Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/d4064001-1a7a-386f-9235-181916e7aa4d.roa
File:                     d4064001-1a7a-386f-9235-181916e7aa4d.roa (raw, json)
Hash identifier:          nuRqlV0IcE9uP7RwESbwAUZH3nNyM+OmKOje1M/Hka8=
Subject key identifier:   51:7C:9C:69:1B:EF:8C:A9:CD:B8:C6:FA:AA:1A:A9:E5:9B:6E:CB:76
Certificate issuer:       /CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382
Certificate serial:       010D0C9F4328584D5F7FB3BC2BA210145426A900
Authority key identifier: 5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/d4064001-1a7a-386f-9235-181916e7aa4d.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     402004
IP address blocks:        2602:f54e:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:b3:bc:2b:a2:10:14:54:26:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=00daa04e-27db-4770-a7e3-872e1ddf8e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:9d:06:8a:44:6a:22:4b:73:7a:fd:14:a1:
                    6c:06:e3:f9:5a:3b:24:16:a7:44:f6:09:b5:2b:31:
                    60:7b:2a:eb:32:18:f2:f9:13:c8:7c:d3:db:e6:30:
                    35:69:41:56:5e:c4:42:fc:4e:6b:e3:a8:2b:d7:e7:
                    ca:50:df:a4:3c:f0:d5:e0:be:c5:ce:5d:4a:38:e3:
                    19:9f:33:61:57:3d:d6:82:0e:96:9b:97:2c:67:fe:
                    9c:96:12:b7:b3:8b:1a:01:e7:4a:49:04:0c:06:03:
                    b6:db:b4:6d:fd:96:ed:07:e9:c0:34:89:43:ae:c3:
                    26:b5:e0:2d:53:f2:91:11:67:30:fa:36:97:42:58:
                    b4:1b:24:ce:6b:38:cd:9f:dc:dc:09:2d:52:0f:4f:
                    09:5b:2c:3a:07:85:9b:fb:bd:0b:dd:a9:cf:c4:29:
                    c4:a5:ba:e9:d3:4e:d9:ad:6a:2f:e2:08:18:4f:01:
                    86:ed:3c:6c:e8:d7:a8:0c:19:56:82:e8:08:a5:c3:
                    be:58:f6:a7:07:b7:ed:59:bd:aa:22:66:13:ec:a6:
                    26:66:67:c9:9d:c2:fd:b7:46:91:3c:a5:99:ad:69:
                    62:83:a2:3e:1b:1b:b4:15:f7:37:45:41:de:e5:ab:
                    94:c7:2e:ce:56:00:43:5d:21:2b:b0:2e:70:55:2a:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7C:9C:69:1B:EF:8C:A9:CD:B8:C6:FA:AA:1A:A9:E5:9B:6E:CB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/d4064001-1a7a-386f-9235-181916e7aa4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl

            X509v3 Authority Key Identifier:
                keyid:5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f54e:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:88:04:00:95:79:1e:16:61:9a:ef:49:34:21:7a:2a:6d:05:
         1f:61:98:04:e6:5b:cf:e7:38:ed:02:3d:e8:0f:4b:11:32:bd:
         a0:88:d0:3f:59:6f:22:84:ec:e0:b0:20:65:89:56:ad:58:9f:
         dc:30:70:f9:17:9b:0d:69:0f:0f:26:10:ff:95:20:d1:65:77:
         68:e4:34:d4:12:29:cb:f1:ee:70:ff:c1:c5:ab:dd:3b:09:f4:
         c0:ef:77:be:86:3c:97:45:6f:2d:0d:50:1f:f8:aa:c6:30:ae:
         4b:b3:a7:7e:70:bd:78:03:6d:58:93:3f:29:10:26:11:1c:2e:
         95:f9:0a:66:1f:41:8a:e4:a9:09:e3:da:05:c2:3c:21:1b:db:
         69:d9:f8:48:af:52:95:56:16:e8:d4:7b:f7:49:0c:1d:fc:f9:
         73:d4:00:d9:31:a9:42:32:f2:34:dc:e6:d7:81:64:b0:c1:21:
         b6:82:42:e8:8f:88:cc:60:80:5a:b3:48:92:f3:17:3c:9d:f1:
         e9:57:58:79:36:07:c0:46:8f:6a:22:87:c4:0e:e4:3d:9a:03:
         53:e6:25:7c:00:de:f4:61:ae:d3:c6:1e:d4:36:95:49:44:46:
         ce:9c:68:09:6c:b3:17:a2:ce:0f:cf:82:a9:87:cd:2a:83:d3:
         23:13:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:29 2026 by rpki-client