Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/71a63c70-3ce0-3c7a-8db2-d4a981430241.roa
File:                     71a63c70-3ce0-3c7a-8db2-d4a981430241.roa (raw, json)
Hash identifier:          AtmIxuydv7hAxyL3QkCuQ0HCL0mwmxGRcS1Psp4mpL0=
Subject key identifier:   8B:A7:E7:0F:97:80:B2:1D:61:8C:F0:A1:56:7E:0D:1C:AF:5B:2F:55
Certificate issuer:       /CN=2b564b98-807f-4472-b081-8e4364ab6410
Certificate serial:       010D0C9F4328584DE5807EA61B9343ABD508B378
Authority key identifier: B6:1D:CE:E8:86:25:13:83:CF:B9:AD:6C:15:01:96:64:E0:6A:03:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/71a63c70-3ce0-3c7a-8db2-d4a981430241.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     402000
IP address blocks:        2602:f554::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:7e:a6:1b:93:43:ab:d5:08:b3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b564b98-807f-4472-b081-8e4364ab6410
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=178ded41-de87-4342-99e6-4d51a0a9d8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:94:27:f4:a2:e1:c3:e6:0b:96:6a:90:64:
                    f1:1b:ce:02:6d:cf:08:b6:77:47:09:d5:bc:78:af:
                    40:b5:6e:f4:b9:7f:de:3a:4d:b2:4f:95:d5:5a:8a:
                    cf:1e:98:3e:0e:c5:9e:e2:79:85:37:9d:03:a9:d3:
                    26:b4:f0:2e:d8:82:4c:99:07:d8:c2:60:35:b0:40:
                    07:66:3c:d2:db:e8:b0:75:2a:bf:6c:0a:db:c5:9c:
                    f2:0d:32:b9:d7:f6:41:fe:7c:df:68:fd:34:e4:8a:
                    78:cf:85:39:53:50:89:1a:ea:50:d1:86:87:1e:29:
                    57:f0:dd:cf:80:12:e8:90:60:69:06:4d:2e:ea:ed:
                    cd:45:8e:87:0c:ef:78:c9:25:3a:e8:2e:6f:d4:ed:
                    7e:8b:8e:49:03:cf:2d:bf:54:53:15:32:bb:51:d6:
                    a3:93:95:92:44:a1:f0:ba:45:62:c0:89:d1:6d:c9:
                    44:cd:a6:f8:38:51:14:78:ed:40:c2:5c:38:13:42:
                    78:21:19:70:62:60:55:2f:24:81:23:d3:76:56:7c:
                    30:a0:f9:9a:b6:2f:36:6c:13:45:2b:5f:39:46:67:
                    b8:48:8a:31:7c:7f:9f:03:ff:dc:07:68:ba:ec:a5:
                    fb:06:a1:48:0f:a8:e4:38:9c:ff:99:72:8b:f4:c8:
                    41:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A7:E7:0F:97:80:B2:1D:61:8C:F0:A1:56:7E:0D:1C:AF:5B:2F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/71a63c70-3ce0-3c7a-8db2-d4a981430241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1D:CE:E8:86:25:13:83:CF:B9:AD:6C:15:01:96:64:E0:6A:03:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f554::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a1:90:9b:84:c2:72:06:32:9b:b2:03:37:f2:50:f9:7f:8a:
         75:7a:57:c6:d2:f6:48:f4:45:77:ff:e1:c1:19:1b:3c:f7:3e:
         d7:23:b0:9f:63:73:65:00:d1:e1:0a:30:36:c7:c1:2b:7b:0b:
         91:08:90:69:a9:e7:48:f2:17:66:50:3b:8e:e6:3f:d1:30:31:
         aa:be:b1:36:72:bf:94:65:a3:fd:7e:6e:36:e9:39:51:1c:27:
         ea:cb:ba:f9:c7:df:cf:e3:19:c6:2f:b1:b1:1a:25:b9:a2:09:
         5a:9c:cb:a0:22:60:7b:c4:de:bb:b8:5b:fb:1b:70:93:bf:6a:
         65:84:46:f2:73:8a:cb:78:8a:4e:9e:57:32:c0:19:7d:81:c8:
         f9:8d:4d:6e:18:1f:56:64:4a:46:9c:84:72:b4:7a:82:88:5f:
         00:2b:12:d7:36:e1:d8:ab:9f:cf:df:7c:28:c3:bf:a7:43:bf:
         17:d5:ad:ff:37:ad:05:08:b2:3c:94:6b:0a:92:32:2d:03:d4:
         85:52:66:28:ef:0a:4d:b7:d4:49:d6:04:f0:e1:64:c6:e4:4a:
         0a:15:db:bc:13:b2:64:a8:d8:7b:ef:f7:9e:38:ca:c4:31:4a:
         06:bc:2b:5c:23:b5:f8:d0:69:91:44:b3:29:5f:a3:88:8c:5d:
         55:21:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:10 2026 by rpki-client