Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3a150253-546d-3466-be6d-b98a368a2cdc.roa
File:                     3a150253-546d-3466-be6d-b98a368a2cdc.roa (raw, json)
Hash identifier:          Hk2/dXxOpdWjNWnu5LrAeXwfJmqHR6exidPHtT6gyXE=
Subject key identifier:   C6:CC:D3:CD:3C:2F:BD:92:26:E0:C0:24:A3:AC:CE:9F:40:C7:48:C5
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E0005CCC89AAC60633AF68340
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3a150253-546d-3466-be6d-b98a368a2cdc.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c89::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:cc:c8:9a:ac:60:63:3a:f6:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=ce1ff6de-6ca3-49e0-be7a-8fe7be874190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:38:88:15:36:e1:d3:23:d1:1d:d1:f3:29:
                    bc:7d:45:91:d1:30:6e:63:ca:ca:23:26:82:56:47:
                    48:c4:19:4e:0d:ce:3a:c1:26:8f:8f:c7:4b:e9:bc:
                    f5:65:d0:43:28:c7:44:f0:0a:35:23:8b:dc:b8:ec:
                    a3:7d:e4:55:a5:79:91:9a:6d:ee:f0:ca:14:d8:67:
                    91:29:2b:92:4f:d5:3e:c1:86:07:ef:5b:11:00:c0:
                    12:21:6d:db:f7:20:41:a1:48:87:23:40:05:58:f3:
                    11:53:35:43:57:e7:47:db:11:76:b1:d7:aa:49:70:
                    e0:c5:3b:a2:2f:cc:0d:27:55:e5:d1:13:01:83:a5:
                    7c:ab:0a:3a:70:e8:40:13:b3:72:07:db:24:75:c8:
                    cc:f5:1e:5b:bb:43:cd:80:7d:30:93:fe:b5:7a:fd:
                    34:02:f3:bb:7f:81:5d:48:99:90:a0:8b:19:5d:ce:
                    68:df:d9:c9:e5:91:4b:19:d6:7b:09:c0:6a:d4:0a:
                    d3:a4:ce:d9:2f:63:f7:aa:b5:2d:0d:d2:73:a9:52:
                    01:89:c4:dd:dc:45:22:b0:75:4b:59:ed:df:b8:52:
                    51:1f:c7:88:46:58:3e:d9:76:e9:01:bf:2f:71:46:
                    2b:0d:de:bf:35:a1:f4:18:47:9e:0a:dc:51:9e:95:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:D3:CD:3C:2F:BD:92:26:E0:C0:24:A3:AC:CE:9F:40:C7:48:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3a150253-546d-3466-be6d-b98a368a2cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c89::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d6:e5:8b:f6:0f:47:c8:bc:58:2b:96:fe:f2:f6:28:a9:90:
         a0:38:1a:25:d5:4d:47:17:36:01:5e:d7:f6:e6:25:82:17:63:
         f4:ce:d4:ec:0b:12:7c:5d:2f:b8:b8:88:69:b4:bc:85:96:d8:
         8f:43:2d:fd:d0:4b:7b:3e:ce:77:3f:1d:a0:48:f9:e0:14:67:
         42:79:33:01:02:de:38:80:dc:a2:8c:b1:9f:94:ec:65:da:5a:
         5d:55:e4:28:2f:bd:c5:fa:54:5a:7d:cf:55:36:b6:97:51:f1:
         d9:e2:59:aa:dc:f2:ac:c2:b3:8d:a9:4e:ab:fe:ea:6f:fe:ea:
         c5:a2:8c:c8:3c:9e:d2:c6:e0:09:76:35:ef:03:43:aa:d3:8c:
         7e:12:8b:ee:9c:27:4c:82:0f:49:67:33:56:58:3a:c9:29:2f:
         55:42:ed:a3:42:92:57:e3:50:31:18:9d:25:72:10:19:9a:c6:
         97:e7:cc:1f:2f:5b:a0:95:ca:be:e5:af:b1:c8:2c:44:9f:dd:
         96:33:34:e2:2a:2e:2a:d2:e2:87:24:b1:6c:1e:ce:5a:f9:b9:
         82:9a:47:04:0f:83:1e:cb:e1:47:0e:2e:ac:ab:6b:0a:76:79:
         2f:90:fa:50:39:e3:ae:0f:88:79:fa:b2:fa:4a:31:25:cd:73:
         f3:5d:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:01:20 2026 by rpki-client