Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa
File:                     cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa (raw, json)
Hash identifier:          Y5eRygRMV2rMZgyxp1teAI/+yNSCUU6XpfwbM0eYiVI=
Subject key identifier:   96:F0:76:03:12:AE:A3:45:CE:8E:D2:3A:96:C8:17:9E:39:01:8D:74
Certificate issuer:       /CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd
Certificate serial:       010D0C9F4328584D93253AE3B09242D1DF5BEAC0
Authority key identifier: F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     216030
IP address blocks:        2602:f779::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:3a:e3:b0:92:42:d1:df:5b:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=35f0b568-1152-4b2e-b364-58d33b23d42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:88:d0:8d:5c:d0:11:bd:6d:1e:dd:f2:15:19:
                    ff:98:0a:c1:a4:7d:67:80:a8:80:f5:6e:11:f8:95:
                    1e:a1:0f:0c:61:6f:7d:02:3a:2a:ef:72:eb:9b:22:
                    ca:85:bd:bb:4a:ec:39:d9:e4:c1:c9:4f:5e:13:14:
                    cb:2f:e6:54:5e:56:bd:f8:2b:8c:82:72:8a:80:a8:
                    c6:5c:46:0a:c1:3b:55:9b:ec:40:8e:ed:27:08:e1:
                    fb:65:a6:57:b4:a7:28:5e:fc:b5:d6:d9:5f:d8:5c:
                    69:36:ef:57:1b:20:31:1f:d6:c8:9e:10:f4:e6:b1:
                    93:84:18:94:ac:36:08:e7:c2:93:61:16:71:af:92:
                    c1:72:67:22:0a:95:ba:66:60:17:46:af:27:62:7c:
                    7e:c2:ca:04:88:b8:29:e2:65:54:8e:41:5c:05:b8:
                    de:8c:fb:74:28:f5:6e:e0:19:cb:75:a2:52:6f:56:
                    d9:67:1c:56:45:49:e5:83:47:8f:bf:3f:fa:40:62:
                    f3:55:81:dc:eb:7a:01:e7:5c:b3:ac:52:b7:ba:8e:
                    45:90:60:2f:c2:54:80:8f:58:16:6e:f7:d9:0a:96:
                    82:c4:59:a3:2d:c7:7f:b4:1d:72:77:5a:82:7d:4b:
                    c0:50:17:34:f3:a6:54:64:50:d6:00:70:2c:0f:49:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F0:76:03:12:AE:A3:45:CE:8E:D2:3A:96:C8:17:9E:39:01:8D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.crl

            X509v3 Authority Key Identifier:
                keyid:F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f779::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:13:33:f3:9e:a0:8f:d4:55:f8:38:0e:6d:ed:7f:1e:18:66:
         e7:69:66:76:9a:bc:06:41:bc:df:fa:77:eb:c2:9d:b5:ed:66:
         14:c9:e0:07:67:d3:8c:45:65:0e:6c:32:f4:8d:d1:9a:b3:74:
         ae:9b:79:c0:8a:61:26:41:d3:5f:e1:52:83:52:48:3c:76:fc:
         f1:a4:f1:2c:af:a3:ec:21:32:64:39:d2:4c:b4:15:09:99:ce:
         6b:d2:d3:fe:4d:64:ca:13:33:6e:aa:bc:42:9b:7c:03:03:7e:
         d4:b6:10:50:cc:f5:bb:61:14:1e:5a:25:b7:a5:f1:b9:21:b9:
         31:71:1e:bf:05:28:b3:28:f7:8f:d7:90:25:86:76:35:ee:ef:
         45:0c:45:50:fa:a4:e8:2c:68:9a:63:59:8d:47:50:62:c8:ea:
         a8:79:b1:73:36:cf:da:88:c2:5a:9b:01:13:c0:bc:85:63:a1:
         f2:b3:b5:b3:e5:cd:a8:5b:e4:e0:84:41:7f:c0:c1:37:a9:e7:
         ee:d1:c0:b3:cd:78:d5:27:eb:de:e3:7c:0f:49:fc:3a:34:55:
         6c:03:b3:9b:5a:f2:58:1d:2a:61:ae:68:e9:0c:2a:8a:6b:29:
         85:eb:07:b3:63:94:97:c2:07:bb:ff:91:f9:83:46:ba:52:96:
         cd:4f:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:27:19 2026 by rpki-client