Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/6b9ec643-f61f-33fe-b076-29b56ac9fbaf.roa
File:                     6b9ec643-f61f-33fe-b076-29b56ac9fbaf.roa (raw, json)
Hash identifier:          5qOB+1zEaU9reNvbQwmgbMO5js/aF9pkaaTA4taCY6E=
Subject key identifier:   34:30:91:E8:DB:91:D9:9F:BE:A0:90:E5:77:BE:1D:D1:CC:69:A9:B6
Certificate issuer:       /CN=01def58b-19a6-4ba2-b063-220466ef629f
Certificate serial:       010D0C9F4328584D0C8E7F260E071741A2F158C0
Authority key identifier: 2B:D8:65:46:AA:8C:90:8C:92:9B:5F:5B:AC:2A:E6:DE:7B:59:5C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/6b9ec643-f61f-33fe-b076-29b56ac9fbaf.roa
Signing time:             Tue 03 Mar 2026 19:58:23 +0000
ROA not before:           Tue 03 Mar 2026 19:58:23 +0000
ROA not after:            Mon 01 Jun 2026 18:58:23 +0000
asID:                     208884
IP address blocks:        2602:f43b:4::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:8e:7f:26:0e:07:17:41:a2:f1:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01def58b-19a6-4ba2-b063-220466ef629f
        Validity
            Not Before: Mar  3 19:58:23 2026 GMT
            Not After : Jun  1 18:58:23 2026 GMT
        Subject: CN=b904a6f0-894e-4234-8893-be281e7e84af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:2c:bf:26:92:ac:ba:be:d6:68:37:c0:2e:
                    6d:ba:6e:e6:cc:47:86:d3:6d:b6:5f:9b:ce:96:cb:
                    ed:82:54:fa:96:75:16:b4:3d:70:1a:57:c7:cd:d0:
                    ef:a4:1f:8d:11:46:9d:ac:f0:bb:6f:88:7d:12:4a:
                    de:d1:cd:c7:e2:72:a3:95:22:ae:6b:d6:e8:9a:64:
                    6d:d6:4f:67:2b:0a:cf:87:84:fe:e9:08:4b:da:c6:
                    95:49:f2:ea:61:c4:08:63:8f:87:2c:e6:12:c7:dd:
                    24:8b:b1:ef:df:3e:ca:59:63:9b:e7:b6:4e:b9:d6:
                    10:10:08:1a:b8:ac:fb:8a:78:7d:3b:22:9e:b9:2c:
                    df:32:10:f3:18:b7:03:bd:7e:df:9f:8b:e9:c0:c5:
                    7f:ed:fd:0e:99:a6:ec:81:1f:41:db:91:b6:81:e4:
                    9d:77:30:3d:35:9c:9a:9d:5d:a9:9f:29:23:41:e2:
                    0e:b7:c3:f0:4a:98:8b:04:25:c7:5e:63:ed:f5:a0:
                    09:89:57:06:5f:d3:2d:c7:64:04:0c:03:da:6b:71:
                    0c:6c:cb:0f:44:0f:89:27:b3:ed:10:cf:9f:45:e3:
                    96:79:e4:37:7a:c5:37:21:52:30:be:c4:33:2a:7a:
                    af:30:74:14:9e:f8:bd:97:94:78:c8:6e:20:24:ff:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:30:91:E8:DB:91:D9:9F:BE:A0:90:E5:77:BE:1D:D1:CC:69:A9:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/6b9ec643-f61f-33fe-b076-29b56ac9fbaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.crl

            X509v3 Authority Key Identifier:
                keyid:2B:D8:65:46:AA:8C:90:8C:92:9B:5F:5B:AC:2A:E6:DE:7B:59:5C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f43b:4::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:82:6b:e0:ff:2b:7c:45:20:11:09:55:a5:7a:15:e8:d7:07:
         3d:0b:02:9f:1b:8a:e4:e3:be:66:51:3b:3e:48:85:10:11:4d:
         92:dd:46:88:b8:9e:f3:f1:3c:56:c8:a0:c2:7b:83:c4:55:ab:
         98:9e:66:29:87:a1:0a:78:46:1d:f1:88:cf:38:12:5b:68:23:
         3f:f3:c2:e0:64:19:8c:4d:5a:1c:4f:13:eb:ae:49:14:9e:aa:
         05:74:47:10:8f:96:c1:69:f4:24:73:29:79:38:11:7b:67:ed:
         ab:cc:47:cb:ec:99:9b:1b:2a:a3:db:28:f0:08:a7:bf:43:b6:
         c9:e4:6b:9c:14:ad:73:3b:de:e4:0f:41:5e:d1:11:62:be:13:
         e7:46:b5:ea:3a:ce:9d:17:c5:61:49:2b:34:55:03:ab:3c:85:
         7f:a8:2f:c5:0d:1d:4c:de:eb:80:5c:a6:e3:da:1b:29:9f:ba:
         c5:c4:94:97:d3:82:1b:cc:27:eb:f7:03:72:ef:b6:a9:1d:01:
         81:cb:56:eb:9a:fe:e2:3f:d0:c5:e1:40:c9:19:af:76:4c:14:
         9d:ff:b8:17:8b:02:6e:01:a3:31:c5:ea:4b:1a:4d:42:53:99:
         c2:ab:e9:42:33:65:42:e8:06:c1:a5:fa:d3:09:0e:b6:7b:3a:
         c9:0d:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:54:35 2026 by rpki-client