Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/4c614fa4-86b6-3d9f-847a-8c621d670b67.roa
File:                     4c614fa4-86b6-3d9f-847a-8c621d670b67.roa (raw, json)
Hash identifier:          g7AdohUFDfAd3vVYh/iNVTpuM5TCcuOEHODJTC1l5Ho=
Subject key identifier:   CE:22:6E:F1:30:59:73:5D:EF:08:E3:97:46:B6:CD:28:C8:9B:EE:68
Certificate issuer:       /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8
Certificate serial:       010D0C9F4328584D7CCFD5455FB159C42B819708
Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/4c614fa4-86b6-3d9f-847a-8c621d670b67.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     53356
IP address blocks:        2602:f92d::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d5:45:5f:b1:59:c4:2b:81:97:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=faa7bc35-b1c2-4459-8313-9b0e036fac24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:bd:5e:01:5c:3a:df:9f:b3:39:ed:47:57:
                    9e:71:ca:b3:7c:a6:d5:1f:64:0b:93:27:27:7f:b7:
                    62:7e:6f:17:b8:d1:7d:9f:cc:1a:d2:74:17:5f:2b:
                    5b:79:75:7b:79:f7:48:fa:b2:8a:a9:47:f4:f0:51:
                    56:3b:aa:b8:1f:38:85:e2:79:2d:d7:fb:b1:92:5c:
                    1d:50:02:47:9d:57:c3:c4:14:a9:ce:cf:99:ad:b7:
                    41:d6:73:15:03:c7:e3:a2:76:ff:99:a4:32:2e:e9:
                    77:29:ff:d4:e4:e7:1e:d9:70:f6:ac:99:19:74:92:
                    16:8b:3c:84:37:bc:9d:fe:f4:51:8f:97:56:3b:44:
                    07:a5:b2:b3:4a:31:5f:57:3a:e2:5f:5b:e7:af:19:
                    09:40:62:40:fd:70:10:e3:d9:54:59:54:67:0f:a7:
                    81:bf:46:6e:fe:9e:76:f3:24:e7:54:27:3f:1b:a2:
                    49:f9:8f:3e:3f:e5:ad:01:ed:19:9d:ce:ba:9c:55:
                    25:ee:08:08:03:52:b3:9c:23:83:a0:ef:60:8c:24:
                    09:b7:95:e1:5c:f1:cd:6e:50:a4:95:db:31:b1:15:
                    d4:43:33:72:b5:c0:c0:ff:5d:83:0c:31:ea:4b:3d:
                    bd:12:15:73:fc:3a:1d:f9:91:19:d1:43:d3:25:d9:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:22:6E:F1:30:59:73:5D:EF:08:E3:97:46:B6:CD:28:C8:9B:EE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/4c614fa4-86b6-3d9f-847a-8c621d670b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl

            X509v3 Authority Key Identifier:
                keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:b7:61:fc:8a:e1:90:34:97:ca:f6:18:d9:d1:78:0f:bf:8c:
         7f:b4:45:74:46:a8:7f:68:d3:6d:62:b4:78:e3:1f:02:ef:20:
         5c:d0:d6:78:63:8b:8e:18:1a:28:6e:9e:00:45:86:39:a9:b2:
         c4:8f:ac:13:74:0e:ce:fd:3e:7d:f5:72:d1:62:ec:95:e8:e7:
         18:06:b5:7d:0e:4a:d1:98:8f:93:da:65:a1:e2:bd:a2:2a:be:
         06:e7:8f:39:89:db:17:22:f9:85:97:a7:cc:e0:30:c5:24:de:
         54:14:16:3e:32:9f:76:92:a9:1f:c1:2a:f1:71:54:69:55:78:
         46:9e:a0:31:9f:ad:8e:a3:bb:94:13:2d:12:01:4e:11:6e:09:
         04:d1:f8:8d:0e:33:b3:5c:90:57:c8:1d:45:28:78:c9:70:65:
         3b:9a:0c:ca:c4:32:17:99:de:2a:e0:87:3c:fe:ec:b5:73:cc:
         8c:32:43:fb:b1:be:3d:60:87:1e:06:a1:68:b4:08:33:de:06:
         f7:a8:5a:4b:e8:1b:11:86:53:c0:89:6e:a0:ea:79:b3:05:31:
         ec:71:27:48:77:92:f5:f4:f6:c4:2b:3b:a3:e0:ef:4d:5e:39:
         7a:5e:30:b0:bd:94:2f:b6:b8:c5:95:bb:f2:d8:df:a2:de:51:
         6e:ed:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:08 2026 by rpki-client