Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
File:                     52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa (raw, json)
Hash identifier:          wZ6o3EjAKcztudc4ThdvtsXpwoKMwN2z5mwMcqwAbUk=
Subject key identifier:   29:34:CC:4A:56:67:DE:ED:6B:F8:56:45:6A:2D:93:47:AC:70:22:27
Certificate issuer:       /CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
Certificate serial:       010D0C9F4328584DA3E560ABA2F0452C2EB67900
Authority key identifier: 23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     26801
IP address blocks:        2602:fddd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:60:ab:a2:f0:45:2c:2e:b6:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=2830b507-986d-4b64-8b4f-41cc5b4d3421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:ed:f2:a4:58:15:a8:0a:07:be:78:73:48:
                    a3:2b:39:57:b6:fd:4e:fd:65:d4:16:6a:67:02:5c:
                    5f:f2:6e:22:e0:8c:90:f7:05:ed:5b:f2:78:11:20:
                    eb:69:85:39:0f:49:60:0c:d6:33:1b:01:a7:d5:38:
                    6f:d9:b7:41:72:5d:e5:41:f6:2e:6c:72:25:5b:63:
                    ee:00:9a:60:cc:07:60:13:a6:50:76:6a:25:7d:b6:
                    6c:85:63:47:d3:d5:05:d0:4e:3e:26:4d:a0:70:d2:
                    38:55:1d:05:9d:ab:3d:d6:3e:7f:df:31:22:de:a4:
                    78:fd:29:40:ac:30:4f:96:00:c3:c9:9e:29:0e:2a:
                    c2:af:0a:c7:af:93:a6:79:19:46:fc:ae:fc:e4:c6:
                    35:4d:f3:b2:33:0d:4d:58:7a:a4:e6:e4:82:d2:3c:
                    a6:b7:7a:47:14:6c:9d:92:7a:6d:ad:3a:fd:42:b4:
                    e4:6e:0b:11:be:e3:c1:85:9e:5d:5e:20:a7:f5:58:
                    44:db:3c:59:13:e6:16:c1:0b:8e:4f:44:85:49:36:
                    3e:d8:1f:2f:6b:78:a4:e5:30:b3:52:34:be:e5:3c:
                    ad:da:4c:6c:a9:0b:95:1c:a2:17:a2:bf:db:b8:56:
                    a2:dd:e3:6b:3d:a5:68:4b:98:28:a5:c2:d8:6c:5c:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:34:CC:4A:56:67:DE:ED:6B:F8:56:45:6A:2D:93:47:AC:70:22:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl

            X509v3 Authority Key Identifier:
                keyid:23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fddd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:15:70:89:c7:ec:bb:07:81:4b:97:34:c8:3d:22:3c:f0:c5:
         64:ea:fc:e5:b0:f5:68:e8:26:af:56:23:30:9a:76:54:27:25:
         d3:ef:5d:c2:63:d7:f5:97:a8:f0:3f:d8:68:76:58:d6:71:22:
         b4:c8:11:0d:3a:e2:ec:9c:0a:a3:c9:1b:1d:ad:62:eb:97:b1:
         b6:7a:77:92:f8:1f:60:59:22:46:32:63:31:c8:2a:2a:20:d4:
         6b:7c:b3:c9:53:eb:ed:89:31:ef:05:e1:20:9c:96:df:a7:8f:
         f7:ec:14:57:52:c2:b6:e2:92:39:26:16:1d:bb:9a:f1:e1:e6:
         38:a4:61:67:8e:d8:83:0d:6e:42:ea:e5:88:70:a5:89:ec:45:
         2a:5b:54:60:ee:b4:dd:04:a4:a1:e3:15:84:93:77:cb:14:41:
         59:b9:a8:14:e8:cb:b8:51:ef:6d:bf:94:01:09:64:53:11:16:
         30:86:42:ac:e7:ac:0d:a8:1b:f3:c0:ab:2a:ba:0d:4f:b6:3d:
         ae:16:54:ba:a5:70:83:88:96:e1:6a:79:64:0c:f4:42:08:89:
         53:94:33:d8:e3:fd:8e:70:ca:01:82:8f:20:5c:65:e8:53:94:
         f2:ac:df:7b:71:a7:e3:7f:d7:71:a0:61:4a:05:c1:17:8e:84:
         64:d4:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:52:29 2026 by rpki-client