Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cbd69e75-e9ff-3ef6-ba02-096e2bacf8cb.roa
File:                     cbd69e75-e9ff-3ef6-ba02-096e2bacf8cb.roa (raw, json)
Hash identifier:          N3RVV26+P4/LJl9j53N4Zoko9WMn6ahWtUikLsI1jsc=
Subject key identifier:   AF:A5:E9:96:1A:0D:AF:B6:1C:34:BE:78:75:89:6A:F5:10:73:79:02
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584CA061A9507C77BC91F632DC10
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cbd69e75-e9ff-3ef6-ba02-096e2bacf8cb.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     27385
IP address blocks:        2602:fdaa::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:a9:50:7c:77:bc:91:f6:32:dc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=9e6bf203-2f6a-4fe8-97bc-344e97ea739b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1d:b8:a6:5e:86:ff:53:04:f2:c4:33:09:f2:
                    6f:6f:b1:b8:3b:a7:3f:e1:6b:9a:59:92:84:e6:c4:
                    e6:19:76:bd:d3:0c:bf:47:a6:ca:8c:97:3e:1b:31:
                    90:46:b0:52:ed:ee:0d:d8:14:89:69:37:2e:53:49:
                    37:ef:ac:2f:9d:8e:14:e1:ca:8b:49:17:31:a0:aa:
                    11:51:1c:bb:f9:d4:66:4e:03:d9:08:29:5f:87:51:
                    38:f7:e0:c9:59:d8:96:85:46:3e:ab:85:81:a0:ba:
                    08:68:c3:e1:97:7f:30:38:fb:46:e8:42:50:c5:ae:
                    52:39:65:ab:36:c6:fb:6e:61:a5:ec:f7:12:48:c6:
                    d3:ba:4e:a1:03:41:37:de:39:65:db:67:f2:d6:57:
                    90:ee:54:9c:e2:d3:fd:22:87:fd:10:ae:95:fe:06:
                    7d:be:f4:f2:e8:a2:dc:86:4b:48:aa:c8:1f:04:fe:
                    8f:5d:6a:95:7b:c0:f9:78:85:ac:3d:6e:24:9a:15:
                    07:6a:a1:a0:fd:d9:90:9e:92:77:ff:1f:47:7e:06:
                    a5:e7:3c:09:0a:c1:b3:ad:9f:fc:62:b8:5e:8b:22:
                    07:f8:e4:77:a1:0e:c8:4f:25:fc:c6:2f:2a:03:1b:
                    a4:a9:06:70:a3:43:36:5b:68:ac:a6:b4:db:ac:97:
                    b8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A5:E9:96:1A:0D:AF:B6:1C:34:BE:78:75:89:6A:F5:10:73:79:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cbd69e75-e9ff-3ef6-ba02-096e2bacf8cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:34:79:d1:5e:5f:75:c8:0a:a2:8b:e5:68:20:c1:88:43:1c:
         b6:37:08:40:03:8d:21:82:87:14:cc:a5:8b:a3:f3:d4:20:f5:
         a4:ae:6e:a7:1e:24:a3:8d:b2:51:67:83:fd:13:1c:3d:07:71:
         00:fa:69:52:48:53:54:74:ff:43:e8:89:92:0f:c9:8b:13:d3:
         50:78:b0:bf:b9:9e:90:a8:2c:5f:25:89:2c:ca:49:ef:86:57:
         aa:90:f1:b1:d3:c8:f2:3f:6c:12:14:c9:33:f5:eb:9a:86:52:
         5f:a8:77:cc:15:53:84:01:28:ca:eb:e9:a3:fd:b0:64:5d:a5:
         fc:14:11:44:4c:72:2f:ca:d5:b3:ac:0c:a5:04:86:6b:48:ff:
         35:3e:03:b1:7a:9e:c4:3c:08:48:86:59:ce:c7:e8:ea:cf:5e:
         bc:31:a0:a5:39:08:14:05:e6:b6:5c:3e:c2:66:f0:b8:b9:6f:
         12:35:f8:77:24:9f:ae:72:12:b3:ed:1b:98:f0:c8:15:d4:5b:
         0e:0b:e4:d2:fc:68:cc:4a:50:da:ca:11:23:1a:c6:12:ba:80:
         12:3f:ed:03:a9:46:a4:be:56:5b:ab:d4:cd:6e:b3:fe:1a:52:
         27:6f:1b:9a:8f:0a:d0:f3:1d:a0:fc:09:dc:b0:d2:88:c0:8c:
         ea:15:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:12:24 2026 by rpki-client