Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a66a03ff-61fa-485b-8ad7-fc8b1095a510/eb4f9213-d2a3-3ff0-9825-f0172ba4dde1.roa
File:                     eb4f9213-d2a3-3ff0-9825-f0172ba4dde1.roa (raw, json)
Hash identifier:          L3Yaf26c3IGd47S0jn3v8hqHlJmDaQyORuk9ccPz7K0=
Subject key identifier:   01:9D:3A:8F:D5:9D:22:EC:BC:B7:F5:2F:5B:B2:F3:A6:22:1C:7C:B5
Certificate issuer:       /CN=a66a03ff-61fa-485b-8ad7-fc8b1095a510
Certificate serial:       010D0C9F4328584D6AAA8659ECB05BF56AEFD710
Authority key identifier: 1F:05:0B:B0:D8:22:50:F5:16:B9:8C:E6:9A:CB:97:A3:2D:CD:EB:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a66a03ff-61fa-485b-8ad7-fc8b1095a510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a66a03ff-61fa-485b-8ad7-fc8b1095a510/eb4f9213-d2a3-3ff0-9825-f0172ba4dde1.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     11232
IP address blocks:        2602:81a:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a66a03ff-61fa-485b-8ad7-fc8b1095a510/a66a03ff-61fa-485b-8ad7-fc8b1095a510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a66a03ff-61fa-485b-8ad7-fc8b1095a510/a66a03ff-61fa-485b-8ad7-fc8b1095a510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a66a03ff-61fa-485b-8ad7-fc8b1095a510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:86:59:ec:b0:5b:f5:6a:ef:d7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66a03ff-61fa-485b-8ad7-fc8b1095a510
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=54fbae7b-8864-4949-82ea-711492a0cd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:e3:5b:4e:58:a5:3d:11:3a:7e:41:41:d2:
                    6e:87:db:f1:55:4e:1d:b1:fa:38:ff:70:6b:7b:22:
                    f3:f7:b8:15:ef:bc:bf:9a:3e:63:84:1c:34:db:8f:
                    97:1e:39:89:ff:e6:6a:f0:fd:59:4a:f0:52:5a:52:
                    be:b3:f7:8d:8d:79:8a:58:0a:90:01:d2:e7:c3:1b:
                    e9:2b:9c:17:49:da:e8:78:b0:60:6d:b4:20:c1:7b:
                    a9:25:6d:16:fc:6a:14:48:4d:8c:cf:b4:72:ea:53:
                    8d:18:89:d6:79:ef:37:38:30:dc:98:6f:cb:8b:20:
                    07:88:1d:46:df:1a:7b:52:80:3b:c2:aa:fe:ed:09:
                    70:11:b6:3d:19:30:8b:7b:0b:a9:b3:e5:51:f0:b8:
                    21:4d:ee:f6:a6:ab:09:23:c0:c7:1c:49:d4:fc:b2:
                    3f:3c:86:06:dc:ef:d3:da:91:27:db:32:e1:a7:f3:
                    39:b4:67:a6:95:1b:70:37:f3:ac:02:42:64:79:59:
                    6e:d5:f4:b0:dc:c7:fe:0a:96:29:03:d1:87:65:db:
                    30:68:16:2f:1a:15:15:53:dd:3a:f9:06:82:02:03:
                    5c:c2:63:2f:23:d1:50:65:65:b0:91:5a:85:8b:7e:
                    30:b4:df:4f:7f:c7:ff:95:90:9c:c4:2c:99:d0:a8:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9D:3A:8F:D5:9D:22:EC:BC:B7:F5:2F:5B:B2:F3:A6:22:1C:7C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a66a03ff-61fa-485b-8ad7-fc8b1095a510/eb4f9213-d2a3-3ff0-9825-f0172ba4dde1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a66a03ff-61fa-485b-8ad7-fc8b1095a510/a66a03ff-61fa-485b-8ad7-fc8b1095a510.crl

            X509v3 Authority Key Identifier:
                keyid:1F:05:0B:B0:D8:22:50:F5:16:B9:8C:E6:9A:CB:97:A3:2D:CD:EB:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a66a03ff-61fa-485b-8ad7-fc8b1095a510.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81a:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f9:1b:b4:b4:f0:86:98:28:53:60:6f:d1:98:3e:d9:48:57:
         e2:5f:ec:c5:07:a5:fe:ea:8d:89:d6:58:ef:8b:87:5d:90:6d:
         cd:5f:89:dc:0a:1f:01:a5:d6:83:48:ec:0a:cd:7b:43:d5:16:
         fb:b0:47:33:df:4a:f2:1f:7d:6c:4c:c8:31:9f:ab:1f:f1:f8:
         e1:10:0b:be:3c:65:8c:97:b4:d7:5a:88:d0:a1:ca:93:f9:95:
         f9:36:6a:d3:f8:bf:d5:97:1d:7c:a1:a6:f2:0a:65:9a:9a:5a:
         b2:58:5b:74:53:49:1a:a0:31:b0:5e:e8:1d:bd:5d:dc:d4:26:
         87:9f:af:61:16:2c:1b:c8:6d:bd:75:2e:3d:70:5f:b8:49:5e:
         c3:71:64:f2:04:9e:eb:12:ec:48:58:a0:6a:d5:1b:0c:84:12:
         24:48:d6:34:46:0a:f1:e6:46:eb:5b:f6:d2:e0:95:8d:64:85:
         1c:0b:f2:dd:1a:49:84:d5:c6:79:fe:8b:bd:76:1d:fe:1e:61:
         60:ee:ef:5b:91:51:d1:98:1b:2f:93:9a:3e:00:c9:6d:8a:67:
         a5:6a:cc:aa:56:a9:a3:64:20:91:03:0e:10:06:8a:51:66:15:
         70:fc:a2:6e:0a:ea:7a:02:54:bc:f1:f9:0d:87:e2:a5:56:61:
         3c:8b:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:30:55 2026 by rpki-client