Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa
File:                     7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa (raw, json)
Hash identifier:          mw40nBiYCZvXG3lKoijubTMwO/O4vZk9JCSo10xNYkY=
Subject key identifier:   DD:96:88:57:2E:4D:EB:82:5B:0E:84:AC:CF:F1:93:C5:8E:DD:C5:47
Certificate issuer:       /CN=69dba5e3-26fb-440c-884d-525d04a32b0f
Certificate serial:       010D0C9F4328584DFBD626B3C306523078DF7720
Authority key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     17034
IP address blocks:        2602:f5e8::/37 maxlen: 37
                          2602:f5e8:800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:26:b3:c3:06:52:30:78:df:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dba5e3-26fb-440c-884d-525d04a32b0f
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=bf5b14e3-8f38-4cff-8a34-152270b1cc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:e9:9c:b5:44:82:82:45:58:7e:38:29:f3:
                    bb:c6:44:f6:0f:1a:5f:c4:ca:0c:12:5a:98:2b:96:
                    86:1b:03:1b:5e:73:c1:d3:d4:cb:66:29:a4:b7:41:
                    ca:1c:53:a7:1b:3b:32:df:bc:34:0e:1d:39:cc:5c:
                    1c:1d:53:58:49:af:13:8c:69:8a:10:a6:46:61:1f:
                    c2:b2:13:7b:e7:09:83:ec:cc:e4:6c:b2:63:4a:57:
                    1f:c4:18:52:c7:24:16:82:57:f5:24:d6:88:57:64:
                    d2:99:7e:fc:24:3f:a8:82:80:12:f9:82:86:05:68:
                    c5:a4:85:20:e6:50:7f:f5:cb:5e:f8:54:2c:d6:1d:
                    32:1c:95:c3:bd:42:31:82:e9:af:16:46:95:d8:33:
                    6b:93:0f:f1:a8:f2:4b:8b:a4:cc:e7:18:95:1c:a1:
                    f9:4b:6e:b5:70:d1:91:8f:93:ea:0b:44:af:39:8e:
                    fb:c5:c0:31:ed:51:04:8b:63:cd:d7:4e:66:f5:23:
                    85:00:a0:63:62:1c:6f:3a:ac:a0:15:5d:e5:39:f7:
                    17:14:ab:00:c7:42:46:73:de:a1:b0:a5:fa:7f:4c:
                    06:72:3a:ca:87:e1:24:79:3e:50:08:69:f1:15:4c:
                    aa:5f:04:30:83:6d:1b:f4:4e:df:c8:20:b6:7b:91:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:96:88:57:2E:4D:EB:82:5B:0E:84:AC:CF:F1:93:C5:8E:DD:C5:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5e8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7b:b8:43:e5:79:06:63:1d:7c:ad:fb:db:c9:e4:06:5e:0e:
         3c:f6:83:87:1b:d1:fb:51:b0:4e:f9:d4:d2:a2:f9:35:37:6d:
         1c:a0:38:63:d0:56:b5:62:b0:8c:60:f3:e2:a9:83:fd:70:1e:
         2a:de:41:4e:d8:23:bd:ba:68:e5:18:72:1c:4c:55:68:6d:e5:
         7d:46:3d:c4:7c:d5:77:a5:87:d3:69:9d:65:b4:10:4d:84:6b:
         11:89:e4:1d:6c:7c:3f:6f:ab:db:cb:ff:f5:5b:d9:20:7d:e3:
         1c:15:08:52:1a:2c:68:d5:8b:da:54:81:e2:fd:9d:9f:0b:40:
         bf:7b:db:df:07:2f:ca:bd:e7:dd:e3:b0:0d:5d:44:5f:3b:bf:
         89:5b:15:ed:c7:91:8c:ab:1c:bb:93:d9:53:69:9f:07:ff:e9:
         2c:d8:4a:7e:5b:12:4f:70:ec:4d:40:0a:c1:dc:f9:16:04:81:
         fe:10:6c:af:9e:1e:d2:8a:58:2a:02:56:2d:cd:e2:33:55:28:
         38:94:fc:c5:6b:60:21:36:7c:0f:a1:cc:d4:c3:86:d4:57:4f:
         07:6d:7e:89:73:76:30:0c:64:5f:20:a8:d8:34:a9:1b:15:02:
         08:61:b3:c3:2d:3e:f7:af:2c:0e:2c:b4:5f:cd:b2:ce:2c:3b:
         83:5c:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:02 2026 by rpki-client