Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/ec1a3bba-9491-3c8a-ab10-370b1160b039.roa
File:                     ec1a3bba-9491-3c8a-ab10-370b1160b039.roa (raw, json)
Hash identifier:          VsMF90I69nALAtZjSH3i0wh3CedHyYBllu4+z/Itsus=
Subject key identifier:   24:F5:10:E4:F2:81:87:D1:4E:B3:9E:45:75:DC:91:24:1D:18:BE:EF
Certificate issuer:       /CN=fdcd44d1-5710-43a1-847c-fc86cb51a82e
Certificate serial:       010D0C9F4328584D625832AD2039AA5F1C339000
Authority key identifier: FD:8A:89:B2:E7:14:FB:DE:FB:09:FF:8B:B4:FE:24:BF:EF:90:F2:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/ec1a3bba-9491-3c8a-ab10-370b1160b039.roa
Signing time:             Fri 03 Apr 2026 13:28:30 +0000
ROA not before:           Fri 03 Apr 2026 13:28:30 +0000
ROA not after:            Thu 02 Jul 2026 13:28:30 +0000
asID:                     402173
IP address blocks:        2602:f660::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:58:32:ad:20:39:aa:5f:1c:33:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcd44d1-5710-43a1-847c-fc86cb51a82e
        Validity
            Not Before: Apr  3 13:28:30 2026 GMT
            Not After : Jul  2 13:28:30 2026 GMT
        Subject: CN=6ea1633f-dd27-4dd8-9438-c8c9962e69fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:75:6b:55:12:a7:16:58:1a:75:a3:31:b5:1c:
                    18:7b:2e:92:67:00:2d:d6:35:39:24:9a:a3:a8:96:
                    ea:c1:02:3e:5f:48:69:e1:5d:b3:d2:c6:3e:fb:9b:
                    7b:b1:e0:5c:54:90:c2:0e:4b:16:d0:00:22:eb:0c:
                    fc:7a:76:a2:c9:6d:93:00:e4:ba:18:92:d3:7b:4e:
                    de:04:a9:26:5a:d3:1d:b0:7b:a4:5b:7b:e9:50:ba:
                    67:80:8a:32:ad:25:60:7d:6b:a0:a5:de:eb:a9:95:
                    2a:82:6c:bc:98:bd:42:f0:e0:72:e2:e0:9c:b2:75:
                    2c:94:e9:12:20:2b:86:8a:15:4f:fd:3d:01:e1:6b:
                    a1:06:cd:67:29:6a:0e:d7:7c:5c:c4:12:25:f9:a6:
                    21:78:15:0b:01:85:b9:35:a5:fa:10:33:e9:6f:e9:
                    12:bc:34:29:f3:5e:14:b2:47:72:60:b0:a9:88:9a:
                    8f:8e:88:c7:c2:46:49:cf:c2:2f:fc:5d:be:52:83:
                    b7:6a:b0:8b:16:9e:f5:ca:7a:75:71:e3:a0:00:11:
                    60:f0:ba:8a:c9:63:46:3e:dc:f4:73:04:54:81:eb:
                    ba:39:06:6d:78:fd:b8:69:4b:93:82:f7:3b:ad:c1:
                    0d:be:d5:86:66:96:47:b2:9b:25:8b:db:84:78:30:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:10:E4:F2:81:87:D1:4E:B3:9E:45:75:DC:91:24:1D:18:BE:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/ec1a3bba-9491-3c8a-ab10-370b1160b039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.crl

            X509v3 Authority Key Identifier:
                keyid:FD:8A:89:B2:E7:14:FB:DE:FB:09:FF:8B:B4:FE:24:BF:EF:90:F2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f660::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d2:18:14:18:6b:b6:38:6a:71:89:e2:22:ff:c3:b4:a8:41:
         0a:b0:c9:ee:a2:15:e3:3e:09:7a:95:b8:06:3a:b3:38:7a:2d:
         94:0d:cd:c9:4e:e0:ec:e5:92:b7:0a:52:46:c9:f0:79:d2:5e:
         f6:bb:2d:04:59:d9:4f:bb:d4:4b:91:b5:f0:49:d4:26:59:7a:
         ea:75:05:1b:95:16:83:d9:b6:92:c7:46:2f:07:16:eb:21:33:
         53:81:6f:58:e7:e5:6e:4d:fe:00:a8:d7:bb:2f:e9:a7:be:0e:
         3a:7e:c2:60:77:52:c0:7b:ed:ca:d7:73:a0:49:4f:1f:fe:90:
         b3:bf:81:2b:ff:a6:78:83:79:28:67:4f:fe:58:8e:74:a6:25:
         32:b3:a8:2f:97:3d:51:42:5a:03:d6:02:3a:16:a2:6f:c4:3e:
         98:e3:58:75:1d:bf:bc:dd:ce:3a:7d:52:1e:98:ed:31:32:60:
         7f:d2:5b:c3:fe:54:0f:71:21:5c:63:75:ed:bb:bf:71:a3:6e:
         91:e0:9d:f7:ad:b6:19:50:f4:3e:af:61:32:bd:26:96:4a:69:
         f8:e0:6d:f7:f3:b0:92:1e:09:8b:b9:5c:ac:ed:3d:b8:99:a0:
         16:ca:ac:ac:d9:b3:75:50:e9:d5:f9:2f:7e:a7:22:34:ac:b9:
         0f:6e:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:22:13 2026 by rpki-client