Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/dfadf51a-fd2b-38da-8a69-a33b331f8c45.roa
File:                     dfadf51a-fd2b-38da-8a69-a33b331f8c45.roa (raw, json)
Hash identifier:          J3sQ/OOCSaP+gfx8mvBoA4vZFB4sgXiLowVM7Fk7r1k=
Subject key identifier:   C1:7C:77:F1:A9:EC:C4:EC:72:2F:80:8A:72:94:52:48:95:AE:BD:83
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F4328584CB121D4289C6CCA57A51AFD80
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/dfadf51a-fd2b-38da-8a69-a33b331f8c45.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        2602:fca7:12::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:d4:28:9c:6c:ca:57:a5:1a:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=94680ce6-4573-4e49-a91e-fa1bbe642835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3b:fa:e3:85:12:a6:4e:c0:8f:35:40:7c:fa:
                    05:72:90:94:43:fc:30:7d:f8:50:a4:0c:bd:a3:b7:
                    13:3c:bd:b5:ee:d0:bb:8e:a5:38:c4:de:32:ec:f7:
                    f7:6b:02:84:9f:42:73:21:76:d2:c5:af:5c:66:dd:
                    01:33:78:ee:a9:94:5d:bd:d5:dc:57:68:d2:81:30:
                    10:59:27:2c:e8:ef:2b:9f:ec:11:5c:ba:70:35:85:
                    9c:34:9d:b6:be:f3:e7:92:da:b8:a1:22:ea:f9:98:
                    cf:06:91:79:3b:27:31:f7:04:5d:eb:a7:0f:df:7f:
                    25:17:e9:35:78:40:59:0d:37:6c:ad:41:61:0f:fd:
                    6f:b9:fd:7c:de:50:ca:1e:78:c0:f4:b3:bb:5b:62:
                    57:e1:b8:32:84:46:aa:13:36:e0:cb:6b:07:1f:4d:
                    33:fd:91:ab:a9:4d:3f:2d:30:de:06:6d:40:fe:d9:
                    6a:27:93:98:f3:ac:a1:5c:75:23:78:3a:98:fb:82:
                    c3:b7:94:02:57:5f:9a:7a:71:8e:2f:06:5e:74:4d:
                    42:db:df:fe:94:d0:59:14:0f:a5:7e:88:59:8e:8f:
                    f4:6f:c5:72:6d:c5:08:1a:86:ed:61:82:a6:e0:b9:
                    42:05:4d:4e:50:6c:af:96:ae:dc:b2:a9:8b:14:df:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7C:77:F1:A9:EC:C4:EC:72:2F:80:8A:72:94:52:48:95:AE:BD:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/dfadf51a-fd2b-38da-8a69-a33b331f8c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7:12::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:24:d4:b1:d1:94:46:1a:dc:0b:8c:3a:a5:6b:df:40:b1:4b:
         d6:8b:fb:cf:b0:bc:87:73:04:49:97:43:9c:32:e3:72:51:1f:
         6e:00:73:cf:3a:44:42:ae:d6:e5:95:6c:a4:fd:08:15:91:7c:
         1a:16:e2:45:26:72:aa:61:07:83:19:d9:bf:9c:48:59:e7:95:
         04:68:8a:4c:af:49:d9:83:e6:ed:4a:32:47:d5:19:91:b8:aa:
         c4:fe:7f:ad:17:f3:65:7b:c0:8a:91:d2:a2:15:6d:fb:05:0c:
         be:d2:9f:7f:19:05:b2:61:a6:63:c0:a2:8f:be:11:e9:8d:17:
         2d:b5:1a:7a:90:fd:ea:7a:f6:cd:4c:e8:da:4d:30:65:97:9f:
         4f:3f:ce:aa:41:90:a2:92:23:2f:b8:bb:f2:43:6f:94:67:51:
         05:bd:fb:10:d5:c4:5a:43:68:4f:bd:7c:31:50:b3:c9:ed:51:
         63:e3:65:68:63:48:00:e9:10:64:6e:10:75:ad:f6:93:18:a2:
         91:2e:74:4d:0e:51:2b:b0:2e:b3:7f:b3:31:88:9a:d0:a3:11:
         53:c9:b9:bd:b0:91:e2:f7:8c:02:d6:20:7b:32:ba:0d:b0:2d:
         84:ae:46:f5:39:07:25:36:a4:53:25:5f:31:ea:75:00:50:ac:
         9f:11:ce:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:59 2026 by rpki-client