Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/eb2b6b77-071b-3f3f-8a72-b50512321be8.roa
File:                     eb2b6b77-071b-3f3f-8a72-b50512321be8.roa (raw, json)
Hash identifier:          ZEc1evQ0Q6A/dS7SIdYNpnyQ6CwHyGtbpnYXAq1a8aw=
Subject key identifier:   E3:38:84:BA:3A:98:29:02:BB:E9:9C:85:D0:23:DF:D5:5C:BA:A9:47
Certificate issuer:       /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Certificate serial:       010D0C9F4328584E104F28D8E86A96796E8BF680
Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/eb2b6b77-071b-3f3f-8a72-b50512321be8.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     63101
IP address blocks:        2602:f824:2::/48 maxlen: 48
                          2602:f824:3::/48 maxlen: 48
                          2602:f824:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:28:d8:e8:6a:96:79:6e:8b:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=6d33ffad-d26e-45e5-8e1b-fc0151d6471e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:15:a3:22:67:8a:8e:e6:c2:ff:f4:b6:c9:a2:
                    6f:3b:1b:6e:c9:41:44:be:95:2c:9a:58:f8:35:7f:
                    d4:ea:96:1f:85:01:f2:64:3a:44:44:a7:2c:fb:2a:
                    c7:de:60:46:60:06:52:02:2b:bf:d5:2d:bb:35:3a:
                    da:44:04:fd:a4:6a:8f:30:17:e1:03:d8:e2:de:ed:
                    09:67:fc:32:46:06:28:45:bb:04:e3:ee:3c:ac:9a:
                    d1:34:1b:77:93:e7:6e:64:1a:24:1a:0c:83:03:25:
                    80:20:4c:f4:ea:54:40:ae:85:d4:12:95:11:8d:94:
                    8c:56:f3:23:63:3b:f3:5b:c0:bb:dc:e1:4f:58:83:
                    eb:23:cb:7c:69:ed:8e:68:f3:62:52:32:de:b7:ae:
                    28:99:94:47:ff:41:39:94:26:16:04:b2:0f:68:8d:
                    10:23:4e:d7:25:9d:ca:16:bf:93:e9:e0:81:f8:6c:
                    b6:05:eb:99:89:de:d0:1d:c3:d5:31:e1:20:e1:a2:
                    8d:7a:55:dd:f6:27:06:79:f2:1f:75:28:73:4e:9c:
                    e9:b9:d8:45:6b:d7:a4:3e:25:dc:f6:3e:b2:aa:79:
                    e2:01:fa:61:72:d3:ea:ee:be:84:76:91:29:cb:b2:
                    e0:d2:7e:53:24:ae:d8:b7:d3:39:c3:d3:77:4f:5b:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:38:84:BA:3A:98:29:02:BB:E9:9C:85:D0:23:DF:D5:5C:BA:A9:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/eb2b6b77-071b-3f3f-8a72-b50512321be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl

            X509v3 Authority Key Identifier:
                keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f824:2::-2602:f824:4:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:2a:62:d3:37:e1:4e:3b:ac:50:36:eb:80:1b:b6:c1:b5:
         f4:61:e6:af:34:a1:04:e9:f8:40:ec:a4:2d:08:f9:4c:47:b0:
         6f:d7:10:02:ee:fb:4d:b5:92:10:b1:ee:33:bb:5b:2e:b2:81:
         97:6d:7b:ba:ea:b9:f8:40:ad:31:17:d6:18:c5:5e:08:72:17:
         75:9e:da:c9:0f:39:c7:93:94:2f:15:8c:dd:1a:4b:73:17:73:
         1e:3c:91:70:e3:62:9b:d9:be:ed:2e:8d:b4:22:f4:12:26:5d:
         fb:49:02:b0:c4:ef:dd:48:97:ca:74:ab:70:9d:18:6f:94:0a:
         4d:b3:9d:87:58:04:ee:c6:6b:e9:65:1d:cc:92:12:5a:51:14:
         2c:ac:fb:28:5c:34:d4:da:6c:fa:6f:87:64:df:18:22:0e:2d:
         86:67:81:35:ab:bd:1d:95:87:cc:0a:1b:7b:18:98:8f:85:89:
         bd:48:79:e4:a1:2a:36:f9:b5:52:06:8f:71:64:6e:65:e3:55:
         d9:87:94:20:59:af:f8:a9:b6:b3:fc:bb:30:3d:b3:5a:d5:60:
         46:36:32:ab:b4:cb:16:4b:bf:3e:c6:5d:bc:d1:e2:9e:65:9c:
         63:72:cc:48:61:77:24:61:a2:ee:14:82:e1:cb:a5:4b:90:ae:
         e4:69:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:53 2026 by rpki-client