Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fa689dcc-4227-3ca9-af22-f37ac322cdf9.roa
File:                     fa689dcc-4227-3ca9-af22-f37ac322cdf9.roa (raw, json)
Hash identifier:          id7QiFByH2Tpv7uzQSNWIwT3mEFOVRd+o0ptYPoAHeM=
Subject key identifier:   7A:79:91:81:FF:19:F5:2B:85:78:9E:B7:8D:7C:F0:DA:1F:2C:F9:60
Certificate issuer:       /CN=fd2421d2-a693-440e-a9e0-ece2b7cd2b39
Certificate serial:       010D0C9F4328584D5F7FB36FB6D03A8A6BCD8880
Authority key identifier: 28:CB:CF:8C:5D:59:FF:0D:87:AD:65:20:6D:F4:11:B9:8F:AB:B3:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fa689dcc-4227-3ca9-af22-f37ac322cdf9.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     395260
IP address blocks:        2606:9bc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:b3:6f:b6:d0:3a:8a:6b:cd:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2421d2-a693-440e-a9e0-ece2b7cd2b39
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=f0dd1303-d7a5-491d-aa15-4fad35b1404e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6b:db:53:54:1a:b7:94:18:c1:e3:d0:a2:e8:
                    1b:4a:a0:6a:94:93:12:f3:eb:a7:21:65:b1:d8:b3:
                    5d:0e:4b:22:9e:a4:04:e4:70:a0:d3:e1:01:dc:0c:
                    7f:b7:16:72:b0:21:d2:38:f6:ea:1b:2d:10:b0:dd:
                    0b:7f:92:21:f9:bc:b4:76:b4:3b:ad:fb:61:da:03:
                    b1:45:bc:41:70:88:6c:cc:40:f3:b4:5c:0e:62:c9:
                    8b:25:6d:12:39:83:b0:37:c5:24:fe:87:0a:42:9a:
                    55:18:da:c3:d1:0d:7d:1c:df:ce:f7:e8:21:1f:a5:
                    6f:92:80:27:48:5b:b6:c2:fc:63:e7:93:75:13:1c:
                    51:c2:19:19:c5:40:16:07:4c:12:5f:c0:e6:87:3f:
                    1c:1d:3d:cb:0d:5a:21:1c:d5:31:07:00:23:46:f7:
                    6e:20:65:69:96:26:3d:7d:f5:c1:15:22:ac:bc:93:
                    b2:23:c4:8b:a9:87:b8:2d:73:9a:db:00:a8:5e:9a:
                    b2:52:f8:bf:cf:e0:18:42:65:c3:91:3d:c4:12:4a:
                    55:a6:41:71:c3:e8:58:25:7f:0a:f7:64:fc:b6:8a:
                    0e:b8:1a:5b:31:a8:62:c1:01:c7:73:7f:c8:02:cf:
                    d9:cd:0c:f5:1f:29:de:b7:4e:bb:71:08:a1:32:84:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:79:91:81:FF:19:F5:2B:85:78:9E:B7:8D:7C:F0:DA:1F:2C:F9:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fa689dcc-4227-3ca9-af22-f37ac322cdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.crl

            X509v3 Authority Key Identifier:
                keyid:28:CB:CF:8C:5D:59:FF:0D:87:AD:65:20:6D:F4:11:B9:8F:AB:B3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:c8:c2:0b:54:3a:03:e0:46:11:57:d2:56:e7:6c:89:a9:
         be:4b:f3:ae:bc:1a:60:65:b2:e7:aa:e4:7a:15:a0:70:66:fa:
         ad:e6:d3:4e:38:26:7f:0b:ff:28:38:9a:26:a4:f4:fd:ac:be:
         a3:ae:f6:2d:03:84:b7:e3:a8:10:cd:70:99:69:6c:56:b2:04:
         b3:21:3e:9c:3a:b3:c4:a1:e9:f6:dd:19:31:79:86:07:47:dd:
         b0:7d:ca:27:10:28:9e:25:ce:ea:36:69:e8:95:50:14:db:14:
         73:f3:02:81:4f:eb:e4:49:4e:27:42:cc:37:09:cd:56:43:92:
         4b:8e:dd:d8:e0:53:7c:55:4a:64:c6:22:8c:a1:cb:f6:b1:70:
         0a:a8:43:20:72:59:68:39:73:cb:a0:d6:77:f5:19:ae:b8:82:
         d1:0a:13:7c:91:98:c2:2f:25:bb:d4:36:ac:73:a7:78:51:c9:
         e6:6a:53:54:ba:57:66:c7:cd:1d:0e:46:f4:0d:24:d5:41:40:
         12:e2:20:d1:1b:03:db:bf:87:51:9e:63:7e:65:76:f8:11:95:
         0f:a1:92:64:59:f4:9e:a9:11:81:c5:22:b7:df:ac:6a:99:22:
         94:fd:67:df:83:ea:25:43:63:5f:6c:13:36:6f:f9:28:f2:0a:
         c4:60:c5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:56 2026 by rpki-client