Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa
File:                     2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa (raw, json)
Hash identifier:          0IkJEaVe5/S1gdXrbPU70rgNiR0V+Wjyq/ZsPpm3wAw=
Subject key identifier:   C0:A6:52:5E:97:11:2B:FB:44:C3:0A:55:F8:31:F6:D1:20:8F:B4:40
Certificate issuer:       /CN=2fd7ea67-f633-4dbd-8774-6209ce64a048
Certificate serial:       010D0C9F4328584E104EEDCC697022317F292200
Authority key identifier: 1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        2602:29e:a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:ed:cc:69:70:22:31:7f:29:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd7ea67-f633-4dbd-8774-6209ce64a048
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=f87ba61a-bd68-4b24-89d4-6c2eaa29c2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:59:c1:e8:6f:ae:b3:08:e6:55:14:93:52:
                    4e:a5:c6:ed:31:03:1d:7b:e8:de:ff:5d:e5:16:1f:
                    20:2d:5c:ac:a0:f2:45:29:7c:21:70:90:95:43:c5:
                    e4:6c:f1:27:9b:36:59:db:46:97:d7:b4:62:1f:e3:
                    72:09:09:2e:e6:48:d4:0e:75:05:e8:b5:74:cc:95:
                    31:5d:20:c8:b7:d7:a0:fd:8f:8e:a9:8c:0f:83:18:
                    f1:b4:14:6d:fc:29:87:58:f5:bb:b1:3b:24:08:0d:
                    4a:2b:28:15:bd:3f:5b:8d:c3:6c:4d:72:d5:e4:78:
                    fa:69:d4:a9:31:a4:2c:62:a6:eb:89:fe:df:11:10:
                    50:63:d6:eb:1d:9e:c3:b4:5a:6e:e2:b3:68:bd:d4:
                    06:09:84:46:9c:9c:d8:d1:76:0b:14:15:57:96:d4:
                    72:f7:d8:2e:40:20:72:0b:c8:8b:c7:1e:3d:d8:0c:
                    cc:8f:e1:f6:4a:8f:05:e5:ce:42:30:42:01:a0:ad:
                    23:ba:e2:70:94:8c:cb:94:04:2a:b6:16:d7:ea:79:
                    a1:66:d3:70:40:ea:2d:36:75:f7:04:65:87:48:0c:
                    7c:2a:6d:cf:37:42:d6:66:3a:0d:7a:d8:3c:09:a8:
                    ed:87:3d:74:8d:f2:97:7f:94:1a:cf:c2:c4:73:e8:
                    68:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A6:52:5E:97:11:2B:FB:44:C3:0A:55:F8:31:F6:D1:20:8F:B4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl

            X509v3 Authority Key Identifier:
                keyid:1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:29e:a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4f:bb:3a:b6:cd:9d:4f:d8:c3:cb:20:ab:b3:76:92:d1:6d:
         06:ed:9a:32:91:0a:19:94:0f:17:ba:7d:9a:7c:15:e0:ad:96:
         e1:83:7a:e5:fe:36:b3:4f:39:05:47:4e:5a:b3:6b:a6:00:0e:
         00:e5:27:dd:12:d0:2f:f9:f1:70:ef:c2:ef:5b:1a:1b:cc:01:
         8b:d8:2d:ce:c2:f8:86:40:17:2a:2a:c2:c5:56:e7:f1:ec:a5:
         02:01:f5:d0:af:8f:94:70:cb:40:c4:15:3e:40:71:8e:66:b9:
         44:a6:34:b4:e2:d7:1b:60:bb:8b:2a:c3:bf:a4:e0:e1:48:e5:
         86:17:93:7b:fb:74:0d:84:bd:28:62:a1:aa:45:b3:3f:8e:d8:
         19:28:9c:c2:a9:3d:00:2c:fe:95:2a:72:e4:4d:c8:90:82:13:
         2c:88:e0:db:45:a9:40:27:de:04:a5:e5:e3:b2:83:2c:e6:82:
         49:43:64:17:1d:14:71:c8:e7:49:4f:d5:c6:0d:50:a1:c4:35:
         f2:29:13:da:64:18:36:4d:d8:a5:6e:66:72:39:d5:35:b8:24:
         dc:66:c2:27:19:10:2a:f7:24:6e:0b:08:0c:74:d4:dd:f2:52:
         74:ce:51:bc:26:16:a0:9a:7c:fe:4c:80:d1:9f:4e:02:58:78:
         43:34:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:37 2026 by rpki-client