Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/d448082d-cd50-3239-a0de-def50b3efab7.roa
File:                     d448082d-cd50-3239-a0de-def50b3efab7.roa (raw, json)
Hash identifier:          C4QTNbePSKIThhBLGmCfsURfsPti3+v2/S2e3gofWCI=
Subject key identifier:   A7:69:E1:53:E7:FE:72:4F:51:21:47:78:09:C1:B5:A1:F6:32:D8:80
Certificate issuer:       /CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0
Certificate serial:       010D0C9F4328584E016B2BA6E510D3AC825D0200
Authority key identifier: 78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/d448082d-cd50-3239-a0de-def50b3efab7.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     27520
IP address blocks:        2602:f811::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:2b:a6:e5:10:d3:ac:82:5d:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=c5ff3162-0c54-488f-b3ae-b7f0dd844535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:f1:5c:b8:41:b2:3d:6d:9c:f6:87:ab:d4:
                    d1:d1:0b:1f:f4:73:48:62:ab:ca:76:2a:85:0a:e9:
                    22:43:fd:a4:28:1d:f0:b6:a5:85:20:16:32:ca:56:
                    5f:5a:f2:be:61:17:70:35:36:8d:e1:81:6e:4a:36:
                    5c:bc:22:f7:64:1f:e7:78:01:fc:2d:f0:8c:78:77:
                    7c:31:94:61:de:e3:66:7e:db:3c:ca:c4:ba:01:1d:
                    33:e4:c8:ab:ae:73:33:2a:79:0c:b4:a4:69:95:56:
                    99:00:e5:b3:3f:af:50:9a:3b:8e:d5:c6:ba:87:94:
                    97:2f:92:77:68:77:14:8a:bd:54:c1:56:38:47:4f:
                    bc:2d:8d:6b:cf:69:90:ab:bf:7d:48:1b:3b:b8:c6:
                    dd:ae:4e:f2:6c:e3:37:5b:fa:c5:0a:9a:e9:10:cf:
                    15:00:83:be:f2:a6:46:31:8b:e2:10:61:4c:08:5f:
                    2a:65:91:d2:d3:ec:23:4f:77:e6:be:47:4a:d6:59:
                    d0:03:70:2c:c2:13:56:1e:7e:e6:dc:88:f0:c8:3f:
                    09:db:9e:11:ae:89:c6:19:29:06:f6:6e:c6:a3:3a:
                    1f:2c:55:ec:a1:58:cc:0a:ed:d6:e8:66:dd:c1:b8:
                    2c:7c:a7:64:68:d0:a8:ad:14:91:77:82:a3:03:df:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:69:E1:53:E7:FE:72:4F:51:21:47:78:09:C1:B5:A1:F6:32:D8:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/d448082d-cd50-3239-a0de-def50b3efab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.crl

            X509v3 Authority Key Identifier:
                keyid:78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f811::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4a:42:12:13:2d:32:e0:ba:05:26:d2:09:a0:27:6f:71:c0:
         4d:87:b8:f6:73:81:da:4e:6f:4e:f6:34:79:f4:25:21:46:e3:
         fa:24:ac:25:15:a3:75:6b:fb:64:6e:c1:96:f8:31:a4:f4:f8:
         ab:d5:f3:b6:d2:03:29:84:fb:8f:15:d1:6d:8b:0f:a5:89:69:
         0c:de:d7:df:b8:31:26:4c:c1:bd:e8:ce:3c:db:f3:65:46:0d:
         ac:78:46:ee:2c:e9:6e:d8:69:28:e7:e4:fa:b7:08:cc:b8:40:
         4a:a2:31:25:e5:ca:99:7e:b1:2f:c5:4e:7a:b1:08:83:72:9a:
         99:c4:9c:82:3c:30:58:b9:14:df:ef:f4:3a:2a:9a:d7:5b:14:
         e9:5b:9f:be:bf:17:68:d4:08:30:1d:9d:94:f0:8f:70:c2:2c:
         93:83:9a:ae:71:fd:a0:aa:23:c6:b7:1f:ca:eb:b8:54:31:3f:
         71:4e:c4:73:14:1c:10:f7:c5:41:9c:72:45:44:81:64:8d:dc:
         5d:66:17:19:6a:19:67:29:c5:a8:2d:ca:ce:05:bd:78:6c:d9:
         4b:f3:8b:15:57:14:66:0b:64:46:a9:cb:08:be:e2:1b:71:c9:
         86:7c:d1:f3:ef:50:1a:e9:d6:87:80:b8:c0:34:cd:87:96:9a:
         8d:89:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:47:11 2026 by rpki-client