Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/ec6fc01b-2e06-3dae-acef-1ce038321913.roa
File:                     ec6fc01b-2e06-3dae-acef-1ce038321913.roa (raw, json)
Hash identifier:          AL9tRjmDsZFbq/O5+gXfl/L7aEkc229Y0ahpEC+dogY=
Subject key identifier:   DE:AB:F3:43:3F:CC:2C:C3:2A:FC:5A:C8:40:6C:76:52:A0:58:B6:A6
Certificate issuer:       /CN=dda1859b-9b6c-47e8-8de0-488bb1a65637
Certificate serial:       010D0C9F4328584E26A4477C8910856AD6291580
Authority key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/ec6fc01b-2e06-3dae-acef-1ce038321913.roa
Signing time:             Fri 12 Jun 2026 21:00:11 +0000
ROA not before:           Fri 12 Jun 2026 21:00:11 +0000
ROA not after:            Thu 10 Sep 2026 21:00:11 +0000
asID:                     44446
IP address blocks:        2602:f486:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:a4:47:7c:89:10:85:6a:d6:29:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637
        Validity
            Not Before: Jun 12 21:00:11 2026 GMT
            Not After : Sep 10 21:00:11 2026 GMT
        Subject: CN=42e3bc96-eb70-48a1-97f8-03adfdae2806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:9a:75:a0:91:ae:f3:d8:af:c9:04:b7:4a:
                    8b:c3:aa:a1:53:c8:34:5a:fd:9d:63:8f:21:40:a1:
                    f4:b4:27:35:a7:dd:4c:a7:6b:eb:3e:fb:7a:4a:77:
                    90:08:32:99:61:bc:92:c7:14:46:6a:c2:d1:a3:f4:
                    d9:db:6b:5d:ce:68:47:a1:ea:a0:20:82:31:0a:ce:
                    48:e1:64:c6:b0:ea:73:e4:db:75:05:07:ce:6b:f1:
                    ff:f1:11:42:7a:8c:5b:98:65:fe:82:97:6c:f1:c2:
                    fa:12:75:f1:2c:84:6c:fb:da:8e:f1:98:67:11:40:
                    01:7e:d0:ab:62:f9:8e:9f:f1:87:ba:b1:6a:f5:c2:
                    bf:20:77:20:06:84:c0:05:9d:35:9d:cd:b1:04:3e:
                    d7:96:75:8a:87:3a:62:b2:9e:cf:ea:07:c8:58:5a:
                    f4:ba:89:51:f7:c2:ee:bd:23:db:b3:c0:52:55:60:
                    cc:e9:3c:0f:01:01:f8:15:dd:6a:b5:d4:7e:68:d0:
                    3d:39:80:d2:05:cf:6f:25:ea:fc:4f:c6:cf:ae:3d:
                    1f:f1:d5:8f:96:92:af:7f:6a:d8:ed:7f:ff:53:d6:
                    e0:36:cf:eb:a1:a7:24:3e:32:1c:89:44:5e:af:f6:
                    2c:c0:99:e9:d3:c5:ff:3c:d4:35:7f:61:a2:2d:1e:
                    81:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AB:F3:43:3F:CC:2C:C3:2A:FC:5A:C8:40:6C:76:52:A0:58:B6:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/ec6fc01b-2e06-3dae-acef-1ce038321913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f486:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:4c:7c:98:66:06:b1:cb:5f:fb:2f:6a:4f:73:d3:e1:36:06:
         08:e1:4b:66:63:88:16:77:74:82:60:81:6f:be:63:92:28:48:
         da:fd:bd:b3:a8:cd:9e:9b:d0:0c:0a:f3:a5:a7:f4:ce:20:2c:
         3a:f0:6b:b1:45:5a:01:a1:ba:17:99:d0:34:f4:1a:be:42:d7:
         de:85:0d:ec:cc:41:d7:74:03:73:ea:21:c8:7f:98:25:2c:f9:
         55:d8:aa:4d:5c:01:8b:09:b8:1f:18:b1:04:4a:cb:2d:1e:56:
         03:13:6c:f2:7c:6c:09:ee:33:2c:db:63:13:0c:e2:3c:99:86:
         cf:e6:66:91:c8:db:96:62:0f:6d:6b:5d:45:4b:da:ee:c6:ba:
         80:93:4a:ba:1b:f5:91:fb:6e:f5:86:e9:d2:fe:b9:47:57:c5:
         1a:0c:da:d1:45:9e:9d:80:7f:d3:a8:21:77:51:23:a0:b0:0b:
         b4:93:ef:bd:9a:04:93:03:47:5b:35:9a:d9:0c:98:e7:5c:1c:
         65:84:ac:fe:20:8d:e3:01:ad:c0:80:d1:15:66:dd:59:c3:4e:
         dd:ec:36:44:ad:1f:ee:ef:87:47:b3:1a:2d:04:48:b9:e0:66:
         11:b8:20:f2:0c:e6:0a:0e:1d:e2:1b:d6:96:cd:6a:81:16:07:
         c1:7b:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:04:50 2026 by rpki-client