Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa
File:                     2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa (raw, json)
Hash identifier:          x0CQCX2P4tEHp3emmVtULS2DOfjklkIO7m4z9jLv2lA=
Subject key identifier:   88:EA:79:2B:DF:87:AA:F3:05:43:D8:9F:1C:70:68:42:F7:E1:D7:7F
Certificate issuer:       /CN=ab1a140b-878b-41cc-864f-08e0177f7325
Certificate serial:       010D0C9F4328584D6AAA741399AD4EA4DCEDA5C0
Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     20473
IP address blocks:        2602:fd75::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:74:13:99:ad:4e:a4:dc:ed:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=ee28ece4-0402-457b-99b3-7ad6af35fda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:b2:b9:4b:6d:60:2d:19:80:13:2d:2f:cc:
                    77:6d:ff:c2:0a:4f:1c:d9:0d:3b:8b:b6:72:e8:03:
                    5b:a2:7f:6e:64:51:a3:52:07:bb:73:0b:ee:b6:4b:
                    28:be:0d:61:9c:a5:89:9d:ee:1e:82:97:d1:41:48:
                    06:72:8f:38:38:bb:a0:db:6b:fe:bc:13:5a:34:86:
                    8e:2f:4f:b7:08:82:6e:c8:3b:bf:97:e4:71:f4:f5:
                    9f:75:3a:2e:11:d5:a8:be:d3:59:4a:4a:f6:77:fc:
                    e8:9b:0c:1b:59:26:34:47:86:10:08:80:fc:ee:9e:
                    b7:c2:62:52:76:56:82:eb:58:c5:71:63:a6:7d:f1:
                    e0:fc:b6:0d:73:c4:d5:01:b4:ff:95:d6:95:0a:a5:
                    9d:ea:cd:49:df:19:8f:14:56:19:f3:36:00:da:ee:
                    97:3a:2b:1f:4f:0c:c2:d1:c5:e9:63:1b:18:e3:1a:
                    2b:d9:85:e1:1d:16:e3:fa:33:a1:93:d9:ce:fb:59:
                    6b:a2:13:da:30:54:7b:84:70:47:24:bb:97:89:79:
                    ba:be:d9:a6:9e:fb:75:89:ee:6b:f8:25:0d:73:db:
                    20:79:9f:c0:9c:30:fa:b7:fc:12:01:d0:29:9d:f6:
                    34:2c:b1:46:a0:d3:ea:82:3d:47:33:9a:16:df:63:
                    57:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EA:79:2B:DF:87:AA:F3:05:43:D8:9F:1C:70:68:42:F7:E1:D7:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl

            X509v3 Authority Key Identifier:
                keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd75::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2c:a9:55:7e:81:ad:d4:e4:83:a5:88:7a:18:c4:96:79:89:
         93:3e:cc:45:36:2e:3d:96:fa:16:39:24:c6:58:54:3c:65:51:
         7e:66:0a:e6:a0:98:e6:5f:62:94:b7:68:d5:d3:e4:28:e2:0c:
         2d:fd:90:3a:8c:83:b0:5a:b5:0b:5f:0a:8f:5a:01:67:ff:95:
         a6:c4:60:e5:96:dc:02:cc:25:3e:6e:9c:5b:65:f7:6e:b2:2b:
         b9:4b:3a:66:39:7a:b1:4a:56:71:06:83:4e:23:37:e1:e8:66:
         5e:dd:3f:bb:8c:dc:ca:3d:c0:47:dd:5c:c0:32:b1:08:ca:dd:
         66:87:f9:07:7a:af:5a:4b:6e:d0:44:62:4c:04:7c:3b:dd:fb:
         a7:8d:e4:15:c2:b5:7b:3e:59:05:ae:24:7c:26:9b:e7:73:be:
         93:b3:7e:ca:40:07:0a:53:52:3f:f4:a1:5b:9a:62:1f:22:0e:
         0d:fe:33:77:5a:84:d2:88:65:06:a5:6b:88:53:fb:9c:8a:6f:
         77:c9:c1:a5:9c:cb:fb:d1:d4:3f:9d:ac:2e:24:71:ab:dc:37:
         d8:af:ec:9d:96:6f:04:cd:ae:1f:88:97:ae:86:84:5b:e8:ba:
         23:26:39:48:1a:9c:30:33:ee:d2:18:eb:33:e1:6d:98:fa:99:
         04:d1:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:22 2026 by rpki-client