Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa
File:                     48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa (raw, json)
Hash identifier:          GJV5GY9Rc2TZHlEC0qYNnKEWxjnAYHLdVywWavDFBNk=
Subject key identifier:   5E:41:66:9A:5A:42:F0:D8:22:44:A6:C2:80:D2:CA:5F:F8:24:43:84
Certificate issuer:       /CN=38d6b993-a8bd-44a2-8e04-89483e698a23
Certificate serial:       010D0C9F4328584E15E44BB0D4B562CBBEBA1D00
Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     57406
IP address blocks:        2602:29c::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:4b:b0:d4:b5:62:cb:be:ba:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=1d0bc3c9-8335-4c92-9c5b-22a4b1862907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:78:47:38:98:f4:ea:f8:ad:79:eb:3f:68:
                    82:6d:a0:1f:3b:96:e7:ae:ee:5e:d9:97:60:75:23:
                    b9:3c:28:24:86:4b:d6:7f:5d:85:77:be:67:1d:b3:
                    ca:8e:e1:a8:28:b4:c4:d5:c2:f6:12:c0:5f:e1:53:
                    1a:6a:8b:4c:bc:7d:a1:34:29:44:04:9b:af:01:d4:
                    de:71:2c:25:1c:c2:c3:83:54:fb:13:1c:f0:ff:71:
                    8c:82:44:0b:61:e2:cc:a6:e5:96:df:7b:19:97:9d:
                    b5:53:d2:7a:7f:5b:14:4b:da:6f:a8:23:25:6e:38:
                    36:ec:cd:50:56:94:f4:ef:6c:5b:ed:3c:16:b8:a9:
                    70:e4:73:79:1e:60:8c:3d:67:9b:1b:db:48:c3:61:
                    59:ca:91:2a:36:9c:d8:69:18:b8:38:13:6e:58:79:
                    19:15:32:34:d0:a8:7d:0f:bd:b3:12:3a:58:d0:57:
                    ab:86:7c:56:8a:a9:01:62:a6:37:09:94:0d:62:ea:
                    a4:ad:3a:c9:fd:48:9b:e7:75:13:a2:16:da:30:1e:
                    24:28:9e:d6:eb:07:c4:35:c4:a4:2a:4a:2b:15:ec:
                    85:ce:b0:1c:d8:c3:e1:da:55:d8:e6:7b:b2:5d:0f:
                    b5:79:b9:44:6b:6e:96:a1:05:bf:f4:90:19:b7:37:
                    c4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:41:66:9A:5A:42:F0:D8:22:44:A6:C2:80:D2:CA:5F:F8:24:43:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl

            X509v3 Authority Key Identifier:
                keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:29c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:97:97:9e:fd:a1:3b:b0:65:4d:81:ca:d9:8f:b3:f3:2d:e8:
         c6:6e:31:46:e3:ab:94:9b:69:61:ce:ca:94:0a:2d:89:49:47:
         a8:dc:0e:c9:fe:e0:3b:35:5f:42:ff:c4:35:40:2d:23:65:10:
         39:6e:63:d3:09:b8:11:77:f1:a7:54:32:8d:8d:d4:6e:b1:35:
         b6:f3:a5:ca:4c:47:a6:c5:2c:37:23:cd:9f:c2:e6:93:82:12:
         5e:b0:63:cb:d7:b3:76:ea:73:53:07:63:26:c5:82:69:ff:53:
         10:21:9e:b8:c9:2d:a5:cf:56:ab:c3:24:67:71:24:c2:7a:df:
         96:46:f7:08:ac:e9:aa:cd:7d:f9:ad:ab:90:43:9e:40:1f:1d:
         ba:39:eb:85:03:c3:2a:28:2a:35:87:95:90:d4:5b:ce:42:76:
         50:0e:c2:c5:3b:57:e0:c4:cf:e9:2c:19:d9:06:94:cf:d3:af:
         6b:cc:d1:45:e3:90:17:40:f5:c8:8a:1e:ff:ec:d5:42:f4:8f:
         d8:c4:f6:f6:25:bc:c7:7a:70:e1:50:aa:b0:37:10:f7:ba:1e:
         09:7e:dd:a8:c0:d2:8e:b0:83:8e:5a:73:f2:89:86:e8:3d:6f:
         19:2a:2b:b3:03:be:41:90:81:62:6e:95:93:ed:51:34:dd:4d:
         98:ac:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:38:23 2026 by rpki-client