Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0eb1b002-9c88-3faf-8166-6c2b5b9a93c9.roa
File:                     0eb1b002-9c88-3faf-8166-6c2b5b9a93c9.roa (raw, json)
Hash identifier:          9E+3nfcpJePJUJIFbrAjVAI3sVC4BoYwXGjn83frOhA=
Subject key identifier:   A7:3A:30:B5:8E:58:26:87:9D:4E:5E:43:DE:73:E1:00:55:01:34:45
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584E18AEEFB58B586B9351DEBC80
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0eb1b002-9c88-3faf-8166-6c2b5b9a93c9.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     12198
IP address blocks:        2602:f919::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ef:b5:8b:58:6b:93:51:de:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=fdce339c-975b-4ecc-953a-f046aa06d899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:da:9d:a3:68:84:00:9f:f1:75:98:dc:82:cc:
                    9e:42:b8:3c:08:25:2c:6c:9c:4f:c4:9f:e6:57:be:
                    58:6f:49:73:fd:12:15:89:a2:d4:95:39:04:5e:a5:
                    dc:75:cc:d0:19:22:9a:0a:41:65:85:cf:3d:e0:ac:
                    27:3b:53:04:ab:c7:4b:4c:d4:0c:cb:bb:db:df:29:
                    b2:be:b3:d9:db:a6:9e:fe:04:6c:c6:0e:d4:9d:f4:
                    24:83:63:d9:9d:d9:fb:36:42:25:7b:b6:82:0c:7a:
                    6d:56:b1:d9:7e:79:a8:a2:08:5c:2e:92:3d:e5:29:
                    09:78:86:6a:35:08:65:43:6a:d0:47:67:d7:b0:54:
                    71:8d:c5:b3:6d:ee:ad:82:58:5e:c7:ea:f4:47:72:
                    51:e5:29:17:d0:bf:bd:43:cb:a5:b5:24:30:9f:99:
                    a9:17:bc:79:08:bb:e4:f7:f0:05:6e:09:4a:dd:6d:
                    92:2f:34:ee:1a:f9:a6:f7:79:22:3b:2b:c0:cc:36:
                    1f:08:1d:ce:99:68:5b:9f:52:2c:b6:1a:70:44:ab:
                    37:c7:71:25:55:b5:f7:ed:7b:fb:fb:9c:ae:1d:34:
                    51:d6:75:46:d0:c3:2c:0f:13:4a:d4:de:ab:eb:2d:
                    0a:e9:d6:03:0f:ca:90:f8:f5:5f:f7:8f:eb:c2:9c:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3A:30:B5:8E:58:26:87:9D:4E:5E:43:DE:73:E1:00:55:01:34:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0eb1b002-9c88-3faf-8166-6c2b5b9a93c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:84:e6:ab:59:0d:bb:af:c5:15:39:a1:11:12:8f:b3:bd:98:
         c8:bd:6f:5c:af:5e:bd:f6:ea:d3:1a:f4:8f:8d:fe:12:64:4b:
         31:61:e1:c0:5b:1c:93:3c:68:04:85:b0:a4:c2:91:c4:d0:5f:
         38:fa:46:f8:15:05:6a:8f:68:7e:c8:6b:bb:34:aa:16:4f:4a:
         20:f6:7b:60:07:5c:c7:90:fa:44:98:f9:57:14:dd:00:24:a6:
         b8:98:21:2f:c6:b8:25:59:7e:fb:0f:0f:89:67:48:60:fd:4a:
         16:63:84:24:d6:3c:b4:d8:81:2c:03:62:13:8f:02:37:72:9f:
         dd:68:32:d4:3b:11:14:f6:11:de:01:fa:15:1d:10:7b:f0:90:
         40:82:f2:15:20:cc:fb:40:e4:7d:00:f2:d7:e5:a8:6c:76:68:
         a8:fe:45:3f:ea:0a:0a:08:26:d4:36:8e:35:46:12:7c:f7:70:
         f6:ff:35:8a:c1:5c:cd:b6:07:d9:29:de:8b:1d:a7:b5:de:6e:
         12:e3:59:ef:17:9a:4f:51:7e:e1:ad:57:2d:d1:c2:8a:c8:bc:
         a8:98:08:97:be:7e:51:1c:a6:0b:aa:e2:9d:c0:28:85:ef:c4:
         bd:f7:d8:0f:0a:25:da:15:4a:12:05:1e:f8:8d:b7:70:98:b2:
         b2:1d:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:05 2026 by rpki-client