Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/d8de3d6f-df91-3c74-ae7f-db9f09cd227d.roa
File:                     d8de3d6f-df91-3c74-ae7f-db9f09cd227d.roa (raw, json)
Hash identifier:          eh6bfS5jPa2LRSqsOvj7y/efzGjNxjWk6eWiuLO5QF0=
Subject key identifier:   58:4B:56:C5:2B:C7:FE:80:18:2C:3B:31:15:01:8D:1D:F6:0A:1B:43
Certificate issuer:       /CN=932105b1-ce56-44a7-9670-6f4e56578ef8
Certificate serial:       010D0C9F4328584D0BDCFF8DC35B3316600EFA00
Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/d8de3d6f-df91-3c74-ae7f-db9f09cd227d.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     53724
IP address blocks:        2602:f7f8:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dc:ff:8d:c3:5b:33:16:60:0e:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=ade6bf97-3f35-4c57-ab40-df66e40b6cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:25:96:fc:fd:ce:a6:1b:13:68:7d:32:f3:
                    4a:75:91:33:6f:6b:8f:ca:b9:d9:0d:60:60:1a:71:
                    0d:43:b7:04:b8:b0:30:f8:e4:6e:d2:e0:85:e2:cc:
                    11:b6:8e:1a:00:e4:b8:77:23:2d:8d:18:a0:e0:22:
                    3f:d9:02:0f:ac:1d:e4:cf:e9:82:0f:89:40:42:af:
                    16:7f:fb:49:5c:00:ce:68:f3:32:b2:9f:c0:b3:82:
                    11:52:91:ef:64:d1:3d:be:1d:55:45:3d:42:16:62:
                    e0:e6:8a:18:f0:44:d9:8a:66:eb:c7:e1:4d:ba:ac:
                    c2:c3:9b:87:b2:c8:29:79:67:4f:e9:73:b4:51:b5:
                    88:39:8b:37:84:56:56:18:65:72:f1:b3:a5:96:3d:
                    2b:1f:19:9d:b0:d7:62:36:bd:73:ba:b4:c3:70:84:
                    b6:70:b2:08:6d:31:5b:3e:fa:aa:08:34:2a:fd:75:
                    44:02:45:d8:7b:2a:76:47:2e:b2:54:f0:79:2a:e0:
                    39:f5:dd:51:6e:9d:c3:4b:b3:f4:aa:0f:3b:96:fc:
                    21:4d:00:8a:87:0e:54:8c:7e:03:3b:95:dd:1c:0e:
                    27:5c:6a:79:bc:28:aa:3e:c9:2c:0f:28:b4:1e:1f:
                    35:18:23:b7:d0:70:53:e5:22:b1:a4:84:41:cb:07:
                    7f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4B:56:C5:2B:C7:FE:80:18:2C:3B:31:15:01:8D:1D:F6:0A:1B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/d8de3d6f-df91-3c74-ae7f-db9f09cd227d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7f8:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:af:64:12:db:07:06:52:e2:69:c9:92:39:69:4d:ef:de:
         64:03:2c:23:e4:a1:d6:b4:56:f6:b7:78:00:32:13:d1:90:50:
         bd:cf:01:98:3a:76:1c:a8:18:54:57:f6:6c:30:d2:ee:92:1c:
         c1:ed:b3:f2:b0:78:7a:58:ad:f7:65:6d:0b:33:88:06:16:73:
         28:56:7d:96:ed:52:19:59:49:54:e9:cf:a7:9d:ac:50:31:80:
         82:d5:d1:d2:39:d4:a3:2a:c6:68:13:ce:9a:a5:ea:73:4d:b8:
         b6:a5:b2:6a:92:48:63:58:9d:44:ec:9d:2d:7e:75:de:8c:46:
         e6:d5:27:ca:9b:88:fc:1c:c8:a0:a4:ed:3d:4b:d6:a1:ef:9f:
         3e:db:27:39:b5:c7:6b:1e:e9:de:b1:7a:84:ea:2d:e6:73:5d:
         67:51:ed:47:e6:84:d8:e3:4d:c8:f7:64:bd:48:af:79:23:99:
         b2:e1:b5:74:ea:56:f0:48:10:10:0b:74:d8:95:08:00:e9:ef:
         03:25:4f:58:b6:31:64:1b:3b:cf:29:9a:3d:82:a2:e1:35:d1:
         6e:c5:6b:78:38:8e:ea:5e:c8:b9:1f:74:07:bf:4b:d9:54:23:
         ff:e5:b1:7e:aa:eb:c3:ac:fe:08:c4:fb:01:69:6f:68:a4:b5:
         3c:8f:77:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:13:59 2026 by rpki-client