Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/377cb425-71da-3f60-9225-6a152463fc00.roa
File:                     377cb425-71da-3f60-9225-6a152463fc00.roa (raw, json)
Hash identifier:          vLQEaZd9Gm/E48xENDH9RczwnQOBfuTQBcOb496KHEE=
Subject key identifier:   A0:83:E0:D6:F3:B4:E1:CC:92:42:1C:EB:5C:E8:D0:88:AF:A6:EA:24
Certificate issuer:       /CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304
Certificate serial:       010D0C9F4328584CCA41EC8D7F4F7376C48F5F80
Authority key identifier: 59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/377cb425-71da-3f60-9225-6a152463fc00.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     203062
IP address blocks:        2602:f650:800::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:ec:8d:7f:4f:73:76:c4:8f:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=af07eb1a-2fdd-4b4f-a52c-b524ee787c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:a0:7b:47:d9:4e:98:e1:d8:28:3b:7b:b0:
                    a0:d3:c5:66:f4:9e:a0:63:3b:0f:f1:b8:dd:56:14:
                    71:0d:4b:3c:81:03:e7:5a:3f:cb:5b:b7:d4:90:95:
                    82:db:de:e1:4e:b3:b8:f8:31:6e:d4:ad:70:8a:22:
                    e9:f4:70:18:85:51:76:74:e7:83:cf:43:9c:d9:cd:
                    09:fe:47:f2:44:65:9f:fe:85:4e:0b:6e:ef:11:9e:
                    51:9e:85:6c:7b:ec:f6:de:18:ed:81:bf:0a:63:47:
                    9e:5a:40:eb:7f:22:cb:4d:43:30:94:9c:6a:b2:ac:
                    6d:af:ef:64:ee:bb:b7:13:8a:4e:33:14:15:b1:42:
                    03:2b:b7:1f:c2:1a:90:26:b3:0a:dc:c0:ec:df:08:
                    04:ba:fe:3f:6b:7b:ab:c7:ef:49:88:fe:5a:6b:e4:
                    09:96:21:12:7a:7c:93:73:86:f3:e4:ab:b5:fe:14:
                    c8:9d:8b:f0:6b:ad:bf:0e:29:42:d0:d9:b4:22:26:
                    7f:85:10:b3:61:7e:20:d0:13:7e:af:f2:5f:c4:ac:
                    1d:97:39:66:6d:4d:e2:c7:8f:93:9a:37:80:9e:db:
                    06:75:d8:05:91:69:99:19:94:f0:c6:db:4b:3f:6e:
                    ce:8a:f0:4c:b6:aa:62:c9:39:ae:d6:60:68:05:aa:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:83:E0:D6:F3:B4:E1:CC:92:42:1C:EB:5C:E8:D0:88:AF:A6:EA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/377cb425-71da-3f60-9225-6a152463fc00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl

            X509v3 Authority Key Identifier:
                keyid:59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f650:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:72:9f:85:4d:f4:0f:bc:00:d9:9a:08:b3:0d:1e:c5:19:59:
         a5:6f:f1:53:3e:e6:34:d5:0b:28:6a:90:4c:ce:22:56:be:cb:
         f9:14:73:6a:de:54:69:78:13:6d:fd:53:5a:e0:84:ec:e4:03:
         8b:02:b5:c5:2e:a4:53:2a:85:2f:80:da:82:17:a3:6c:e8:12:
         ec:06:41:b2:7c:51:90:05:83:12:21:7d:e4:59:07:7e:68:a0:
         90:79:8b:19:4b:57:05:c1:57:44:69:69:97:69:e8:fc:63:03:
         fa:de:70:c8:75:46:ed:d4:25:43:d5:0c:a4:fa:d0:68:b7:f3:
         65:8a:c1:24:19:81:2f:2c:58:4d:25:41:56:6b:ce:d8:9c:a6:
         65:81:13:b4:cc:87:50:ab:29:8c:db:cf:a8:cd:3c:a4:2b:62:
         61:c2:62:69:8b:b3:f7:62:b0:c8:19:aa:96:32:74:7c:04:db:
         37:30:f2:b0:b2:8a:64:47:76:87:b8:95:93:47:9c:2b:11:71:
         ab:5f:c9:8f:50:3c:21:8e:26:a6:7e:f6:d8:56:c1:52:ad:3f:
         d5:96:36:0d:02:4c:2a:f4:1f:4c:99:20:85:bf:84:5d:f9:14:
         f3:3a:ba:cb:a9:cd:55:f9:eb:68:e0:73:bd:18:8d:4e:67:87:
         9c:df:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:38 2026 by rpki-client