Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa
File:                     6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa (raw, json)
Hash identifier:          4IHRaX1dC+ptbe2AfeFgrfZjcKxu81K1kCvdmxhB/r8=
Subject key identifier:   1E:E9:DA:D8:07:63:2C:54:30:1A:5B:C3:A5:3D:A1:48:55:3D:37:A2
Certificate issuer:       /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
Certificate serial:       010D0C9F4328584E1B798C44EDD2277C47984240
Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     42615
IP address blocks:        2602:fafb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8c:44:ed:d2:27:7c:47:98:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=32e2cd50-342f-438f-9897-77d2028199aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:77:c4:9f:13:73:f7:d4:0b:5e:d9:bd:44:
                    f2:ac:58:77:84:9d:12:89:9a:19:9e:2a:ed:64:3c:
                    49:ca:62:7b:dc:e7:f6:95:2d:03:a4:b6:46:30:a9:
                    70:ce:2a:51:3a:7f:a5:0d:a2:f9:b1:15:ef:ae:a5:
                    eb:ce:d1:a1:c9:5e:3a:52:29:5b:e8:2e:6c:f1:21:
                    9c:93:87:21:f4:ca:9e:d3:a7:0f:cf:4c:ee:bd:38:
                    be:9e:b9:71:ba:1c:c1:78:95:0c:ee:2e:da:aa:cf:
                    19:4e:39:d8:56:f6:cd:bc:c6:76:ad:44:76:be:94:
                    23:c7:08:e7:84:61:b6:79:b7:e7:0b:ba:8a:f0:cb:
                    e7:a2:12:5e:74:d0:c9:a2:3f:07:63:ac:ba:e4:22:
                    5e:8f:f0:f4:c2:d7:57:c4:a8:4e:c8:79:e7:11:4e:
                    31:01:e5:d6:75:fe:2c:87:81:e2:62:2c:75:4c:ed:
                    4a:19:c5:44:4a:21:86:fe:c9:fb:71:0a:7f:e5:de:
                    43:0b:9f:2e:d5:47:3e:56:b5:5e:37:61:76:cf:c6:
                    80:c5:10:70:83:b4:fe:17:69:b4:90:72:b6:39:e2:
                    e4:89:cf:cb:3e:f1:e6:b1:90:ce:e0:ff:33:eb:42:
                    a7:05:91:5b:da:cb:87:8b:24:b2:13:01:bb:46:58:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E9:DA:D8:07:63:2C:54:30:1A:5B:C3:A5:3D:A1:48:55:3D:37:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl

            X509v3 Authority Key Identifier:
                keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:dd:c0:86:07:bb:ca:87:6e:2c:11:df:bd:96:79:a3:ca:1c:
         f8:fa:4f:fa:b3:4b:91:bb:e5:f9:2c:e2:b7:39:8a:ad:52:56:
         20:6e:98:df:b9:89:80:07:da:e1:65:ff:53:e2:0e:d9:28:f9:
         20:3c:e7:ca:d5:35:c8:0a:54:f2:80:b8:5a:31:dc:fb:55:8b:
         e8:32:eb:ac:43:c7:4a:8c:ac:04:ed:62:55:02:d3:80:c9:d1:
         5e:5c:c0:f4:8b:14:6d:69:7c:8f:af:8f:0e:00:95:29:38:e4:
         ef:84:28:ee:8a:02:74:e0:41:b5:1a:f6:63:64:c0:54:d2:e2:
         c8:e2:83:ea:bb:87:37:a4:76:52:34:3c:25:c4:a4:08:92:5a:
         70:e1:2c:46:16:7c:b3:9e:f7:57:ee:ae:03:f3:cd:50:09:cc:
         3e:79:f2:1f:8f:6e:50:fd:b2:fe:13:86:e1:c9:d1:c9:88:ed:
         12:53:89:29:50:31:32:0a:f7:c6:1c:af:40:d9:34:ba:c9:a1:
         18:42:36:47:32:e6:18:8e:8b:1c:7d:7d:60:21:56:61:5e:65:
         b4:35:7a:19:6d:c3:c9:d1:d3:14:af:0e:6d:f1:15:a8:aa:15:
         7b:bf:14:58:5c:44:11:c2:dd:bd:12:b8:ec:5d:b8:a5:5d:2d:
         45:e8:c8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:59:54 2026 by rpki-client