Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c16f003-ee41-41b2-8cea-44b5f40681eb/8e68d137-01dc-36f1-9d8e-0897ef473b88.roa
File:                     8e68d137-01dc-36f1-9d8e-0897ef473b88.roa (raw, json)
Hash identifier:          6MbeH8Ng64EsAp3fOkQwbTzkJDxRbQ49H4Jo0xMY6M0=
Subject key identifier:   FD:E8:AA:3D:7C:40:73:02:E0:82:BE:F1:D3:E8:6C:DD:1F:77:68:0E
Certificate issuer:       /CN=0c16f003-ee41-41b2-8cea-44b5f40681eb
Certificate serial:       010D0C9F4328584CB977E882C6909BCC70C5D740
Authority key identifier: C2:82:80:48:D6:71:70:A4:E2:62:4D:7A:92:E9:87:03:13:D6:BA:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c16f003-ee41-41b2-8cea-44b5f40681eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c16f003-ee41-41b2-8cea-44b5f40681eb/8e68d137-01dc-36f1-9d8e-0897ef473b88.roa
Signing time:             Mon 02 Feb 2026 01:40:47 +0000
ROA not before:           Mon 02 Feb 2026 01:40:47 +0000
ROA not after:            Sun 03 May 2026 00:40:47 +0000
asID:                     402122
IP address blocks:        2602:f889::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c16f003-ee41-41b2-8cea-44b5f40681eb/0c16f003-ee41-41b2-8cea-44b5f40681eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c16f003-ee41-41b2-8cea-44b5f40681eb/0c16f003-ee41-41b2-8cea-44b5f40681eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c16f003-ee41-41b2-8cea-44b5f40681eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:77:e8:82:c6:90:9b:cc:70:c5:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c16f003-ee41-41b2-8cea-44b5f40681eb
        Validity
            Not Before: Feb  2 01:40:47 2026 GMT
            Not After : May  3 00:40:47 2026 GMT
        Subject: CN=d11a0e6d-da81-4a3c-bddb-660375d479c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e2:e1:aa:f1:38:e7:1c:52:f2:d1:e7:c9:46:
                    1d:bf:45:6a:be:34:a4:68:1c:c3:70:35:a4:65:ff:
                    e2:9b:02:81:70:e7:1c:ee:82:9e:ba:ac:79:52:12:
                    bb:62:94:8c:91:88:27:f6:8c:c5:c3:7e:fe:3b:fc:
                    ac:62:2c:0c:2e:c2:bf:f3:51:41:20:0d:45:61:2e:
                    9a:c1:7c:ec:8c:0c:25:51:cb:dc:ca:9c:99:03:4a:
                    3d:97:f3:78:10:61:13:47:bf:39:27:cd:47:6b:72:
                    90:0a:20:3e:f6:57:f8:35:f4:09:13:7e:7f:87:68:
                    44:8b:2a:8e:e9:e7:52:5d:ce:29:93:f2:8f:7d:d9:
                    aa:31:68:59:47:98:0f:17:47:d4:73:ae:19:38:ce:
                    5b:a3:cf:6e:c1:6f:eb:58:4a:37:ec:b5:65:79:5e:
                    aa:43:48:65:1f:de:7a:0f:b1:5e:95:b2:70:d5:2a:
                    f2:09:ae:fc:a6:f4:d9:8d:f2:e8:31:38:cb:8d:da:
                    62:26:c0:c1:2f:26:62:65:8b:0f:ea:e6:82:a6:63:
                    e5:f2:de:d9:33:c6:f9:2b:f4:2c:77:2f:61:7c:a5:
                    83:a0:a6:3c:f2:d1:8a:53:f1:b2:08:b4:cf:7b:46:
                    0d:6b:40:35:72:8f:e1:2c:3e:f0:68:20:c7:37:64:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E8:AA:3D:7C:40:73:02:E0:82:BE:F1:D3:E8:6C:DD:1F:77:68:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c16f003-ee41-41b2-8cea-44b5f40681eb/8e68d137-01dc-36f1-9d8e-0897ef473b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c16f003-ee41-41b2-8cea-44b5f40681eb/0c16f003-ee41-41b2-8cea-44b5f40681eb.crl

            X509v3 Authority Key Identifier:
                keyid:C2:82:80:48:D6:71:70:A4:E2:62:4D:7A:92:E9:87:03:13:D6:BA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c16f003-ee41-41b2-8cea-44b5f40681eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f889::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:cc:46:8e:5c:a4:d8:5f:33:28:75:c6:f3:b3:d0:b0:59:02:
         20:f8:fd:a3:97:42:cb:46:4d:d9:af:88:d7:43:57:23:0f:ad:
         bc:f6:31:aa:ad:00:a5:4c:c1:5f:84:da:9e:39:c2:60:bf:07:
         4a:41:74:3d:82:f0:99:a3:fe:3d:81:a2:36:1f:77:4c:a5:41:
         ec:be:b7:14:fe:83:2d:3b:3a:85:8c:64:ab:90:65:3b:cc:bf:
         f8:69:8f:a4:7d:6b:89:0a:5d:ed:15:4c:81:3a:30:0a:ca:89:
         84:61:ba:27:96:54:95:93:dc:52:51:67:8f:65:12:71:ab:25:
         4c:fe:3e:97:b9:9b:51:e7:12:51:c9:0b:f5:99:37:82:94:c7:
         fe:19:77:d6:8b:0b:80:9e:01:bc:ad:2e:c7:33:79:89:85:81:
         9e:a4:8b:79:4c:34:df:a8:b7:28:9c:d5:04:60:a8:be:58:85:
         cb:df:05:be:0d:88:81:28:60:bb:59:c5:0a:5c:5c:8a:d6:d8:
         00:0d:28:40:00:09:a0:ed:9d:72:24:ac:4f:a8:85:62:60:9e:
         5b:5d:88:2d:b7:25:10:0e:86:88:5d:2c:24:c0:09:e2:d5:81:
         c7:52:2e:e0:93:0d:02:39:db:ed:51:37:af:32:f6:b5:5b:3e:
         8e:d7:fc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:41:01 2026 by rpki-client