Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/5f6635f7-f2fc-3c2d-9e2c-a5174afa8df2.roa
File:                     5f6635f7-f2fc-3c2d-9e2c-a5174afa8df2.roa (raw, json)
Hash identifier:          /DOACt0KXhz80UHnbHLuX88iRZHwgT54rHM+fop2+S0=
Subject key identifier:   C3:FD:9F:36:B9:86:4A:6D:4F:D8:1C:DB:23:E9:27:7D:D4:5C:E4:FA
Certificate issuer:       /CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
Certificate serial:       010D0C9F4328584E253F0C377D50C8959A45959C
Authority key identifier: 84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/5f6635f7-f2fc-3c2d-9e2c-a5174afa8df2.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     23061
IP address blocks:        2602:fa0a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:0c:37:7d:50:c8:95:9a:45:95:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=0ab50563-fc4a-45eb-a464-1180e5705e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:c8:0d:50:23:22:93:26:96:2c:4d:e1:81:
                    cd:9d:0b:c8:ca:26:e4:7c:c5:2e:83:a7:97:43:0f:
                    1a:b8:72:a9:c3:70:a8:f6:2b:5f:71:b6:25:fe:f7:
                    b8:59:99:b6:f4:8b:e8:56:01:88:b3:2e:61:2e:c8:
                    e1:28:69:be:47:c0:98:cf:8f:d7:69:56:32:9e:3e:
                    eb:27:1d:01:32:9b:80:3b:8d:c8:5b:80:27:2b:93:
                    aa:bf:95:ed:99:0e:e2:7b:1d:96:67:6e:9b:3d:89:
                    11:80:f4:e8:bc:45:c9:e3:bc:d5:56:77:13:d2:25:
                    5c:0d:a4:63:11:cd:26:f7:a5:e0:4a:3c:e8:e5:9c:
                    fc:1d:7b:1f:d2:f5:73:42:1d:49:03:b7:b8:66:0d:
                    d2:3f:52:20:b4:e9:f4:3b:cd:5f:cb:76:2f:01:e1:
                    c9:ea:e7:da:84:28:1e:6a:a8:ea:0b:5d:9b:c3:8b:
                    aa:7d:c4:9b:e8:1e:28:26:7a:b3:92:30:fb:9d:c2:
                    f5:8d:aa:87:dc:dc:82:c1:94:83:87:af:e7:a9:f1:
                    00:da:f6:2c:21:4d:84:ab:bb:2e:bc:28:78:22:28:
                    53:f9:b3:52:5a:60:55:d3:11:5a:2b:a2:89:5a:4c:
                    49:b8:15:c5:bc:0b:d1:58:c2:20:1e:5a:e7:a3:94:
                    a7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FD:9F:36:B9:86:4A:6D:4F:D8:1C:DB:23:E9:27:7D:D4:5C:E4:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/5f6635f7-f2fc-3c2d-9e2c-a5174afa8df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl

            X509v3 Authority Key Identifier:
                keyid:84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa0a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:37:9c:6e:bb:7b:42:3a:2c:b6:99:ce:00:c8:e6:7a:84:5c:
         36:83:1b:04:ce:33:99:3f:c7:01:6d:57:d8:ba:85:22:b4:70:
         7b:2b:89:fd:fd:4c:88:4e:a3:73:18:08:a8:6b:e3:ca:6f:1d:
         8c:a4:b2:b5:4a:f5:c9:01:48:97:ff:1e:f6:2d:e2:41:09:87:
         98:ab:47:c7:49:c7:f7:47:fc:bb:39:c8:f3:2e:c2:a3:c3:c6:
         6f:60:7e:19:84:5b:80:5a:42:e8:24:6c:17:44:e6:63:75:c3:
         69:38:97:93:b4:7f:0a:a5:71:5d:a4:47:f9:08:11:8b:b1:bd:
         0a:20:d9:6c:9f:54:de:e1:79:eb:7b:da:76:13:e5:01:68:db:
         35:6f:ca:ff:b5:66:66:47:6f:03:a0:18:a0:5a:0c:de:ba:69:
         c3:ed:fc:c1:0a:9c:70:07:d1:b9:0e:1e:f9:28:1d:e9:6b:da:
         13:36:09:04:f7:a2:59:b5:eb:41:b7:d0:71:45:2a:8d:5e:71:
         28:a3:e9:4b:be:7b:da:bc:65:6f:46:23:a9:af:7c:7c:72:13:
         46:4e:1a:6f:1a:d3:5f:97:6d:75:58:37:58:56:1e:06:9a:9a:
         18:62:db:0f:74:44:4b:45:c6:e4:b5:e5:6c:d2:48:30:c6:c2:
         a7:68:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:38:11 2026 by rpki-client