Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa
File:                     99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa (raw, json)
Hash identifier:          JMNpHjH29fP6lV8g3bp5j471XH1iE7u0JQa+5YuZMJ4=
Subject key identifier:   EE:9A:F7:4B:E8:1A:73:ED:19:C6:80:BF:6A:9D:9A:A2:64:A5:50:08
Certificate issuer:       /CN=cbf89b78-1e86-4629-abdd-682f04ffb165
Certificate serial:       010D0C9F4328584D67DFF87FF2E1AA1D78BEC3C0
Authority key identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     975
IP address blocks:        2602:f989::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f8:7f:f2:e1:aa:1d:78:be:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf89b78-1e86-4629-abdd-682f04ffb165
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=606a72b1-59da-4a1d-9c9e-f68e008beb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:91:55:dc:d3:c5:34:b7:cc:3d:d6:e2:9a:
                    ee:7f:83:a3:c2:63:bd:2e:e7:fb:6f:d6:d5:80:b1:
                    11:fd:ee:5b:9c:b0:59:a0:f2:d0:8b:3d:0e:d7:3e:
                    08:15:d5:da:f4:4a:d8:b7:41:62:f9:8b:5d:4c:de:
                    98:d7:43:ae:99:9c:2e:ec:8b:82:94:39:8d:a3:10:
                    84:71:d4:8f:07:1b:c7:4b:f7:fe:30:7f:7b:fd:72:
                    c4:0c:ea:6f:30:1e:b0:65:89:2f:73:cb:92:67:6b:
                    04:31:22:08:e8:b2:ed:80:8b:73:d2:fb:c2:c3:2d:
                    6e:d2:f4:a4:71:42:bf:22:e4:df:4a:cb:f8:e5:07:
                    93:1a:99:7c:93:81:ef:df:28:9e:00:5c:57:cb:34:
                    47:fe:09:be:17:79:ae:50:fe:e7:3f:57:f9:56:e4:
                    53:c9:6b:93:a8:d5:cc:f8:d5:fd:7e:ec:c5:c9:39:
                    13:d3:a2:7c:32:54:cb:1a:da:e5:47:36:fa:49:19:
                    33:63:6f:8f:a7:06:da:ff:7e:2a:f5:dd:fe:d7:2a:
                    53:be:fa:75:a9:d3:0e:ca:00:f3:98:fe:0e:65:47:
                    c7:8e:42:4d:28:75:fa:80:3c:ca:c5:da:41:73:96:
                    49:06:c0:2a:d1:56:e4:a6:78:ef:05:e1:af:72:35:
                    05:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:F7:4B:E8:1A:73:ED:19:C6:80:BF:6A:9D:9A:A2:64:A5:50:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl

            X509v3 Authority Key Identifier:
                keyid:84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f989::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:05:ec:d2:f5:5f:3a:e3:0d:2b:96:2b:01:eb:2f:cf:2d:df:
         75:38:ac:14:32:b3:06:70:7f:fd:05:66:e7:fa:85:3f:a5:d9:
         c9:bf:ff:98:45:a3:9a:ca:c8:78:6f:45:ed:ae:6a:4b:26:ab:
         8c:e0:81:6b:08:03:02:02:df:ab:a9:42:a8:fc:c1:2d:e8:46:
         08:f1:b7:00:fe:f5:5d:78:31:fd:96:59:06:86:36:62:6e:7b:
         e8:ab:96:d5:bb:95:7e:5f:a5:4e:3d:e1:52:bb:16:82:77:35:
         d8:27:5b:b5:6e:83:5e:94:b7:8e:13:ed:46:58:ae:cf:6b:63:
         69:51:89:9d:cf:14:4a:9d:6e:0b:2c:a5:b2:d5:89:f9:ed:ad:
         86:c3:6a:99:bc:2b:58:8e:89:5f:88:5a:70:c3:85:74:54:26:
         14:22:a7:df:f7:d9:4a:61:92:69:e8:ca:61:5b:66:e2:cd:70:
         3e:0e:58:2d:ae:46:80:42:5c:15:e7:73:e3:9d:b3:b1:c2:ca:
         99:fd:ef:31:00:df:7e:ab:e3:ec:0d:bb:9b:d9:72:64:63:20:
         3b:ed:0e:6b:55:d5:58:cc:31:32:29:41:f7:39:37:fe:8e:45:
         b8:8c:eb:6d:ef:c2:a7:c3:f3:78:9e:e9:93:54:23:f9:40:0d:
         67:85:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:54 2026 by rpki-client