Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d825415-a280-3181-81a2-705dc42f29fb.roa
File:                     3d825415-a280-3181-81a2-705dc42f29fb.roa (raw, json)
Hash identifier:          /UEVtN61MqYVKu8ij2uABUOTzeefsC5ny0kwzqbLgW8=
Subject key identifier:   AE:FB:6A:20:9F:BE:BA:E4:84:02:A6:31:E0:4A:5B:5F:0F:1D:C8:95
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584D83CAAF7497FD7DAECE592180
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d825415-a280-3181-81a2-705dc42f29fb.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     63150
IP address blocks:        2602:f988:86::/48 maxlen: 48
                          2602:f988:87::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:af:74:97:fd:7d:ae:ce:59:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=4c7ca2ef-e1ef-4296-a555-409faf6fdef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b6:89:34:27:eb:18:5e:75:25:e1:f4:e8:08:
                    67:92:05:d7:35:17:8d:20:78:28:4f:87:6c:8a:8a:
                    86:c1:b1:f4:8a:d5:fb:fb:c9:87:37:09:83:55:8d:
                    82:e0:fe:d9:a6:f8:ca:9d:8e:e8:e6:b2:06:ed:0b:
                    6d:d8:23:16:4f:44:be:e5:70:4a:cc:e7:45:0c:10:
                    83:f6:08:6b:e2:fd:35:b9:2c:64:9a:bc:0b:92:79:
                    da:14:65:f7:02:0e:62:9c:5c:57:23:ea:a7:b3:99:
                    37:02:a1:80:47:78:f6:6e:52:03:68:e4:4d:59:9f:
                    16:6c:71:01:a3:0b:a7:4c:b7:91:00:56:cd:26:bb:
                    4c:be:9b:05:db:17:9e:2d:6d:3d:dc:66:94:d9:8c:
                    6f:e5:1d:52:1c:09:a9:ba:2b:d9:66:26:4a:92:5a:
                    10:c7:9d:06:7a:21:09:35:a3:4b:89:cc:c4:6f:c3:
                    60:f8:d3:2b:b9:c4:75:e3:cd:73:e4:93:90:3a:ea:
                    ee:ce:49:e9:be:1f:34:51:17:2a:a1:3b:60:4f:ae:
                    9c:80:25:13:1c:7d:2a:2f:a2:f8:11:3f:8e:f9:e0:
                    ab:9e:60:38:3a:87:fb:60:67:4c:7e:0d:47:4d:13:
                    40:de:9e:30:eb:43:17:fa:c5:1d:96:8d:9a:e1:3c:
                    2d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:6A:20:9F:BE:BA:E4:84:02:A6:31:E0:4A:5B:5F:0F:1D:C8:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d825415-a280-3181-81a2-705dc42f29fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:86::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:80:32:b2:6f:f8:5c:88:df:3a:ef:a1:55:80:d0:56:7f:
         e6:1f:c3:ea:fd:f7:e0:c6:29:37:6c:03:c3:19:72:45:a7:6d:
         92:28:66:0f:d3:5f:a2:44:81:70:4e:ac:93:d7:25:f4:6f:f1:
         83:8c:d1:b0:c3:5c:00:c4:72:ef:9d:2d:78:eb:a7:43:0b:68:
         90:12:69:e8:dc:d4:19:b4:f5:01:0a:d9:dd:89:3f:35:e9:35:
         2b:43:a5:73:76:ab:90:35:97:e7:ef:89:5a:68:e1:8b:63:9f:
         34:ae:d3:9b:f3:d9:be:52:c8:56:db:6b:64:e1:db:c6:d4:c0:
         74:75:8b:93:9d:1a:72:b9:54:4a:bc:98:f9:42:b4:56:7b:4f:
         4d:07:13:8c:76:1b:e1:70:f9:2d:9c:12:8c:3f:a8:7e:09:95:
         88:53:7b:87:0d:7e:dc:cc:da:bd:e7:2b:0b:10:d9:03:66:a5:
         0c:4a:7e:fd:18:33:15:47:11:33:28:5b:27:c7:9f:86:e2:35:
         d8:0b:7c:29:05:3b:12:e0:32:d2:50:06:60:ae:2c:5c:84:0a:
         d0:80:87:1b:17:34:58:8d:07:98:2a:fe:90:e8:74:1c:2e:34:
         f6:ea:c1:23:13:f6:90:29:62:d4:9e:9b:31:e6:bf:38:13:ee:
         2a:fb:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:19 2026 by rpki-client