc19::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:1e:69:a2:f7:d3:aa:17:79:bb:4c:3b:08:6a:c1:a9:43:
         fd:d3:8c:b9:a4:25:6f:90:12:25:c7:d2:4e:94:1b:d6:ff:cc:
         94:73:60:a1:84:4d:07:fa:b4:ba:56:77:8a:b8:da:44:07:ca:
         45:bc:48:9a:8e:62:d6:39:f7:97:7e:90:e5:dc:f0:2b:b2:a9:
         f4:80:a6:85:53:27:7c:e1:5c:04:f4:9f:26:12:3d:2f:2d:b1:
         d4:e4:29:08:f7:84:44:81:17:69:42:ed:04:5d:a6:8b:64:b0:
         12:49:9c:06:3c:e5:b4:ac:5e:5e:38:3e:a9:21:4d:1a:80:7a:
         9b:53:53:6f:91:a4:1f:16:2d:c1:59:a7:5e:fd:85:41:e8:ac:
         39:fd:99:b7:be:c2:5d:25:ad:f0:9b:de:e8:03:19:88:ed:16:
         78:bc:6e:41:99:c6:63:ed:21:72:d8:b5:a2:0b:34:a5:3d:a0:
         f0:08:6c:a3:a5:c9:a0:fe:be:ba:05:88:c4:a4:6a:a9:83:bf:
         d6:e6:58:17:11:1c:bd:14:bc:72:97:23:98:98:02:2a:da:ce:
         68:dd:da:ac:73:38:14:0a:78:3d:43:ad:6e:72:44:ab:b2:71:
         27:03:40:88:b3:13:32:4e:75:ad:da:e9:2f:bc:a1:db:8a:5f:
         6c:89:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:37:50 2026 by rpki-client