Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/460b6696-c3db-3eaa-bde8-62c6f1eaec81.roa
File:                     460b6696-c3db-3eaa-bde8-62c6f1eaec81.roa (raw, json)
Hash identifier:          q+jqxi5iMfkD/HSHimlkDL0SEa+KZv+PJ7iWmHwMaBA=
Subject key identifier:   C0:96:53:F9:B6:F2:1D:19:F2:02:28:F8:7A:81:3A:76:BC:45:EC:F3
Certificate issuer:       /CN=292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a
Certificate serial:       010D0C9F4328584DEC7B49B1D250BA03FB7BDBC0
Authority key identifier: 4F:6B:7B:30:46:27:45:61:0E:5F:90:3B:C9:25:DA:5B:54:76:FB:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/460b6696-c3db-3eaa-bde8-62c6f1eaec81.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     6515
IP address blocks:        2602:ffa9::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:49:b1:d2:50:ba:03:fb:7b:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=0fd057fa-3d15-40b4-a6f2-f39f7e0a3bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:ba:96:1e:0d:74:3d:b8:b3:01:bb:10:4a:
                    15:e0:76:b5:c7:88:c4:78:36:2a:08:f8:e4:1e:4d:
                    f2:83:a5:c4:14:c2:bf:16:06:43:79:7c:2f:f3:c0:
                    a4:bd:5e:f0:b3:b2:4c:09:0c:0f:1a:0a:70:19:5b:
                    cd:95:36:4a:a4:c7:fb:33:f0:21:9c:b1:37:1d:c1:
                    f6:e3:43:db:fb:dd:9b:ca:0b:ba:44:9e:7d:5f:a0:
                    f6:1a:59:6d:dc:88:f4:1c:33:ea:a8:f2:8a:4b:34:
                    62:0a:d3:b2:ed:67:c5:f3:28:d1:b0:6d:d2:d8:38:
                    30:11:26:56:d0:68:5d:ad:fc:53:8a:6a:73:b3:75:
                    c2:27:cb:62:4f:16:47:70:ce:a6:d9:1b:14:53:40:
                    8d:97:1d:a9:11:f8:81:03:20:6c:cd:86:34:21:49:
                    5e:2a:31:01:e6:28:fe:ed:4f:1d:fd:c4:60:4f:6b:
                    ad:e9:8e:bf:70:8c:1e:6e:b8:c8:77:13:3b:f0:a0:
                    6d:1d:42:85:85:45:5c:81:45:ba:9a:8c:4c:f9:42:
                    1c:92:df:5c:5d:ee:ae:34:f6:d1:a0:50:46:fb:24:
                    ac:90:78:c8:68:41:79:89:d8:c5:f1:5f:08:b7:e0:
                    ad:87:47:d6:42:07:27:7a:f7:36:c7:56:58:e0:ba:
                    d6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:96:53:F9:B6:F2:1D:19:F2:02:28:F8:7A:81:3A:76:BC:45:EC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/460b6696-c3db-3eaa-bde8-62c6f1eaec81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.crl

            X509v3 Authority Key Identifier:
                keyid:4F:6B:7B:30:46:27:45:61:0E:5F:90:3B:C9:25:DA:5B:54:76:FB:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffa9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:c5:43:d4:70:ef:c3:6b:b4:dc:11:3e:32:b4:e0:87:21:
         43:42:6c:7d:cf:8e:65:d4:f1:00:eb:2e:b9:b2:57:2e:56:55:
         7b:c2:d7:73:f3:d4:3a:dc:ce:4a:25:a2:4f:55:e7:e3:19:2d:
         32:40:5d:36:f4:4a:0e:a6:3e:fd:87:66:c6:c0:0b:28:36:3d:
         bc:fd:aa:ee:8b:a0:87:a8:a7:10:5f:e0:94:1d:b2:b5:d7:57:
         48:64:c3:fb:3f:65:20:cc:53:3a:6a:48:d9:51:c4:cb:ac:ee:
         21:fb:dd:d1:f4:86:98:5e:32:e2:54:30:df:9a:f5:4d:67:80:
         30:7f:37:94:6e:9b:e2:51:7f:81:c3:60:17:20:45:0a:3a:63:
         c2:da:c2:06:7f:9e:78:5e:e8:de:26:23:99:2b:02:b8:67:cb:
         ea:39:42:12:91:f3:dc:e7:37:14:5d:0b:01:c6:21:c1:e2:87:
         54:a3:64:46:77:d4:e0:bb:42:23:9d:fe:2b:4e:47:b5:e1:98:
         dc:7a:ed:38:6c:24:80:00:f9:e2:b9:71:f1:10:6c:9a:cd:fb:
         6c:dd:5a:e0:3f:2f:f0:8d:27:49:6e:d2:41:2c:80:d4:f4:6f:
         ad:b5:ee:72:3b:e1:27:a1:a2:8f:a9:98:92:a8:d2:d8:46:14:
         31:f8:50:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:52 2026 by rpki-client