Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
File:                     defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa (raw, json)
Hash identifier:          rMnEikD1ml+VR7QgEAF1z4AI2sm7L5yqHgIQQ5CUyTI=
Subject key identifier:   E3:FE:FF:79:F3:5C:C2:92:13:26:F3:6F:72:E2:7D:5A:97:D5:49:93
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584D8C2A9A072EF8E3EFB9F2FB20
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     62874
IP address blocks:        2602:ffb7:594::/48 maxlen: 48
                          2602:ffb7:5a0::/46 maxlen: 46
                          2602:ffb7:d00::/40 maxlen: 40
                          2602:ffb7:f00::/40 maxlen: 40
                          2602:ffd9::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:9a:07:2e:f8:e3:ef:b9:f2:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=5eaf1658-9989-4774-ab6b-d3fefd4ca291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:01:77:8f:70:13:2b:b8:76:82:e5:8c:9f:be:
                    c1:44:12:bb:94:b8:77:82:82:16:e9:99:94:b5:a6:
                    99:c4:f8:99:e6:ff:cb:09:20:85:69:c1:e9:5a:85:
                    bc:72:55:98:be:a7:28:b7:ae:10:ad:34:36:3f:64:
                    72:6a:1c:b2:4a:c7:75:79:33:32:26:af:81:1b:e4:
                    aa:38:57:25:a9:b2:03:f7:90:9f:3b:c7:20:95:8f:
                    4f:07:9b:49:52:36:d2:98:ec:cd:cb:00:19:64:3f:
                    7b:57:0a:21:28:18:49:59:c6:9d:23:50:9f:8b:1f:
                    a8:6b:90:f7:81:9c:c2:d6:73:61:f4:2e:ee:a3:24:
                    93:2f:01:95:d4:bf:0f:f6:a0:03:22:b9:da:c0:8b:
                    c1:95:92:b0:49:16:0c:18:a1:fd:63:d7:ec:0b:ec:
                    60:bb:66:b7:da:bf:9d:6f:cc:cf:23:90:98:ab:35:
                    19:2d:63:82:89:63:07:20:e0:15:6a:ca:e2:2a:e4:
                    8f:55:40:e3:f0:7a:0e:3a:9b:d2:20:a6:0a:9e:35:
                    0e:4c:be:6f:ba:e9:a3:39:25:de:96:41:b6:ed:12:
                    bd:fc:7b:a9:e5:3a:e6:cc:9d:30:1b:7c:88:b2:8d:
                    17:0f:4b:1e:d8:ed:a1:da:73:1e:67:e9:7f:e8:f8:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FE:FF:79:F3:5C:C2:92:13:26:F3:6F:72:E2:7D:5A:97:D5:49:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffb7:594::/48
                  2602:ffb7:5a0::/46
                  2602:ffb7:d00::/40
                  2602:ffb7:f00::/40
                  2602:ffd9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f7:97:f4:f1:d3:67:11:18:e4:9e:7e:a1:98:5a:f0:0d:46:
         36:1e:f8:24:6c:31:15:e5:84:c9:8e:b0:7a:cc:8d:5c:ff:69:
         ea:6f:ad:14:48:3f:83:25:6e:10:fe:99:52:e6:67:a1:69:58:
         4e:79:57:a4:1c:e0:6a:96:cf:7b:9e:9e:8f:7a:2e:c1:dd:54:
         87:f3:f8:ab:7f:6e:f4:93:17:b0:f1:dd:4c:22:df:8a:35:d6:
         66:c0:1e:ec:ea:53:b2:ae:fe:b3:e2:96:c3:2c:6e:96:c9:dd:
         7a:91:32:36:91:c1:dd:14:56:f2:45:88:bc:d5:da:fb:b7:d2:
         80:7b:4f:18:f8:3c:86:df:31:2f:36:df:87:57:42:a9:7d:83:
         8c:5a:b4:b5:ad:c4:d0:db:c5:ce:c6:3e:7c:0b:80:e4:68:ef:
         7d:17:85:05:02:5e:be:a3:00:1c:46:54:42:dc:6a:7c:bc:17:
         09:ba:eb:82:17:9f:da:e9:1f:a6:64:51:f5:bd:d0:b5:4a:9b:
         8d:c1:8f:f2:6d:53:39:14:b1:df:cc:76:98:06:81:9c:3e:5f:
         e8:77:78:59:85:82:2b:0a:6e:d8:bc:bd:33:88:39:af:66:41:
         f1:9c:ea:27:8c:e5:2b:61:4f:9c:2c:a5:21:2b:df:3a:25:1c:
         c8:c7:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:52:48 2026 by rpki-client