Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/017d582d-8846-32f5-8e73-65f88d0bc85a.roa
File:                     017d582d-8846-32f5-8e73-65f88d0bc85a.roa (raw, json)
Hash identifier:          ++S+gxXTyhl1KqRsi0o1oY7RRWJLir736sxihzo466o=
Subject key identifier:   FF:F2:4B:4E:E5:3C:0F:67:41:76:DA:18:EA:9E:60:0B:3A:71:67:10
Certificate issuer:       /CN=ebbeaf16-b802-46ab-b69d-b00bed66688b
Certificate serial:       010D0C9F4328584D60E5110D0B3AF59F70541510
Authority key identifier: B4:AD:F0:68:70:19:60:3C:35:4E:81:8B:F8:72:66:F8:FD:B6:CB:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/017d582d-8846-32f5-8e73-65f88d0bc85a.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     401703
IP address blocks:        2602:81b:9000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/ebbeaf16-b802-46ab-b69d-b00bed66688b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/ebbeaf16-b802-46ab-b69d-b00bed66688b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:11:0d:0b:3a:f5:9f:70:54:15:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbeaf16-b802-46ab-b69d-b00bed66688b
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=20089c8c-f213-400b-82f7-d8e83edb51e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b6:04:0f:05:21:ff:8b:c6:23:8b:e2:b3:a8:
                    eb:15:c8:d7:94:12:ba:93:a7:9e:f6:3c:5b:49:eb:
                    88:77:a8:d2:ca:bf:0a:f1:6a:4d:94:89:7c:b4:a0:
                    f1:d7:03:de:bb:6b:ff:b3:8c:e1:a6:b8:99:7f:da:
                    a9:70:b5:22:8d:7d:92:b1:75:8c:2b:f1:d9:61:c4:
                    9b:8f:5c:cc:18:c3:c4:07:a6:54:36:86:f8:ed:40:
                    de:7d:1f:48:98:05:d6:07:fc:91:37:c0:c4:df:9a:
                    5a:18:65:ea:02:5d:5f:1d:29:9d:6c:10:94:86:46:
                    9c:2f:3f:5b:fa:73:e8:14:f4:8b:96:3b:d8:f3:cf:
                    ca:6c:14:3e:f0:0f:03:7c:43:6b:62:9c:88:2b:1f:
                    72:8b:58:0c:83:85:67:d7:89:b5:1b:16:c5:32:9c:
                    59:b2:c3:21:b6:0d:9a:ef:05:c0:7c:20:31:20:50:
                    42:58:58:9d:7b:45:05:91:cf:bc:3f:cb:dd:a7:43:
                    25:24:4a:49:7c:6f:1a:b2:34:35:5d:0c:0c:16:3b:
                    28:f4:f9:f5:39:51:aa:7c:6f:f5:5b:99:55:e0:cb:
                    3f:41:15:36:52:9e:fe:d3:d3:3d:7d:1e:1e:1f:e2:
                    61:e7:29:35:44:b8:54:bc:11:76:e1:49:b4:5d:02:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F2:4B:4E:E5:3C:0F:67:41:76:DA:18:EA:9E:60:0B:3A:71:67:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/017d582d-8846-32f5-8e73-65f88d0bc85a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/ebbeaf16-b802-46ab-b69d-b00bed66688b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:AD:F0:68:70:19:60:3C:35:4E:81:8B:F8:72:66:F8:FD:B6:CB:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81b:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:22:bb:73:41:06:41:30:0c:a9:07:33:1e:55:4f:70:f9:6d:
         ec:5f:a7:fa:91:90:45:c1:46:f3:57:62:8a:00:54:bc:98:ed:
         8d:67:f0:de:94:3c:98:4e:03:5e:84:7d:97:a5:5a:06:82:35:
         03:ca:49:64:a8:ed:9a:5d:fe:b5:3e:59:69:43:95:23:a3:c0:
         da:cd:7e:09:9d:93:05:17:18:66:1c:4e:a6:ec:a0:b0:9e:49:
         92:3a:e8:76:72:ae:e0:c2:8c:6e:55:02:11:f6:18:04:0a:f5:
         80:65:bd:4b:f6:07:0e:38:01:f7:8b:42:c1:3f:aa:14:de:cd:
         55:a1:95:14:65:a7:0b:3a:4c:5a:9f:86:5e:e3:af:2f:76:a8:
         06:9c:66:7f:47:ed:ad:76:50:de:4f:ae:ea:7b:bb:2b:66:bc:
         8a:dd:6a:35:61:82:b7:fc:83:3f:2c:1e:e3:6f:b4:31:3e:9a:
         0b:4c:75:c8:07:a9:66:21:21:e9:e7:35:73:12:35:d4:59:10:
         b1:3f:41:fa:d6:12:35:ff:bf:61:02:4b:c0:e2:8f:e2:8f:85:
         54:45:c9:10:7e:18:16:59:e6:ab:dd:c3:87:81:31:75:93:9e:
         d3:ed:e2:60:e4:30:5e:11:b8:4f:92:a0:15:d2:d6:43:10:60:
         cf:26:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:16:18 2026 by rpki-client