Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/aef7e15b-22db-303f-9943-b23451fa024d.roa
File:                     aef7e15b-22db-303f-9943-b23451fa024d.roa (raw, json)
Hash identifier:          Suq9LZs90V1J3g/oY0VXN5DOfwSCU9m/ri2HXMbDrIs=
Subject key identifier:   88:D8:D1:97:FA:89:FF:1D:8E:2F:40:FC:27:96:F2:D1:64:A4:1D:76
Certificate issuer:       /CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d
Certificate serial:       010D0C9F4328584E104ED744748AF40792000A00
Authority key identifier: FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/aef7e15b-22db-303f-9943-b23451fa024d.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     21665
IP address blocks:        2602:f706::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:d7:44:74:8a:f4:07:92:00:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=68a91ab2-f841-4db9-8908-3b8d04bb4197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:7a:ce:17:18:be:01:14:98:23:34:72:a1:
                    28:9a:fe:1d:66:2c:e2:d0:28:08:fd:58:69:fd:65:
                    7b:7f:d5:8d:f2:11:d6:6a:14:90:53:2f:1c:38:3c:
                    cb:c9:03:de:e8:15:c3:0e:46:89:ee:fb:75:8f:11:
                    f1:8b:13:40:9e:09:96:3c:85:d2:84:db:e7:c9:f8:
                    8c:23:f5:e2:c5:bd:40:ef:8b:f2:e5:e3:b1:ab:91:
                    07:69:18:1b:f0:0f:4d:bf:99:1d:55:25:c0:f3:91:
                    60:19:60:04:e8:04:bf:3e:e9:92:65:38:bc:a8:8e:
                    5a:a7:7c:77:9b:8a:21:48:87:c1:62:7f:78:a5:b2:
                    c7:15:bd:7f:98:7a:5f:c8:0d:6d:8d:e3:04:56:14:
                    ca:39:a2:aa:fe:d7:67:ba:17:d6:c2:79:85:23:50:
                    30:47:f3:0c:55:87:25:a4:98:15:97:7c:06:2f:84:
                    9f:bb:c9:01:66:61:f9:f2:5b:42:01:31:dc:fe:d3:
                    88:dd:c1:ad:7a:e4:e8:cc:80:e0:77:20:15:87:4b:
                    a9:1d:5d:ab:c1:ac:05:54:92:3a:c2:df:b3:37:a6:
                    2a:a8:33:0f:f4:e3:c7:99:aa:f9:d3:9e:e4:47:19:
                    0a:3e:65:e0:ea:af:eb:af:9d:9c:90:92:d4:ab:23:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D8:D1:97:FA:89:FF:1D:8E:2F:40:FC:27:96:F2:D1:64:A4:1D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/aef7e15b-22db-303f-9943-b23451fa024d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f706::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e2:c6:c6:18:a8:f8:57:ad:ee:0b:0b:00:36:50:40:76:a8:
         39:dc:08:19:97:f3:ea:43:74:6b:cc:49:53:a5:ab:ef:46:9f:
         22:48:b4:b1:7e:5b:2e:82:6b:0a:e1:ec:f7:71:fd:5a:fc:26:
         e4:5e:e4:93:1e:4f:2b:fd:96:1a:aa:b1:a6:10:3d:6c:e8:23:
         03:62:fe:43:9b:bd:a8:51:de:16:9a:08:3c:4c:c6:5c:a2:82:
         22:1d:49:10:2f:20:81:b8:ad:e8:a2:62:ea:86:b4:23:b8:ae:
         3b:a5:0e:1d:77:48:a0:11:e2:4d:c1:d6:be:a5:d6:cf:f9:11:
         fe:73:4a:70:7b:8e:d4:71:08:6e:97:d7:be:1d:df:36:d1:89:
         f5:26:8f:02:70:73:bf:14:35:1d:1d:6b:88:78:97:3e:07:e0:
         81:2f:b7:a9:79:e5:b1:0e:59:70:e4:0e:b2:20:76:6f:0b:96:
         6f:03:6b:44:ed:59:70:aa:30:a8:18:20:07:51:29:8e:c4:1e:
         c2:58:d3:43:02:2f:cb:8a:a8:86:00:b0:12:10:50:bd:c1:99:
         4d:54:00:0e:f9:6b:63:e6:fb:ee:a2:30:af:69:83:70:4c:17:
         ed:ee:ea:94:25:8d:b7:3f:b9:4e:cf:e3:ee:1f:2f:44:42:ea:
         51:9b:7a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:23:00 2026 by rpki-client