Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
File:                     52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa (raw, json)
Hash identifier:          p18OSvIiPW6fPfi7I5Z0p6R0h0VhLEwz4ySgn4R9aZ8=
Subject key identifier:   01:D8:63:B6:4A:F8:D6:F3:26:70:E1:8C:C6:E9:7A:9E:43:3F:7B:6B
Certificate issuer:       /CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
Certificate serial:       010D0C9F4328584CC34742B79518F89DDB181AC0
Authority key identifier: 23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     26801
IP address blocks:        2602:fddd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:42:b7:95:18:f8:9d:db:18:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=13cf3474-3347-4310-8845-a76907131c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:cb:f8:ef:2f:a2:93:7e:d8:a8:43:7f:23:
                    ab:de:64:0b:05:f1:5a:5e:b6:ab:5a:78:9b:8b:5b:
                    a0:be:7e:22:92:3c:df:ef:53:37:e1:37:b1:87:f1:
                    b3:d5:39:e2:81:db:7c:62:12:84:97:65:86:9c:43:
                    90:a0:a1:de:21:4c:f6:07:5e:f6:8e:0a:1c:a5:29:
                    7c:6f:c3:cb:c8:c9:f5:0e:30:4c:69:0f:99:29:2e:
                    f2:51:6c:8b:77:1c:0d:9f:f5:24:2e:66:6c:47:12:
                    f7:44:78:09:5f:2b:97:b5:4a:ee:f9:53:64:b5:8e:
                    bb:5f:88:ab:36:3f:4e:ec:61:0a:2e:2c:93:47:50:
                    92:3c:69:b2:f2:77:7d:92:58:2a:71:2a:f7:fb:f6:
                    ef:95:3e:94:87:63:70:c7:b7:aa:dd:c3:dc:98:33:
                    b0:91:00:aa:40:6b:9d:a4:2f:65:39:8d:8e:00:3c:
                    d7:3a:5d:fa:5d:41:76:b8:a2:01:5c:cd:fa:ec:f6:
                    9d:30:18:6f:a9:43:18:49:63:52:85:c9:f0:2d:42:
                    8c:aa:eb:a7:70:f3:bf:e9:fc:69:54:25:82:d3:1e:
                    4f:29:f4:be:b5:d8:fc:e8:a7:d8:e5:2d:6e:49:c7:
                    d6:25:7c:fa:ba:02:a7:a3:9a:73:a0:a1:d9:b4:16:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D8:63:B6:4A:F8:D6:F3:26:70:E1:8C:C6:E9:7A:9E:43:3F:7B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl

            X509v3 Authority Key Identifier:
                keyid:23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fddd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3a:1b:1a:25:5c:43:55:5c:dd:ac:20:a0:08:24:9f:af:15:
         b4:d4:26:71:e9:6c:19:ee:19:2e:75:30:4a:de:40:5f:3b:5a:
         f0:17:4b:22:50:c1:38:e1:d0:c4:12:e5:25:1c:6b:fc:15:ef:
         cc:fa:b5:49:be:8d:bc:86:6e:2a:99:ea:45:d9:25:1c:cb:7e:
         5a:46:1d:2c:5f:ca:ca:6b:a4:df:46:2b:9d:4d:2d:92:f0:16:
         72:60:be:6d:1d:c7:2c:9a:8d:3b:79:53:fe:45:7f:47:44:30:
         71:28:89:58:16:62:ab:ca:73:47:38:fb:73:a2:c0:93:d2:a9:
         8e:55:d2:e7:37:75:6d:c9:6f:e5:cf:59:1f:83:50:ae:69:6d:
         f2:27:e2:84:b1:54:57:ae:16:6c:fd:0f:a6:cd:12:9e:20:8a:
         08:5d:f2:af:e1:21:88:4b:f3:63:0b:7c:ee:23:84:45:ee:9b:
         ae:01:77:25:2b:87:98:0c:c6:ca:a2:24:7c:01:46:72:e1:d7:
         4e:3c:2c:95:ed:7c:c2:b0:4e:fe:9c:7c:b1:4d:a8:0f:22:98:
         a2:20:d3:c2:59:d2:7e:b6:97:7f:90:49:48:34:8e:e4:18:36:
         a4:bd:e4:b5:26:57:6b:0c:f7:c8:27:a9:30:fe:28:64:e6:8e:
         6b:a2:cd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:58 2026 by rpki-client