Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3884fc48-6e8f-34d0-b3ae-21c5f13ad540.roa
File:                     3884fc48-6e8f-34d0-b3ae-21c5f13ad540.roa (raw, json)
Hash identifier:          2q//fhuvFMpypjsn7iNai0tFdwObiKZSuvhGYtuTY8w=
Subject key identifier:   BA:06:28:E6:D9:6E:76:2A:B1:BE:0C:EB:85:12:3E:F2:73:92:51:79
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D6EDA8F2D7C542D5509B010C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3884fc48-6e8f-34d0-b3ae-21c5f13ad540.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c99::/48 maxlen: 48
                          2602:ffe4:c9a::/48 maxlen: 48
                          2602:ffe4:c9b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:8f:2d:7c:54:2d:55:09:b0:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=e211fc05-b6a7-4934-ab41-af16fb3e9d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:c0:66:12:bd:9f:1b:50:9d:ba:08:ae:7c:
                    2c:c2:e8:9d:22:17:8c:cf:8e:8a:06:9b:72:e6:d9:
                    a4:4c:d1:2e:92:01:54:d9:eb:d0:c1:66:d1:d7:30:
                    db:21:9f:7e:66:ba:9a:03:7c:c2:d3:57:70:a9:a1:
                    ca:2b:fc:11:17:bf:ed:b8:9d:3c:e6:86:cd:3b:c3:
                    1f:da:63:b6:2d:d8:6d:55:6b:17:b5:70:6e:fe:60:
                    29:01:d1:84:4a:c3:41:ab:96:bc:62:6b:fb:d2:70:
                    64:f4:79:a6:64:7f:38:67:5b:f4:1d:4d:85:1e:78:
                    06:a1:7e:9a:a2:65:89:f3:d1:a1:80:50:96:93:18:
                    21:5d:e9:bb:a4:96:e5:f9:22:ba:5d:53:97:dd:b4:
                    11:6c:63:aa:e2:7e:df:db:c8:d6:72:90:80:68:fa:
                    c6:f1:71:23:7e:a9:57:a8:0c:a2:8c:bf:50:35:15:
                    11:14:47:11:02:3b:31:ab:f4:35:c3:f7:6e:37:3a:
                    ef:a8:68:55:38:3d:76:e2:42:fe:41:38:ce:76:4b:
                    36:cd:a7:76:ad:d9:91:1f:4e:64:fa:fa:c8:f2:f8:
                    d1:3d:9a:e9:2c:0a:b1:9e:51:0d:e1:1d:a1:d5:16:
                    a7:1b:b5:29:4a:95:fc:39:5f:da:7b:34:b6:8e:64:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:06:28:E6:D9:6E:76:2A:B1:BE:0C:EB:85:12:3E:F2:73:92:51:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3884fc48-6e8f-34d0-b3ae-21c5f13ad540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c99::-2602:ffe4:c9b:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:86:5b:a6:0c:29:f3:f2:0b:1e:22:e3:0d:3a:ca:43:bd:
         2e:f0:72:a1:90:e5:99:89:75:c3:b7:42:55:d0:8c:e3:d2:bb:
         42:87:58:23:42:a5:1c:e4:f0:14:34:ea:63:a7:08:ff:0d:c4:
         dc:20:60:78:8d:a0:cb:6b:f3:2c:7b:6d:fb:0c:20:ae:54:d0:
         0e:b9:10:49:73:58:16:56:8e:b4:1f:86:ee:79:ac:5b:bf:c9:
         93:43:71:a6:6e:1b:1c:41:98:6c:aa:b6:a6:df:f9:ae:34:00:
         f3:d1:04:cb:ca:d0:b2:42:51:15:af:96:f3:d9:8e:12:41:ea:
         0d:6e:89:71:06:4a:b2:5f:e4:4e:1b:46:d1:6c:bf:45:75:c8:
         69:50:eb:28:0a:4a:dd:fd:23:ee:ad:d8:fe:c5:be:b0:a5:a9:
         de:2c:b1:9d:43:78:19:dd:85:34:85:ba:13:4c:4b:a7:4a:88:
         3a:45:83:b2:ad:5e:9d:c0:47:89:6f:88:ef:7f:ba:5d:4b:71:
         dd:5f:d4:96:0f:68:6d:13:b3:0b:2c:bf:08:bd:13:17:d9:c8:
         59:a2:90:de:fc:ea:98:47:f2:9f:03:91:9d:e1:8a:1d:9c:11:
         53:5e:dd:6b:cb:ee:aa:cf:8d:99:52:c1:3e:5b:01:79:80:e5:
         4c:d1:b0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:47 2026 by rpki-client