Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/d18ee015-34f3-3082-a22b-cf0515f687de.roa
File:                     d18ee015-34f3-3082-a22b-cf0515f687de.roa (raw, json)
Hash identifier:          ru/pZ78W+jETYwusxWIroeZGmM986WRiYDwOr52ENrA=
Subject key identifier:   10:52:34:AD:F7:F4:37:19:61:B5:07:3E:42:A5:B2:C6:08:FB:25:02
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584D7A054EB6F8663CB55818C880
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/d18ee015-34f3-3082-a22b-cf0515f687de.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     33164
IP address blocks:        2602:ff9d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:4e:b6:f8:66:3c:b5:58:18:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=fe96d626-63ea-4e61-9e14-cec52d66a038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:86:a0:4a:50:5b:a9:2f:98:24:5b:bf:d5:
                    ba:37:cb:d0:a9:7e:a1:ad:71:7c:97:44:5d:f2:3e:
                    a4:20:8a:58:99:0c:45:69:2b:f5:0b:36:a5:b3:a6:
                    2b:18:0e:ae:85:7a:07:68:dd:a8:47:1e:b8:66:79:
                    b8:20:3c:51:c3:37:0e:22:79:d7:a8:12:6d:cf:c7:
                    85:6b:f8:a1:dd:9c:9d:71:8e:22:6b:5a:0f:29:70:
                    e8:f5:4a:d9:75:ea:89:3a:87:b6:67:41:33:93:02:
                    63:73:62:a3:33:61:0a:40:9f:0d:bf:e2:ec:47:52:
                    7b:4a:ee:bb:e3:e0:ea:81:22:01:24:bc:9d:f8:68:
                    90:a0:65:11:ba:ec:3b:13:29:00:ad:d6:ad:fb:40:
                    c9:df:5b:60:f3:60:eb:ac:8a:13:6a:05:4f:90:98:
                    13:49:34:56:97:5b:90:ae:a2:d6:fd:25:87:2a:e4:
                    07:f5:5e:fa:fe:80:f5:6f:09:0d:35:91:76:90:dd:
                    c0:a0:bb:5a:e3:83:ab:4c:39:b8:ef:29:97:87:e5:
                    97:7d:af:c3:a2:67:f4:4a:29:40:81:af:5b:de:08:
                    69:75:0e:26:b6:4e:91:ea:94:cf:97:44:31:27:10:
                    0f:f3:e1:11:ae:7e:74:66:05:8a:f5:b0:72:51:d2:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:34:AD:F7:F4:37:19:61:B5:07:3E:42:A5:B2:C6:08:FB:25:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/d18ee015-34f3-3082-a22b-cf0515f687de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff9d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:8d:15:58:9c:84:e5:bc:7c:dd:47:a0:b3:f9:7c:87:7f:
         cb:38:23:2e:22:7a:fb:f9:86:e9:29:d0:d8:0a:9a:05:b9:3d:
         2c:21:32:08:4f:f3:cd:31:fb:3a:b7:e7:f6:b5:1e:89:ea:aa:
         80:2c:9d:39:28:cc:60:6e:3b:35:47:f1:8d:d7:c5:8f:ac:df:
         fe:e0:e6:53:54:2f:d4:06:89:eb:01:3e:c8:4f:70:e4:a9:3c:
         9f:10:6d:0b:4a:2c:f4:b0:fa:0d:d6:44:19:bb:fe:0d:28:89:
         4e:6e:0a:bb:98:38:12:5a:58:2f:81:10:33:d0:cd:1e:cb:c9:
         91:f5:d5:52:b1:06:a1:cb:6b:6e:57:3c:4a:1d:e2:19:92:6c:
         4e:e9:81:b2:65:e2:44:e3:da:64:c1:c9:20:96:74:11:fe:03:
         5f:58:76:24:fa:1c:59:1d:36:b2:5e:89:5f:d5:0a:ee:27:6d:
         4e:a5:38:d1:3a:e3:cd:6b:ae:d7:6f:39:57:23:3a:ec:78:9c:
         1b:c6:9a:16:79:26:57:19:b5:e6:84:2b:5f:39:85:fd:eb:f5:
         ec:a7:92:7f:66:45:15:ce:79:35:a9:ca:47:6b:9f:c1:68:3b:
         50:de:30:65:db:c3:d9:47:bd:9f:cb:4a:31:d9:fb:b9:98:1a:
         15:e8:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:15:26 2026 by rpki-client