Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/3883250c-fad2-34cd-850f-3a82a5023d92.roa
File:                     3883250c-fad2-34cd-850f-3a82a5023d92.roa (raw, json)
Hash identifier:          ZILpIXWgn8P2xOlgSU5jPmgDJED7pYC9q1Bcy0v0BUw=
Subject key identifier:   4E:8B:85:F0:02:43:8F:3C:06:68:39:B5:B5:B0:89:74:88:8A:F2:97
Certificate issuer:       /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial:       010D0C9F4328584DF90B275F21F2086E88AC2700
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/3883250c-fad2-34cd-850f-3a82a5023d92.roa
Signing time:             Wed 27 May 2026 13:00:16 +0000
ROA not before:           Wed 27 May 2026 13:00:16 +0000
ROA not after:            Tue 25 Aug 2026 13:00:16 +0000
asID:                     16509
IP address blocks:        2602:f8b4:2::/48 maxlen: 48
                          2602:f8b4:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f9:0b:27:5f:21:f2:08:6e:88:ac:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
        Validity
            Not Before: May 27 13:00:16 2026 GMT
            Not After : Aug 25 13:00:16 2026 GMT
        Subject: CN=c6eaa276-4d06-4f82-a61a-e34a73b90304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:b8:ea:93:71:22:67:03:72:d8:e5:77:e3:
                    e2:04:b4:0d:c6:15:fb:d9:cb:a6:1e:a2:78:db:f2:
                    57:52:e0:bf:1c:10:6c:26:e3:2b:3d:e1:22:c6:d0:
                    82:4c:c4:a0:75:2f:f5:26:77:27:7a:be:1c:94:62:
                    da:98:66:63:0e:99:98:e3:f6:7e:87:e3:92:bf:1b:
                    c3:f9:28:e5:65:40:df:b6:5e:20:45:2f:74:6f:0b:
                    94:21:1d:10:69:7c:a6:5a:a0:21:cb:be:7e:c1:6a:
                    65:a0:38:15:4a:1d:33:5c:d9:93:82:5e:3b:47:69:
                    2c:98:05:06:69:9f:fa:71:d7:34:b7:75:8d:92:97:
                    bb:b0:ef:d1:fd:3f:58:db:b9:c9:10:81:cf:22:4d:
                    24:02:b1:97:61:29:fc:c0:ef:8b:57:f5:cf:d4:a4:
                    b9:35:13:77:71:2b:68:eb:f0:bd:c4:8b:ff:5a:e6:
                    15:85:88:19:dc:91:3d:10:aa:b2:e3:ad:78:9e:46:
                    2b:9b:31:40:be:78:d8:66:7b:6d:24:a8:41:66:d0:
                    f1:00:bb:94:a4:89:d4:be:e5:ea:3f:3b:57:36:5a:
                    36:05:22:3a:ac:69:b0:c9:e9:70:ba:d2:46:e0:7d:
                    c0:f6:e4:f6:52:b3:e3:a2:d5:23:ae:28:76:d1:ff:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8B:85:F0:02:43:8F:3C:06:68:39:B5:B5:B0:89:74:88:8A:F2:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/3883250c-fad2-34cd-850f-3a82a5023d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl

            X509v3 Authority Key Identifier:
                keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b4:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b9:2f:bd:28:06:68:4c:41:3d:d2:0d:79:77:4d:ad:ec:a2:
         cd:77:65:d9:d3:6b:37:8d:bd:18:34:4f:f5:70:d2:15:b0:b5:
         c3:8d:a0:50:0b:4a:9e:e2:f5:db:f4:58:8a:22:a9:fa:b7:f6:
         3d:ad:67:4c:5d:dc:3d:11:44:d0:35:ab:22:9a:ac:a1:70:24:
         a5:6d:5b:15:d9:68:c7:b6:df:9e:77:10:6f:bf:21:6b:92:26:
         f8:b5:e7:c3:06:53:6a:b7:75:b1:b7:ac:f8:9c:96:e1:ab:c5:
         76:69:b9:07:89:05:a3:b0:1f:4c:7b:6c:b8:15:d3:e1:a1:b6:
         64:ff:5d:75:4c:f3:8a:97:d7:9b:01:2c:49:73:47:b0:39:f1:
         b4:0b:d2:9a:77:c6:36:c4:e2:c6:ff:d8:11:c2:20:f7:b4:73:
         c8:01:aa:7d:2a:da:90:9a:ec:62:29:bc:b0:d7:f8:c6:32:f6:
         0e:90:d0:6c:48:72:a7:1c:86:da:ca:f8:7a:75:72:ac:08:9f:
         73:53:1e:9f:a7:28:e5:29:d6:a6:5b:95:6a:ab:42:c1:1a:ab:
         ad:e2:a7:64:9c:fa:80:2c:af:6d:09:aa:3b:78:14:55:ca:9e:
         19:b2:93:84:f1:a9:7d:e1:18:1d:e4:4b:3a:1f:17:16:db:58:
         1c:71:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:16:51 2026 by rpki-client