Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/e379e1a4-7bd0-3025-9903-15b1e8038866.roa
File:                     e379e1a4-7bd0-3025-9903-15b1e8038866.roa (raw, json)
Hash identifier:          xgOvHkdLBxbfpjLIIaGNU7JDxKX3oGLNHNu9UOj8oDQ=
Subject key identifier:   AF:C5:0F:A1:B0:80:1F:71:D9:7A:A6:19:5B:F2:89:C7:91:37:F2:C3
Certificate issuer:       /CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
Certificate serial:       010D0C9F4328584D703FC8A1EAFDDF5191842580
Authority key identifier: C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/e379e1a4-7bd0-3025-9903-15b1e8038866.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     401746
IP address blocks:        2602:f75c:f90::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:c8:a1:ea:fd:df:51:91:84:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=15c9762f-8bbb-43ba-9552-56329fc14e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:e7:bc:33:23:15:83:87:35:5c:fc:e9:cf:
                    b6:9e:27:d8:cb:9b:ab:f1:75:b0:98:ea:00:0f:6d:
                    76:8f:9e:cc:d7:c9:cc:d6:2d:a7:79:55:a7:48:14:
                    de:73:b7:0a:1b:73:69:77:3a:fa:1a:db:c2:a6:19:
                    91:7c:99:b2:96:fc:06:4b:36:39:4e:57:df:00:13:
                    aa:ac:ce:85:b9:7c:03:2b:89:94:71:3d:25:0a:ba:
                    bb:52:71:00:f5:cc:20:86:f8:a9:ec:6d:b8:02:4a:
                    14:f3:d2:f6:be:12:22:fc:c1:fe:c6:53:5b:02:d2:
                    7f:61:de:ca:de:12:37:22:a8:76:d8:62:4a:62:1b:
                    5d:29:ac:2b:a2:f9:a8:5f:b0:13:c8:1c:a0:53:c4:
                    2d:de:06:f7:63:e8:73:6b:3f:7c:6a:0a:c3:e5:93:
                    9c:1c:d2:79:c0:9e:19:b7:70:5e:0c:79:27:be:95:
                    8b:74:fd:c0:ad:d3:cd:e6:4a:85:79:d5:fb:43:ed:
                    66:9d:d0:62:0c:0e:d7:8c:ed:c3:f3:fc:ed:13:6d:
                    3c:6c:73:91:da:18:e5:8f:f5:95:51:3c:58:4b:0d:
                    75:9a:7e:57:f3:66:b8:65:74:df:ab:19:fa:bd:81:
                    2f:fb:30:09:15:4d:ad:f4:67:13:55:7f:5c:9c:b8:
                    df:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C5:0F:A1:B0:80:1F:71:D9:7A:A6:19:5B:F2:89:C7:91:37:F2:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/e379e1a4-7bd0-3025-9903-15b1e8038866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl

            X509v3 Authority Key Identifier:
                keyid:C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f75c:f90::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:01:58:63:57:4d:68:19:bd:b0:56:af:34:e7:ee:8f:6c:46:
         ab:d6:39:49:72:f1:27:04:a2:44:57:1f:0f:27:12:63:5b:f9:
         b7:fc:27:8c:b7:5d:f3:dd:80:55:fe:8f:5a:ad:04:15:65:bb:
         19:52:64:b1:95:84:1b:92:c3:30:bb:f0:aa:45:f9:b6:87:6e:
         20:95:e9:b5:45:85:4d:98:44:eb:5d:15:07:e8:bf:b9:b5:e2:
         a1:3c:21:7a:0a:9e:77:fa:b5:39:3d:aa:25:e6:3b:54:95:ae:
         82:66:88:ee:ae:8a:ab:59:1c:07:3b:5f:71:f1:cc:20:b4:d0:
         be:80:f6:84:1b:f7:0b:85:b3:1b:a7:22:fb:3f:0d:a9:98:4b:
         ba:be:c3:0d:98:1d:69:3a:f5:d4:38:47:e5:35:a9:c5:71:fd:
         73:07:7b:64:80:13:1a:cb:55:ff:05:5a:a7:02:71:f2:0b:5c:
         0e:b9:db:27:25:d6:fe:5c:9c:43:b0:57:6d:10:9d:23:bf:43:
         d0:93:65:37:0a:4a:52:82:8e:04:a8:a1:05:e9:de:a8:7b:34:
         ad:14:44:e0:3a:54:a7:08:c3:fd:d7:02:c8:a0:98:6d:97:70:
         98:91:12:f2:c9:d8:98:31:13:80:a7:af:b4:6c:28:6f:b7:9b:
         e2:0f:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 10:48:27 2026 by rpki-client