Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/8e995849-0009-3de2-9b32-fedf49d93743.roa
File:                     8e995849-0009-3de2-9b32-fedf49d93743.roa (raw, json)
Hash identifier:          CEu2QyIug3bHWtEIpXfuobfVV3AjeuD4rvS+WdabuOQ=
Subject key identifier:   96:AD:C1:BC:88:2F:16:99:EB:4F:11:7D:1E:3D:50:73:63:B8:4E:93
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584D52434A04295A93DDF9FD8A80
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/8e995849-0009-3de2-9b32-fedf49d93743.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     27010
IP address blocks:        2602:f9f6:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:4a:04:29:5a:93:dd:f9:fd:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=a83449b8-da40-4c47-af35-76d15a6bcc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ed:f2:2b:b1:8c:76:d0:18:57:62:1f:ae:27:
                    dd:a2:c9:dd:49:53:b5:8c:4b:0d:6b:c5:61:1f:54:
                    75:27:5f:c7:62:d6:d2:f3:94:ec:ae:47:eb:16:39:
                    a7:1d:d1:ab:ae:58:1f:15:0e:11:df:93:cd:79:da:
                    08:7d:d3:0d:cb:49:01:18:96:3c:fd:1e:6a:fa:90:
                    70:37:c5:8b:62:54:7d:99:ac:da:a9:f3:ca:8a:bb:
                    1f:e6:b1:62:2d:91:75:67:02:6f:73:97:6e:90:01:
                    b7:b9:b9:be:73:c4:d9:68:2d:14:f1:28:a9:89:c2:
                    3d:b8:91:c4:7c:49:86:81:0e:0e:9b:7f:dc:57:17:
                    47:7e:c5:d2:c4:72:a0:d4:82:d2:c7:9e:1f:d8:a6:
                    0d:fd:e6:5e:d1:7b:75:9c:1e:04:2d:3e:47:51:6f:
                    34:8f:1d:a0:d5:2a:45:14:c0:7f:d1:35:b9:74:16:
                    aa:f0:eb:ae:cc:e8:d4:55:47:70:7d:5f:1f:c1:ce:
                    87:82:c3:7e:e9:c7:81:69:00:db:be:18:8b:3e:f5:
                    72:ad:25:6a:c2:20:3d:a3:b9:ac:d4:da:01:d3:c5:
                    74:92:f3:14:36:7c:98:15:7a:d3:a3:c8:61:a9:c2:
                    fc:a6:01:3b:0a:f4:84:cb:85:22:6b:41:c5:01:83:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AD:C1:BC:88:2F:16:99:EB:4F:11:7D:1E:3D:50:73:63:B8:4E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/8e995849-0009-3de2-9b32-fedf49d93743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:18:27:59:34:d4:d6:f1:d6:9b:b0:0c:cf:61:81:96:87:61:
         5c:ae:1a:3c:4b:64:e8:64:d7:58:10:10:34:9f:6a:54:7f:4e:
         9f:58:e8:63:5f:11:7e:ca:95:75:d7:5c:08:f5:a3:b1:de:af:
         37:85:b1:33:c0:ef:88:f9:60:23:6b:16:2b:1b:98:97:3b:aa:
         16:9b:0b:6f:6d:8d:34:d5:eb:04:7e:43:7c:63:2e:a7:83:f1:
         ec:7b:c7:04:91:60:f7:1b:eb:52:65:16:b7:85:d2:4a:f9:da:
         95:18:cd:36:4a:7c:a5:ff:45:79:df:3a:7f:a0:89:91:55:ea:
         66:80:d6:f1:d4:39:48:8a:fb:6a:2d:82:02:a6:dc:d6:19:c8:
         a6:d3:d5:81:6d:69:80:3c:62:54:21:5d:63:d5:da:12:9b:58:
         92:bc:cc:52:c8:de:77:5f:69:e1:f7:dd:92:b9:f4:79:7a:49:
         49:d4:bf:c4:eb:e7:7a:a5:9f:5e:56:44:62:1d:5b:b4:8b:ea:
         82:4f:d9:c3:1f:13:25:b3:6c:b6:5a:f3:7b:60:a7:f6:ee:f3:
         ae:53:38:a5:86:9c:ca:ee:85:fd:49:48:7d:80:c1:f2:d4:6c:
         d5:8b:7a:c8:88:51:f5:bb:9b:36:cc:89:c5:67:c4:05:bf:fd:
         f5:3e:e7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:08 2026 by rpki-client