Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/e6b07476-8ae1-37df-9add-713e22c0ab48.roa
File:                     e6b07476-8ae1-37df-9add-713e22c0ab48.roa (raw, json)
Hash identifier:          Hcx3mYjhRMhC0p3pUbJ6hFC0rMEWODnN681a+ZCKJcY=
Subject key identifier:   DF:73:56:7A:C0:FA:DE:C7:F7:6A:EB:8E:11:57:38:B4:36:25:57:89
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584D07AD01AC50F44B2C49775040
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/e6b07476-8ae1-37df-9add-713e22c0ab48.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     33211
IP address blocks:        2606:ca40:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:01:ac:50:f4:4b:2c:49:77:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=797852cc-f992-41a0-94f7-ef46df019c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:98:3a:a5:5e:6c:ea:38:6a:e7:d7:f7:20:
                    7c:af:0d:04:2e:6f:a5:52:3e:02:3d:b0:bc:ad:fe:
                    c5:58:b3:dc:fc:24:85:50:8e:5c:3d:c8:54:8e:92:
                    6b:8e:9e:4b:9d:b5:c0:e7:23:c5:4d:bd:95:5d:68:
                    16:e5:aa:0a:46:72:85:54:38:2e:1d:b2:2a:68:73:
                    e3:bb:a1:51:f7:71:13:c0:79:ad:bc:ba:27:54:e6:
                    b6:29:aa:3e:ab:f5:40:1f:ee:a7:fd:28:2f:54:43:
                    0f:73:d3:88:97:38:c0:a1:28:6d:45:e6:3b:03:02:
                    73:f7:fb:2e:bb:7a:0f:05:ac:47:8b:f6:48:76:40:
                    47:26:a2:4a:74:1a:56:3c:a8:3d:09:49:62:5f:35:
                    1a:0b:53:76:a5:b6:0a:b1:4b:d0:cb:b4:15:ef:78:
                    f3:00:0a:49:03:05:50:8f:9b:40:06:5e:16:c8:e1:
                    1d:4d:13:96:cf:5d:e6:da:dd:53:ad:b3:48:a0:cb:
                    70:f1:ad:49:60:49:bc:2d:8f:c2:cc:33:88:15:4e:
                    20:66:6a:8c:2e:4a:a3:f7:35:11:5a:47:09:e8:0f:
                    c7:1b:db:b9:db:a9:f6:c8:8b:5f:40:03:9c:bd:52:
                    d9:d2:2f:25:25:99:f9:82:60:e0:83:0e:65:d1:99:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:73:56:7A:C0:FA:DE:C7:F7:6A:EB:8E:11:57:38:B4:36:25:57:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/e6b07476-8ae1-37df-9add-713e22c0ab48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ca40:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:1a:3c:50:f7:0e:9b:67:ef:ac:7f:ba:bc:e5:29:3f:ea:d8:
         62:f6:5e:e9:10:d7:3f:3c:76:c7:0d:44:45:6a:4a:a1:a6:0c:
         a9:dc:f6:d6:38:3a:c7:01:41:0c:af:70:4d:13:3d:a7:a0:5c:
         74:17:8c:1c:ae:05:b6:d1:2b:b1:ff:07:e2:dd:3f:eb:0b:85:
         af:77:62:c7:0c:80:48:2c:3d:a2:eb:f5:8e:82:fb:f4:1b:c2:
         4d:cd:a0:95:c3:f9:0e:92:b4:4f:71:48:21:c3:d8:48:b8:da:
         6d:20:3e:03:97:ab:b4:c9:ea:b0:27:8d:f1:db:6c:f4:cf:56:
         8d:17:b2:77:02:92:f3:e9:45:04:d6:d7:bf:ef:0b:46:cd:6b:
         ad:c4:45:b2:8f:69:aa:a2:35:b8:d3:9c:ce:6e:77:00:c9:f2:
         96:84:f3:4a:ab:b3:9f:18:c2:9d:a9:54:11:4a:41:03:cf:08:
         b1:63:5c:3e:a4:a9:f5:95:bf:0b:e1:a4:b4:d8:fb:c7:14:03:
         fd:db:c9:b1:d6:7f:5c:23:1d:c5:a0:8e:86:d3:ee:89:8d:ea:
         0b:65:8b:96:f8:ab:9e:32:f8:46:f9:2d:3b:6b:25:47:a8:cb:
         37:c3:60:10:d1:0e:7f:49:01:34:7f:a6:4c:7a:17:42:b4:f2:
         d1:d1:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:22 2026 by rpki-client