Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/a0a69a88-573c-3474-b573-7ae77353dc2b.roa
File:                     a0a69a88-573c-3474-b573-7ae77353dc2b.roa (raw, json)
Hash identifier:          nPtVfvR6vGLzCFrCdu7TqRzhrbhDc+9dCqhNUc48wHg=
Subject key identifier:   FD:E7:57:E7:3C:F9:84:42:10:8C:A0:1C:65:16:92:C0:B6:AF:15:0D
Certificate issuer:       /CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
Certificate serial:       010D0C9F4328584D4D5A98D114D580F1B0A0D600
Authority key identifier: 8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/a0a69a88-573c-3474-b573-7ae77353dc2b.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     399836
IP address blocks:        2602:f757:ffa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:98:d1:14:d5:80:f1:b0:a0:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=25ca68c0-e804-41bc-badd-0175f529ad86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:24:30:61:31:9e:33:f8:1e:b3:f3:0c:22:7f:
                    32:c2:d2:90:61:03:c3:f8:e8:d9:06:bf:45:2e:aa:
                    b6:1e:61:8f:f4:ee:2c:c7:a7:09:c9:3e:ce:dc:dc:
                    0e:61:e2:f4:90:3f:04:a9:78:29:0c:72:e7:66:f3:
                    a3:36:c8:1d:45:0f:45:bc:48:79:58:a8:54:77:65:
                    84:12:9c:29:ca:f4:bb:b4:b5:c2:a1:01:41:0a:d4:
                    72:5a:9e:38:f1:d8:b7:dc:e9:09:48:20:13:0f:a5:
                    78:8f:56:a1:0a:72:bc:ea:8b:05:3e:c0:c7:fb:27:
                    dc:5a:f9:ec:fb:b0:e6:9c:66:df:a4:11:a5:14:0a:
                    74:87:70:05:1e:eb:5d:2d:e7:82:9c:7c:d1:c9:30:
                    89:2d:da:3e:07:d8:fe:43:7d:c9:f6:61:61:2b:ce:
                    bd:e0:75:f0:c8:71:92:3c:1a:9f:19:81:08:d5:ba:
                    1d:46:8f:15:b1:cd:27:9d:39:61:9c:51:b4:cf:11:
                    a9:78:28:91:fb:8c:7f:ba:f9:b9:81:6f:d2:cc:c3:
                    2c:27:ef:af:e7:ec:a5:bc:f1:0d:73:23:2f:d8:e9:
                    ea:6e:ab:a0:26:0e:e0:26:7e:ec:1e:21:d6:c2:22:
                    a2:a3:ad:a9:a3:80:63:77:91:3a:5d:75:13:26:ca:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E7:57:E7:3C:F9:84:42:10:8C:A0:1C:65:16:92:C0:B6:AF:15:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/a0a69a88-573c-3474-b573-7ae77353dc2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f757:ffa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:84:53:1d:2a:2d:1d:00:df:71:ba:e7:67:34:da:d7:b3:
         0a:20:07:3c:bd:a0:ca:98:8f:fc:6c:0e:b9:be:8c:82:cb:dc:
         67:f2:e8:12:70:bc:60:ec:01:8b:1b:02:99:6a:8f:51:39:06:
         e3:22:dd:cf:d9:68:17:26:01:3e:56:cb:ec:b3:a0:b3:cd:9b:
         2d:76:11:7e:15:77:f6:29:e8:90:0a:58:c3:20:82:16:c3:53:
         68:54:b3:81:f1:eb:a4:94:3e:c9:40:06:19:4f:3d:f4:32:8b:
         97:aa:4a:fa:d7:be:23:4e:93:d1:62:b1:19:62:73:00:29:f7:
         2b:64:7d:53:a3:66:be:c2:75:cf:81:32:4a:c4:a5:a7:f2:a5:
         a9:61:b5:74:d3:f0:ae:9e:02:f1:51:69:e1:2f:ac:70:c9:da:
         95:bc:bb:25:14:9f:46:14:53:88:8c:61:02:26:94:35:dc:46:
         01:2b:79:d2:2a:8f:9a:1a:bc:59:92:85:79:62:2c:88:8a:4d:
         b0:4d:45:d7:a3:11:39:14:ac:b9:fe:1f:12:04:f9:28:30:32:
         e4:01:d6:50:52:a8:5e:74:97:6e:58:46:27:7a:8a:5a:97:e5:
         0e:98:2d:71:1b:5c:ca:4c:3a:ea:a2:3f:fc:5e:b3:98:2c:c5:
         a5:32:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 22:13:36 2026 by rpki-client