Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/e590c5f3-0b99-3bbf-aa95-e708df65de70.roa
File:                     e590c5f3-0b99-3bbf-aa95-e708df65de70.roa (raw, json)
Hash identifier:          A1ciZJ1rtVqXwzCd11ICJXkYfR5bKp0WlQnfbz2msGk=
Subject key identifier:   AE:E3:DD:70:3C:9E:56:50:A8:70:08:40:B6:2A:4F:14:68:32:CF:CF
Certificate issuer:       /CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
Certificate serial:       010D0C9F4328584D571FB4A6C5611F601FEBCD00
Authority key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/e590c5f3-0b99-3bbf-aa95-e708df65de70.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     30671
IP address blocks:        2602:fa45::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b4:a6:c5:61:1f:60:1f:eb:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=60cd61af-e952-491d-a3b1-685e2423bc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:27:c8:f6:27:42:97:89:a9:38:51:62:00:
                    f2:aa:18:b6:dd:4b:07:1f:6a:ce:93:7c:59:c5:23:
                    11:bb:9f:fd:d9:8c:1e:af:36:ea:96:33:3b:f2:cc:
                    38:be:e7:68:a7:7f:13:de:71:9a:e5:28:d0:f0:a1:
                    a0:31:ab:64:b5:e1:48:da:bf:71:40:8f:5b:65:31:
                    47:96:0f:9e:83:0e:bd:c7:90:c7:fa:3a:b8:83:ec:
                    c8:ef:74:97:6c:08:65:cf:43:c4:b3:7b:68:d9:63:
                    2d:c9:7d:1e:ab:0b:38:35:fa:8c:50:43:ae:11:7e:
                    99:ab:cd:8a:93:94:4d:37:c7:85:d2:70:a1:6a:1f:
                    f8:07:1e:ba:2b:08:bf:3a:70:f7:31:c1:ad:b9:9f:
                    d4:2f:c8:52:6c:e8:1c:de:fc:d4:48:86:58:4b:8e:
                    83:fc:a5:db:d4:93:73:8a:a6:dd:16:f7:f9:f1:cc:
                    8a:4c:06:33:f6:bc:7a:9a:a6:50:35:90:5f:b7:9d:
                    78:28:a3:0a:1c:20:69:b0:56:6b:20:d1:a6:22:7b:
                    e2:c0:9e:eb:ee:d6:6f:01:c4:4c:01:82:44:0e:de:
                    91:4e:3e:ab:21:24:5f:39:df:2f:03:6e:fd:ae:ea:
                    f9:f4:20:d8:2c:05:7f:8f:9e:9f:b8:54:1b:8b:9c:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E3:DD:70:3C:9E:56:50:A8:70:08:40:B6:2A:4F:14:68:32:CF:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/e590c5f3-0b99-3bbf-aa95-e708df65de70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa45::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:fd:8b:a5:4d:5f:95:56:b5:9e:51:1a:4f:49:93:42:40:
         f0:d8:f5:16:46:7c:5c:8b:2d:26:dd:c3:6e:7e:40:4b:4e:b5:
         54:80:38:5c:7c:b4:ca:78:ea:5b:bf:2f:5f:ad:17:37:f3:ff:
         bd:cc:4e:e8:83:87:56:2b:f9:ce:00:d1:8d:13:13:a4:85:4c:
         cc:7a:f6:39:47:28:c0:ca:2a:00:19:e4:43:f9:0d:e1:34:88:
         d7:88:b7:1d:52:21:c4:9d:69:8d:cb:12:7c:2b:0a:64:17:b7:
         b2:b8:80:74:f3:4f:88:3d:c8:bc:4e:23:85:fb:a8:3a:45:30:
         89:98:95:ef:e5:ab:62:2c:71:6c:e6:c7:67:4e:2c:5c:a5:0d:
         84:ab:43:78:b0:41:ad:23:9a:f2:5d:26:05:b8:7f:6b:08:3e:
         53:a9:50:a0:f7:40:51:12:ec:a4:b5:b4:08:64:bb:ef:1e:3a:
         64:32:ce:09:ce:02:59:12:1d:1d:e3:aa:83:2f:6c:23:a0:f0:
         26:ba:1c:c0:1b:80:c3:05:ea:07:5e:cd:53:f2:0a:9b:d0:7d:
         3c:2e:ce:f1:0b:0b:16:d9:0e:27:3b:b9:2c:37:85:b2:9c:2a:
         08:e5:39:e0:b9:7e:a3:cc:25:29:cd:2f:69:69:db:7f:c1:03:
         78:3b:4a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:44 2026 by rpki-client