Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa
File:                     d62afe2a-7630-31f0-9e51-d97ded7730a9.roa (raw, json)
Hash identifier:          DD2PhzksMLb2lqdanCiPBRUh+aaa7qYui+zfcbSx4PA=
Subject key identifier:   2E:8E:74:F5:30:4B:38:C0:DF:D7:5B:CB:8D:D8:FF:74:42:11:6B:35
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584D09126B0FC06F76BAB1390B00
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     395567
IP address blocks:        2602:fead::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:6b:0f:c0:6f:76:ba:b1:39:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=9d1fc63f-6fea-447f-ac13-7fee4584fb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:95:5f:8b:1b:bd:e2:4b:23:11:94:b8:62:
                    2f:6a:44:d3:5c:a3:d0:3c:2f:f3:bf:17:19:5a:0f:
                    64:58:fd:30:54:55:08:a4:a0:8f:54:67:33:78:2f:
                    43:04:16:42:f9:2b:74:20:5b:21:7f:f0:9b:9e:2b:
                    30:59:e0:69:8f:f5:4e:36:88:f1:f3:cd:b4:17:bb:
                    c6:46:68:f5:c5:79:de:c9:21:03:13:bb:b2:cb:05:
                    c5:53:80:bb:3d:e0:eb:07:92:85:25:d8:50:ce:46:
                    9e:07:61:19:75:dd:f7:ab:5a:fc:ce:68:04:fe:2f:
                    56:26:7a:1d:43:a6:66:14:23:75:39:f7:51:66:45:
                    bb:4d:94:f3:18:7f:7b:95:04:59:c8:6a:b7:50:51:
                    40:5a:01:7f:cc:36:57:b4:57:3b:9c:22:87:5f:8d:
                    40:5d:08:f8:d9:e7:ea:ac:49:28:3c:f3:2d:b5:29:
                    27:c0:20:2f:f7:a8:87:38:ee:99:b4:b3:ae:d3:04:
                    98:01:1e:1f:82:01:0b:d5:76:e1:07:55:93:15:27:
                    e7:0a:50:1d:1b:d8:ef:4e:7b:bd:92:7e:d0:23:bf:
                    1e:63:09:bb:81:24:d5:37:5b:3b:bf:33:25:99:ef:
                    10:6c:99:42:d8:f1:af:65:ae:d6:8f:c2:57:c2:1f:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8E:74:F5:30:4B:38:C0:DF:D7:5B:CB:8D:D8:FF:74:42:11:6B:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fead::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8d:11:02:c4:f5:c9:c7:a6:6e:b4:b0:a8:ef:d5:d2:a8:be:
         65:d0:2e:62:7e:95:5f:b8:b0:62:56:36:7b:9b:52:2f:a5:e0:
         d1:32:c1:02:a2:e7:13:f4:02:6f:2d:81:10:ea:ff:a6:04:89:
         7f:21:ca:1a:a3:9e:a7:f5:f9:8d:8e:6d:ec:ad:69:b2:22:ec:
         22:18:1a:43:c1:d2:10:7a:3c:b2:7b:67:ce:35:6c:1a:2e:e1:
         7e:dc:63:28:73:c4:3d:0d:4d:76:00:c4:06:31:5d:4b:e0:7d:
         b5:6e:3e:0d:96:d3:37:31:3c:bd:dd:90:3d:4e:20:f6:d8:ef:
         ed:53:8a:d7:07:77:a3:ff:e0:d4:71:39:35:32:bf:bf:7f:5f:
         b8:f2:ff:f3:d6:a9:05:e9:52:c5:20:1e:55:9d:fc:2e:7d:60:
         5d:22:ea:51:a1:05:fa:6a:59:11:67:58:b7:4c:82:81:4f:c3:
         7c:18:0f:54:33:8b:56:0e:a6:31:e0:27:2f:f1:6b:4e:65:b8:
         c0:ca:cd:1e:7b:48:28:53:d4:32:80:f5:c6:89:ed:bb:f7:e6:
         8f:a0:9c:4e:ed:ca:1e:5c:0c:36:9d:89:16:ba:f2:11:ec:a0:
         c4:0f:31:dc:9c:11:5c:01:7b:e4:ba:0f:31:dd:26:9d:67:8a:
         a6:02:38:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:24 2026 by rpki-client