Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/fb8d0fc3-7319-310c-b290-6c9692f998d9.roa
File:                     fb8d0fc3-7319-310c-b290-6c9692f998d9.roa (raw, json)
Hash identifier:          YVtuO37DQHBditwUTwwzZ98Vb8gqhoex1NjjRVp9y30=
Subject key identifier:   56:7B:DA:1E:51:41:F3:CC:54:CE:BA:26:30:7C:70:35:97:26:00:FD
Certificate issuer:       /CN=7526f790-ccec-40fc-afc4-9d600cb8a815
Certificate serial:       010D0C9F4328584D55BCB8716931BE35DA3FEF40
Authority key identifier: A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/fb8d0fc3-7319-310c-b290-6c9692f998d9.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     8075
IP address blocks:        2602:f742:3f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:b8:71:69:31:be:35:da:3f:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7526f790-ccec-40fc-afc4-9d600cb8a815
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=92577342-173e-42de-929d-9fc2e2d8a5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:ca:fd:b0:9a:2c:99:7f:52:d7:c5:69:86:
                    37:7b:a6:54:8d:e1:e0:66:20:74:22:d2:e9:d0:30:
                    b7:ae:83:82:d5:8a:2d:e6:a0:e9:1b:89:ab:7b:fd:
                    c1:48:3f:5b:30:37:74:ea:2f:a1:c3:61:40:6d:02:
                    1e:41:26:bf:ba:6e:5f:85:1b:3c:35:d4:35:8e:2c:
                    96:03:25:45:47:c3:d8:c8:56:4b:54:3b:61:d3:de:
                    43:c6:db:4e:92:36:d5:a9:83:92:1e:a3:0d:1d:a9:
                    ae:09:bc:1a:23:5e:e3:69:32:2f:bd:16:9c:2c:5f:
                    89:d9:0f:d0:9e:28:32:4f:ff:c2:9f:fe:10:b6:33:
                    d8:a3:dd:05:4a:af:6e:cd:9f:2e:99:dc:e8:61:b0:
                    e6:32:de:b6:ef:93:da:fa:0f:6b:a4:2a:e3:91:31:
                    51:6a:f2:83:ef:ea:15:d0:bd:2b:aa:d0:b4:c7:db:
                    75:fb:19:1b:63:a4:e6:52:d9:17:ec:01:a6:88:c2:
                    95:bf:82:b8:ce:70:6a:71:36:4e:1b:63:18:26:cf:
                    94:19:66:a8:1f:c5:2b:ed:de:fe:e0:ac:c9:35:ef:
                    86:e5:29:fe:a1:3d:c2:89:c6:a4:15:24:ba:a8:bd:
                    65:4d:f3:07:2d:b7:47:45:5f:6e:78:65:1f:1d:0a:
                    52:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7B:DA:1E:51:41:F3:CC:54:CE:BA:26:30:7C:70:35:97:26:00:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/fb8d0fc3-7319-310c-b290-6c9692f998d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl

            X509v3 Authority Key Identifier:
                keyid:A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f742:3f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5a:e2:f1:f7:a9:d3:94:27:ca:35:ef:c9:75:3c:49:6f:a6:
         ed:d7:4f:5c:d1:84:bf:89:b9:81:8f:52:21:1b:73:ba:b0:f9:
         bc:a5:b2:f1:80:6c:82:76:b1:8e:35:92:ce:a8:cb:74:c2:2f:
         45:8d:9a:b2:36:2a:a3:91:5c:3f:8e:a6:a2:5b:25:ec:69:8d:
         47:e8:db:ea:c9:36:d6:bc:eb:0d:3d:42:c2:8a:da:7d:05:08:
         1a:38:ea:75:77:61:29:43:5b:a9:b8:57:36:1d:18:b1:a2:ac:
         e5:a5:c9:33:0b:b5:a7:90:bd:60:14:64:8f:41:23:d4:8e:b1:
         80:ad:75:ca:d7:10:0b:1c:87:7e:6e:58:ed:ea:39:45:61:8b:
         f9:ce:fa:63:05:c2:55:00:24:92:30:75:b5:f2:ca:6c:38:5f:
         58:5d:10:a7:16:93:a0:af:43:f2:0f:0c:8b:73:c6:39:c1:2b:
         39:1c:e2:60:a5:95:96:d0:60:69:20:1b:33:6a:29:82:02:da:
         a8:21:75:2a:75:85:20:48:ed:da:42:65:ad:0c:db:6c:04:07:
         8f:c3:dd:af:dc:c2:65:36:79:92:06:2d:1b:a7:e4:e8:ef:47:
         98:c7:45:91:74:cd:c8:53:63:06:0b:87:88:9c:4c:3f:fd:7e:
         e1:85:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:26 2026 by rpki-client