Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d6177f7d-0ae1-32c9-9f0e-d2e3b344bb75.roa
File:                     d6177f7d-0ae1-32c9-9f0e-d2e3b344bb75.roa (raw, json)
Hash identifier:          6VdGV5MrYttau02gG7GSiyMBPAceJerF1uuGb+XPVFk=
Subject key identifier:   68:AF:7E:D4:A2:2B:08:FD:41:19:C1:55:68:F8:F4:CA:73:AC:65:AF
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC612137C7E1CFC134A7C0900
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d6177f7d-0ae1-32c9-9f0e-d2e3b344bb75.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        2602:28c:2662::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:13:7c:7e:1c:fc:13:4a:7c:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=ccefd1d3-d7cf-4f85-a002-9a1df7f08ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:8d:4d:5a:fe:e7:42:32:5a:c4:37:46:4a:
                    cf:57:98:fb:10:ea:b2:bb:60:be:9e:88:55:e8:bd:
                    a8:5e:50:1e:f8:c0:64:29:5e:e4:41:a7:82:7f:8c:
                    17:b4:3e:96:53:2c:a5:e1:43:e8:33:9b:7d:7c:3f:
                    b2:8f:c9:53:5e:5c:71:61:61:b2:6a:a3:6d:24:30:
                    46:ae:39:7f:83:1d:e3:97:eb:72:b8:f5:8b:8f:8e:
                    fe:90:81:a6:bc:b1:2d:4a:37:03:bb:84:3c:85:ec:
                    71:10:5a:73:dc:2d:27:7f:75:28:06:73:2d:05:14:
                    12:5b:08:78:67:12:06:49:06:21:c2:0a:35:a2:53:
                    77:8b:cf:01:d1:6c:72:97:cb:3b:ba:bd:7f:83:c4:
                    ac:72:2f:e6:83:b5:72:b4:fe:f4:b4:8d:ab:08:0d:
                    dd:f7:43:72:09:51:1f:86:74:5b:ba:d6:bb:6d:b9:
                    a9:b4:a1:ab:1a:07:12:0e:a2:37:00:7c:47:ad:fe:
                    02:97:59:fb:ae:2f:62:75:e0:53:2a:b3:7b:b2:22:
                    4d:ee:0d:ae:ae:04:50:dd:80:f1:b4:c8:69:9b:6e:
                    0b:df:b5:5d:f2:ed:1d:5f:bd:f7:21:3b:3c:0c:b5:
                    2d:02:be:d2:3d:29:8f:4c:56:29:f0:9a:a5:61:6f:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AF:7E:D4:A2:2B:08:FD:41:19:C1:55:68:F8:F4:CA:73:AC:65:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d6177f7d-0ae1-32c9-9f0e-d2e3b344bb75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2662::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b0:a0:87:76:62:a1:d9:32:87:ed:77:8e:c9:3a:dc:82:9d:
         86:f5:42:09:28:fc:21:d2:90:2f:3f:6b:dd:c7:5f:96:90:ce:
         5b:f7:3e:a2:4a:47:b2:26:5f:d0:2b:09:14:83:ad:49:e3:29:
         46:79:fb:45:4b:e3:e6:67:1d:5a:f8:25:3d:26:5a:37:8f:71:
         53:05:49:ee:62:45:14:94:56:ee:d1:c1:ae:f6:bb:fa:5e:ac:
         bc:0b:b4:4c:8e:6c:ea:fd:30:d9:ed:7c:a8:31:7b:d9:2f:10:
         88:a7:eb:ec:9d:b6:89:f4:d8:93:dc:b9:c7:a8:5b:b9:6c:2f:
         39:a8:24:f5:51:c6:84:d5:fc:6e:8c:8b:cd:45:85:41:48:7a:
         ea:53:3d:76:5b:15:ee:11:59:4c:74:fe:04:2b:63:83:df:98:
         d4:96:45:5f:80:4d:7a:2d:2c:a2:c8:16:d3:73:19:f9:91:bb:
         da:a2:c6:12:5f:d3:8e:78:6d:38:71:fe:38:d9:23:d1:24:86:
         56:59:8d:dd:88:91:6f:69:4a:fc:53:76:fa:bd:ae:73:5f:8e:
         29:a4:fd:c0:79:a0:63:b7:c0:64:68:8e:fe:9f:1f:1f:fd:0b:
         a3:74:87:6b:ea:f1:b4:db:0f:4d:dc:c3:d9:7c:3b:36:41:c4:
         ee:9a:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:15 2026 by rpki-client