Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa
File:                     0952e798-9d39-3263-bdb3-03a59c0c85e4.roa (raw, json)
Hash identifier:          9dHEiWuwMciZubHwAv8h83rcDjyM6jLr73YtrtKEXCQ=
Subject key identifier:   A4:38:34:10:4A:AD:0E:4F:6E:49:A0:D9:3B:42:49:47:31:78:ED:43
Certificate issuer:       /CN=48c4aba6-5e67-450a-b4a4-647523380d01
Certificate serial:       010D0C9F4328584D8C2AAF4ECBC3E46F4A705300
Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        2602:f5df::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:af:4e:cb:c3:e4:6f:4a:70:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=e2a35ec4-8064-426f-a649-047bb4e57b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:19:d4:a7:c7:a3:92:71:02:1c:4d:c5:a8:b7:
                    9b:a2:85:09:95:ad:7e:49:c7:85:a8:b6:56:29:18:
                    fb:42:fe:80:3c:44:ba:9d:ad:11:94:07:56:ac:33:
                    21:a6:34:71:d0:a4:55:62:63:6d:1d:ad:38:9b:15:
                    3d:32:13:5b:bd:3e:07:ba:13:12:9b:88:63:67:4d:
                    97:84:7c:85:f4:9b:80:da:af:67:d3:71:88:df:ec:
                    22:1b:e3:81:8b:3b:8a:5c:d5:cc:89:f5:5d:52:c7:
                    b8:b6:0f:89:5d:86:04:68:a3:9b:d7:3d:53:6c:61:
                    d1:50:ad:e2:fb:9f:0c:e2:bc:f9:d3:fe:a0:ab:a0:
                    9f:36:97:02:e7:fd:b1:d1:ff:da:60:e4:14:41:78:
                    43:74:b3:25:16:d0:d6:69:d3:bd:8f:5e:50:3e:6a:
                    31:d3:2b:a4:d1:6e:eb:9e:35:74:e6:66:76:2a:a4:
                    ea:2f:74:df:7d:1c:39:64:68:ab:64:af:9a:c0:97:
                    29:dd:8c:c8:44:07:79:9c:56:fa:1a:63:82:06:5f:
                    15:dc:ad:6e:c2:55:00:48:63:43:61:8f:56:d1:9e:
                    2d:02:7c:bf:de:fc:42:e4:ab:05:bc:9e:32:cc:28:
                    3f:0f:35:ab:58:55:b0:85:33:52:c7:4c:c7:3c:17:
                    ad:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:34:10:4A:AD:0E:4F:6E:49:A0:D9:3B:42:49:47:31:78:ED:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl

            X509v3 Authority Key Identifier:
                keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:67:1e:75:68:e0:56:ca:f8:f7:bd:8d:fd:c7:2e:99:65:5d:
         2a:29:73:1c:f0:bb:ee:a6:40:c7:14:8b:4c:b1:0a:89:77:25:
         f8:d7:fc:d7:01:f8:be:19:17:db:4b:36:c7:20:9c:5f:69:63:
         a3:16:44:9b:34:06:e2:93:6a:df:49:66:19:da:5b:ab:d4:10:
         6c:1f:9d:8c:bc:a2:22:1a:8b:aa:06:55:07:ed:12:4c:e9:96:
         99:db:9f:76:86:c7:dd:66:ba:80:74:81:0e:07:25:45:a8:19:
         37:06:f3:84:b4:09:4d:e1:17:f3:be:16:60:c1:d9:9f:34:f7:
         8c:f8:1f:cb:7a:90:ee:56:cd:97:04:60:a0:61:fa:3c:17:12:
         44:d5:b5:56:a1:4c:0a:bb:5d:66:24:d2:a1:f5:1a:63:12:63:
         48:40:17:a5:0b:37:d0:fd:a0:20:93:e9:ce:c6:38:4d:84:88:
         c0:94:d8:b4:c4:e0:5d:08:a8:da:1f:55:d4:d7:ce:c6:ad:b1:
         0c:42:a4:ab:66:59:97:f8:c9:48:d4:0b:2e:c9:15:83:39:9e:
         94:bb:2e:0a:49:4b:f0:fe:74:aa:d6:77:ca:8f:a2:36:c4:b8:
         53:81:5b:c8:70:8c:87:8f:dd:a7:e6:e7:03:9e:1f:c0:bb:cc:
         0b:0c:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:24:43 2026 by rpki-client