Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
File:                     4e136740-8a5c-3866-bc51-aa216174bac7.roa (raw, json)
Hash identifier:          IIwAeTKG1yyIhpHW3tAz0MeqiuStgCiwR8khp91DusU=
Subject key identifier:   5F:C6:60:C2:67:4D:3E:A7:BC:58:0F:8C:B3:3A:FE:1C:F4:02:D3:96
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584E0005DD2FBFD6567FA309DE80
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     57974
IP address blocks:        2602:2d4:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:dd:2f:bf:d6:56:7f:a3:09:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=bb55ed7e-b79c-4338-b127-6f020e58704f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4d:9f:14:fa:25:1b:d6:ab:c0:ad:75:77:1c:
                    ba:83:7d:4f:31:0e:e9:f9:2a:42:ed:41:33:3b:5c:
                    60:78:c2:80:42:ff:08:64:40:97:f9:59:8f:23:94:
                    16:79:fd:ba:92:30:38:af:a8:a3:a4:63:8d:c2:f1:
                    df:83:15:1b:fd:d5:58:17:27:9f:18:77:1e:ff:27:
                    df:75:2a:2c:c9:db:28:02:1c:16:20:8b:fb:ac:d3:
                    61:10:c7:8e:22:9c:ab:0e:4a:c4:f5:55:86:b6:3d:
                    8a:8d:bd:67:77:72:16:30:63:b2:4a:0e:7b:3c:0d:
                    df:6f:15:8b:00:01:c4:20:95:f2:aa:e5:82:ce:33:
                    44:1e:29:64:67:79:3a:7d:90:60:c1:f5:1e:4b:68:
                    4d:67:5a:dd:c4:80:43:ae:d0:09:6c:1a:40:2b:77:
                    a1:61:0c:49:0e:fb:9c:fd:a2:f1:e1:64:89:67:ba:
                    0f:24:6e:3e:12:dd:b6:c5:74:f8:e1:fe:78:61:0d:
                    31:6f:4f:c6:b8:19:22:3d:37:da:93:3e:26:c0:fb:
                    e5:08:cc:d4:2f:a3:f8:49:d8:58:9d:50:37:64:7a:
                    3a:21:7a:aa:36:e3:18:42:55:86:86:fa:87:e1:76:
                    00:07:ce:25:bb:41:ad:ac:0c:f3:12:69:04:06:f6:
                    fc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C6:60:C2:67:4D:3E:A7:BC:58:0F:8C:B3:3A:FE:1C:F4:02:D3:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3b:01:1a:d8:13:1b:77:84:95:4f:36:ae:91:93:77:b4:0d:
         fd:26:ad:da:a0:e1:2a:4e:c7:d9:82:f4:90:58:63:ee:92:42:
         3f:fc:cb:f1:02:a3:32:27:52:50:e7:b1:f9:9d:36:80:78:3e:
         e0:d4:1c:4e:42:34:0d:94:19:fa:69:2c:a5:3a:cb:41:a3:35:
         02:8c:0d:8c:c0:b8:b4:7f:4a:c4:c5:1a:cd:8a:4c:a4:7d:67:
         48:09:ac:1f:fc:ce:12:ba:c1:be:44:27:b3:fc:b7:24:5d:25:
         4f:7a:26:62:ba:16:0f:4d:3a:eb:09:99:3d:18:89:89:1d:69:
         11:d1:11:1e:cf:1f:00:ca:60:b0:f3:a0:0e:f1:f6:b8:22:b2:
         eb:0a:f4:73:30:0e:5d:79:e5:c3:ca:62:c7:25:b5:03:e2:71:
         cb:bf:9b:e3:8b:9a:c9:cc:b4:a7:c5:50:cb:76:55:c9:b2:8f:
         ad:1e:d1:75:5f:39:97:d9:d8:13:98:05:00:1e:7e:86:27:d1:
         2f:e7:68:19:a2:93:fa:86:11:2d:80:b0:50:87:db:49:04:ac:
         fd:5c:3d:8f:97:74:43:14:81:b8:db:71:43:56:2b:39:f7:68:
         70:cf:00:52:bd:a6:43:c7:fe:e4:cc:64:8f:54:43:ce:58:32:
         7f:f7:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:58:36 2026 by rpki-client