Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa
File:                     ecfa0f99-7baa-3072-8fa5-53106bacf901.roa (raw, json)
Hash identifier:          QDAjl5VDSB6zvsbOqJhKc+XzWVXg1HdcDjl/6jLpfzs=
Subject key identifier:   10:7C:F8:45:A3:54:4D:7F:7C:29:FF:61:1D:63:6B:A2:D8:D0:CB:BB
Certificate issuer:       /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Certificate serial:       010D0C9F4328584D95EFF2DCA13028CB3E79CD00
Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     34553
IP address blocks:        2602:809:3004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f2:dc:a1:30:28:cb:3e:79:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=78f36d8c-b398-4dec-adce-95572315a9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:2e:34:64:f5:f5:b1:25:6b:70:f5:de:1b:
                    70:56:dd:4d:84:1e:d2:97:ec:b1:3f:a4:62:d9:55:
                    66:55:cd:b2:61:8a:15:34:aa:1d:b1:67:95:4b:2f:
                    90:b2:e8:4f:e2:52:97:db:64:f9:2b:d8:7c:47:4d:
                    39:78:b5:a9:18:86:02:81:e6:d5:9e:0f:cb:53:4e:
                    6b:f5:e8:c0:97:2e:1f:74:36:bd:b0:93:fe:a3:16:
                    48:fe:1e:42:97:59:29:52:59:59:c7:2f:39:07:75:
                    4c:3e:6f:d7:d8:3b:62:d8:c8:7a:05:16:87:25:97:
                    7a:41:12:f6:b5:d3:11:39:6d:f3:0f:c4:fa:c1:f0:
                    08:ce:88:c3:51:35:39:1a:c2:13:98:34:d0:5d:e1:
                    8a:90:f8:09:7f:02:01:5d:d8:00:9d:52:8e:c8:11:
                    b4:3c:df:48:16:cf:ce:8a:8c:ad:45:a3:f1:79:e9:
                    e1:38:f5:3f:15:30:58:90:0b:d2:25:2f:b9:49:61:
                    f6:7d:17:7e:dc:dd:ab:05:25:da:1d:aa:4b:cb:64:
                    8d:8d:e9:ad:2f:80:7b:85:ec:68:90:0a:2e:ed:8c:
                    7f:5b:74:e4:f9:95:43:9f:d9:6a:af:09:86:dd:53:
                    00:a7:60:5f:2a:c1:cf:70:0b:a7:ab:be:de:0a:40:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:F8:45:A3:54:4D:7F:7C:29:FF:61:1D:63:6B:A2:D8:D0:CB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl

            X509v3 Authority Key Identifier:
                keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:809:3004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:22:45:c9:81:66:99:01:e9:8c:75:b9:bf:d4:b5:ee:d5:93:
         8a:17:af:a7:bb:b1:a8:c1:65:be:87:9b:ac:f6:43:0f:43:e0:
         2b:9e:f5:55:21:86:e2:a2:48:52:30:ed:c6:ea:5e:ec:0b:98:
         a4:a7:fc:d1:cf:4f:80:23:c9:3d:22:98:44:40:94:25:e1:71:
         e6:9b:8c:a6:77:04:99:ff:89:3f:d3:3c:54:cf:88:af:bc:43:
         44:fc:b8:b9:6d:de:17:85:49:d0:44:2b:56:50:44:0a:5d:77:
         8a:d2:84:42:7c:52:5d:a8:31:dd:54:cd:c3:2c:1d:3a:11:a2:
         ea:4e:8f:94:94:7d:d4:68:73:8c:2e:10:c4:4a:2e:62:2e:6e:
         a1:ed:a5:d9:23:db:7d:7c:55:be:c4:70:b4:b2:1e:94:29:5d:
         a9:7b:6f:ee:27:ea:1e:e9:c9:06:6b:b4:e1:db:c3:cf:4a:a0:
         6d:7c:2b:74:16:04:f7:50:4a:ac:b0:fa:9c:ad:0e:21:94:f0:
         e1:33:6e:d7:cc:7c:33:36:59:24:74:e0:10:6f:c8:2c:fe:05:
         7e:37:f9:c0:74:82:89:d9:65:3b:9a:93:2c:26:73:04:67:96:
         29:f7:7a:4a:74:d0:75:2e:7f:93:94:b7:49:93:45:66:10:9d:
         7e:7a:82:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:25:22 2026 by rpki-client