Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f8908e78-f05a-376c-96cc-e41fc7925ad0.roa
File:                     f8908e78-f05a-376c-96cc-e41fc7925ad0.roa (raw, json)
Hash identifier:          ukvXH42vkTAoaZUca/WVq6KWY7RiZ3VveHv4A1iohhA=
Subject key identifier:   8A:17:85:BC:5B:72:ED:EA:4D:D3:B1:AC:21:35:99:04:BB:31:E6:6A
Certificate issuer:       /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
Certificate serial:       010D0C9F4328584DA11ABF4014AD1A995E9C7B40
Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f8908e78-f05a-376c-96cc-e41fc7925ad0.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     64289
IP address blocks:        2602:2ea::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:bf:40:14:ad:1a:99:5e:9c:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=43e1899f-1510-48c8-bfb1-8b43ff706a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:83:7e:31:f9:4b:c0:6a:96:72:f8:7c:43:
                    e9:5e:ba:b1:f2:34:b0:f9:7d:da:b3:8c:0b:55:e7:
                    0c:e8:28:13:22:d3:2c:61:37:b6:df:0a:bd:fa:5f:
                    63:67:e3:4c:5e:90:4d:3c:87:dd:99:d2:c0:99:f3:
                    77:7d:46:97:73:29:2c:94:1c:2b:07:c3:10:58:1e:
                    75:63:81:f4:70:fc:3c:7a:de:76:c4:ba:a4:92:c0:
                    59:6f:be:54:77:9b:f0:42:25:f3:e2:37:99:bd:3d:
                    76:fa:b7:b8:26:60:2e:49:df:23:57:fd:54:f8:f8:
                    2f:37:91:b6:9d:d9:07:ad:2f:c2:aa:31:84:fd:76:
                    fc:55:de:3c:54:7e:f2:f0:8a:a2:bc:2c:a3:b7:c0:
                    b4:f5:8f:23:b5:d8:e4:e3:32:ec:03:d7:c1:26:e8:
                    47:5a:18:f6:83:4e:10:94:28:56:31:a2:90:81:63:
                    7e:e5:b5:dc:0d:aa:a1:4c:73:20:37:6f:5b:4f:b9:
                    65:23:c7:48:df:8f:b9:ea:86:81:1f:71:57:ac:f5:
                    bc:7b:11:8e:6a:8b:01:0e:af:0d:a4:3d:af:b2:09:
                    4b:dc:e1:c5:26:be:53:94:c6:30:e7:90:ec:71:0e:
                    ed:4e:06:73:b4:36:a4:4e:a9:ba:b0:99:42:29:e7:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:17:85:BC:5B:72:ED:EA:4D:D3:B1:AC:21:35:99:04:BB:31:E6:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f8908e78-f05a-376c-96cc-e41fc7925ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl

            X509v3 Authority Key Identifier:
                keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ea::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:17:39:71:6a:9c:af:54:04:7b:dd:7c:78:6e:68:d4:9f:5c:
         ed:7f:5c:67:08:fe:36:19:f0:07:2e:cb:57:0b:43:4a:e9:5f:
         ba:58:09:4e:97:bd:a2:99:81:f7:09:61:ec:55:2e:37:22:46:
         06:63:9f:2e:61:10:06:b1:ac:3c:48:00:ec:0a:34:1d:c0:c2:
         ce:bc:40:7c:9e:45:06:f7:22:77:2d:7a:45:77:e6:a7:f8:34:
         fe:93:fc:54:6b:ec:52:f6:bd:3a:4f:e8:57:76:ff:c4:40:92:
         0b:68:e5:f9:5c:4b:18:c3:c8:f5:91:d6:f8:d7:b8:9a:21:af:
         4f:98:0e:95:d4:34:b1:9c:66:0d:fc:77:ff:8c:e9:4e:6a:16:
         78:55:90:1b:f3:96:d7:1c:6d:e0:03:f8:c6:c8:75:21:fc:cc:
         8e:44:00:18:e8:a2:af:12:8a:a3:5c:43:34:5e:6d:80:fc:0d:
         4e:2e:8a:f9:45:f3:e4:57:74:a4:f2:21:58:97:0e:55:dd:38:
         08:3b:0d:85:67:d9:8d:f4:66:e9:3d:f7:9b:89:81:99:0e:99:
         36:98:fc:d3:b1:11:48:7f:2f:aa:fc:a0:f3:68:7c:4a:79:e9:
         ce:c2:22:57:fb:2d:75:e5:f0:f6:3e:ed:1d:25:41:56:b1:85:
         ad:ec:62:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:52:23 2026 by rpki-client