Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa
File:                     994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa (raw, json)
Hash identifier:          7VDOHDUEVE9nt4XoOeUFxXcJfGx8DHa6/fSbyURqXLA=
Subject key identifier:   1C:AB:C4:10:C6:CF:AE:58:E0:04:DA:B4:DE:A7:38:E1:F1:73:DA:6E
Certificate issuer:       /CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
Certificate serial:       010D0C9F4328584E0435EB8A2DAA82CB9CB83600
Authority key identifier: C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     400541
IP address blocks:        2602:fb56::/40 maxlen: 40
                          2602:fb56:100::/40 maxlen: 40
                          2602:fb56:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:eb:8a:2d:aa:82:cb:9c:b8:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=383d2c33-fcea-4387-9a1e-ec649b06450e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2b:bf:78:95:8e:68:21:d9:e6:e5:52:08:43:
                    3e:2a:0e:20:f7:3d:98:09:0f:68:39:d9:d2:59:36:
                    e0:af:87:64:bc:ee:72:14:f2:80:46:d4:e1:60:17:
                    08:16:44:41:42:bc:a8:62:4d:f6:03:05:42:69:e0:
                    77:3d:8c:bb:97:0a:9e:54:be:82:80:bb:e1:f2:6b:
                    ef:af:c2:1d:7d:eb:00:c2:7a:e0:29:39:46:aa:93:
                    ed:8d:00:02:9a:a7:ae:dd:9b:e0:03:dd:5c:20:81:
                    ab:36:b4:14:99:1a:2a:8f:81:13:5e:51:1a:c3:cb:
                    be:bc:81:61:4a:ce:5b:17:58:ee:d0:50:d5:17:07:
                    db:82:5b:7a:52:ed:f7:50:64:31:3f:1f:f9:a2:22:
                    32:1d:3f:a9:67:96:64:85:5b:49:88:a1:16:c8:bb:
                    fd:37:0f:84:94:48:a5:2f:39:d7:2e:6e:ee:20:27:
                    40:c4:9e:f6:87:ca:cf:86:20:e7:22:b0:04:e4:c5:
                    ff:df:1d:c6:1d:46:51:b0:c3:f7:e9:ae:0f:a2:28:
                    01:13:bb:17:6a:d4:22:eb:f1:29:a4:bf:30:ee:32:
                    f2:ba:bf:1c:7b:a7:f7:b8:06:31:aa:5c:cf:c0:b3:
                    1b:2b:bf:91:39:e3:da:2b:72:4a:11:5d:b9:1a:b8:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AB:C4:10:C6:CF:AE:58:E0:04:DA:B4:DE:A7:38:E1:F1:73:DA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb56::-2602:fb56:2ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:7d:d2:e3:a5:49:c5:e4:01:b9:ad:b7:fb:29:92:de:06:
         bc:e3:51:f7:b1:1d:be:95:8e:5c:5b:03:41:62:14:2f:b3:b4:
         62:1a:5b:f9:b6:90:11:9f:21:72:9a:f1:20:93:c1:ed:01:e2:
         bd:84:29:1d:24:dc:f9:97:f9:7d:bf:85:64:75:97:21:84:c4:
         23:44:b7:c9:c0:0a:93:89:d8:58:a3:fa:c5:2b:d4:68:2a:ad:
         3f:8f:2b:32:11:81:31:48:d6:8d:f5:68:48:64:59:ae:3f:26:
         51:ed:58:49:8c:77:a8:76:89:77:31:75:b2:40:67:51:75:0a:
         04:1a:2c:31:69:39:44:55:01:f6:25:bb:ca:3d:de:af:45:a3:
         ce:0b:65:d8:0f:77:36:a2:78:91:5e:54:7f:52:84:f8:c6:7b:
         af:95:08:33:93:31:59:54:2d:d3:5a:05:da:44:a5:fd:71:13:
         c7:f8:32:36:36:c4:29:48:37:5c:bf:07:68:c7:46:0d:97:26:
         7f:14:5b:9d:3e:94:de:e3:25:ba:72:a9:91:33:fb:6c:4b:ce:
         af:99:3a:79:9e:32:1c:c5:e2:b9:71:0c:12:13:89:ab:29:4c:
         99:31:7b:1a:58:a0:f5:b0:c0:15:50:a4:6a:b1:f6:39:f1:45:
         09:2b:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:55 2026 by rpki-client