Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/748d8a92-4d18-3952-bf42-80d4622f7222.roa
File:                     748d8a92-4d18-3952-bf42-80d4622f7222.roa (raw, json)
Hash identifier:          xbOEscl+4ysFVJ25tB0VUJ1d8HNfpVaM23jkHpXn5cc=
Subject key identifier:   87:45:A3:2E:83:3A:02:B4:56:0D:4F:6F:47:E9:E9:18:28:46:26:2F
Certificate issuer:       /CN=61a98034-fe16-431f-9842-402073e93fa8
Certificate serial:       010D0C9F4328584D9E50063820134A8CBB8D9A80
Authority key identifier: 2D:FA:CC:02:3E:41:92:1C:1A:F1:C5:F6:89:2F:2F:FA:7B:65:5A:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/748d8a92-4d18-3952-bf42-80d4622f7222.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     62628
IP address blocks:        2602:80c:4000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:06:38:20:13:4a:8c:bb:8d:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a98034-fe16-431f-9842-402073e93fa8
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=51e5d690-23af-4226-973c-9a259d921163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:3a:af:e9:97:28:a7:04:92:a1:80:84:85:
                    d2:12:06:72:e8:05:c5:aa:0c:83:d4:ac:58:ba:9c:
                    06:2c:74:81:78:35:cf:96:ae:5f:3a:a7:76:4f:43:
                    7e:a2:97:01:9f:67:15:5a:36:43:9a:f8:11:6d:96:
                    84:17:9b:dc:1d:9b:be:e3:00:dc:cc:63:8b:97:dd:
                    38:e1:a0:28:75:bb:03:30:ce:21:1d:cd:55:fd:43:
                    5b:e3:ac:23:1c:21:63:13:53:1b:7d:d2:23:09:0b:
                    72:e4:1d:92:f3:2d:c9:be:da:12:d0:5d:c3:57:7f:
                    19:47:ea:df:1f:76:52:60:72:19:ca:e6:ba:36:7c:
                    8e:b2:f0:16:c5:6a:1c:07:7e:2b:32:7f:c5:0d:4d:
                    89:ab:82:c9:00:ab:6d:c8:9c:22:77:fe:81:d4:ca:
                    59:ea:e1:92:93:95:68:5b:4d:9f:84:a3:32:68:39:
                    7e:b2:43:3d:67:52:78:21:4a:01:dc:a3:10:1e:81:
                    b9:1f:68:0c:9b:19:a7:e1:de:dd:84:87:20:b7:d9:
                    6a:a8:37:4c:8e:f4:e5:c3:4a:15:d0:a3:8b:43:e7:
                    fd:44:b2:61:88:b7:32:d1:13:56:07:84:43:32:4a:
                    bc:80:a0:64:8e:fe:77:87:62:30:e9:d0:91:34:49:
                    5f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:45:A3:2E:83:3A:02:B4:56:0D:4F:6F:47:E9:E9:18:28:46:26:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/748d8a92-4d18-3952-bf42-80d4622f7222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:FA:CC:02:3E:41:92:1C:1A:F1:C5:F6:89:2F:2F:FA:7B:65:5A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9e:52:fb:94:0b:20:da:3d:49:bd:b8:90:b1:47:0b:2d:9f:
         41:8b:d7:00:2e:8a:57:45:e4:30:2e:3d:99:e5:d2:c1:dd:69:
         0b:e4:c2:4f:0d:c0:4e:99:19:f3:55:e6:17:cc:b1:f2:57:93:
         1b:c2:f8:57:98:3d:c3:24:e9:b0:d6:1e:ce:b5:8d:17:fb:c5:
         06:72:7b:9c:c4:a0:0e:cd:c7:c1:5f:00:be:e3:5c:fd:ad:f5:
         06:9f:dc:b7:c1:29:ef:03:30:62:45:87:3d:6a:42:8f:a9:41:
         b1:04:9b:e5:2f:d0:c7:34:be:7c:86:7e:5d:c4:da:cf:d4:1a:
         bb:66:cb:31:03:e3:5e:49:ca:11:e0:73:d7:bb:f1:18:3b:8f:
         d6:17:22:1e:f5:0d:d0:ab:8b:82:fc:00:57:03:cd:0d:eb:8d:
         d4:8e:d1:88:a6:6d:c9:5a:af:47:78:cb:c3:61:05:c3:c2:68:
         eb:5f:82:a3:54:72:22:74:ae:57:b0:09:ce:bd:ea:04:77:b6:
         aa:55:75:13:e6:bd:14:f4:bf:90:e3:dd:2a:8b:07:f3:ee:73:
         ce:55:cb:fe:87:93:ae:cc:e9:2a:6f:c0:99:81:ec:dd:39:85:
         7c:9c:ab:8a:c5:5c:b4:95:ac:5b:85:30:f6:4e:61:7d:96:e9:
         64:56:b8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 23:16:04 2026 by rpki-client