Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fcbfa343-9ac0-3e1f-84d6-539cbd6d4ded.roa
File:                     fcbfa343-9ac0-3e1f-84d6-539cbd6d4ded.roa (raw, json)
Hash identifier:          tYkLODuoZcvmuICmkiGxyasKUkyO6oiEmTjW4KuHxj4=
Subject key identifier:   F5:0A:EF:0E:97:33:2E:83:15:71:E9:B3:D3:2A:DA:05:B1:B5:40:03
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584D80FFD5434B9BF7AB8BA58780
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fcbfa343-9ac0-3e1f-84d6-539cbd6d4ded.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     401659
IP address blocks:        2602:f5c1:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:d5:43:4b:9b:f7:ab:8b:a5:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=b72e7759-bd2e-4c3e-9dd1-8db9ccd79b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:45:da:f8:73:e8:00:2e:8a:79:7e:85:cc:
                    e7:ac:4a:d2:74:70:b3:14:06:5e:29:ec:8b:66:17:
                    6f:25:9e:56:68:da:36:cc:57:75:f3:d0:a8:8e:65:
                    cc:a4:57:c9:c7:0c:d5:f9:35:ce:a3:e9:c2:b7:96:
                    d3:fe:d4:3f:76:44:38:98:52:02:b3:f3:ef:af:8f:
                    5c:d6:30:de:d6:6b:ba:0e:2a:0f:06:a5:98:63:fa:
                    da:cd:22:f7:ac:7a:14:ca:fc:e9:b8:fd:f4:a7:10:
                    fd:83:b5:48:da:03:bf:bc:cb:2d:98:95:24:7a:e0:
                    71:b6:69:54:42:62:86:9d:f4:da:41:0e:2a:06:e2:
                    16:b1:0b:51:86:5f:6d:6f:c0:3f:93:f5:cc:02:de:
                    e3:52:09:2e:d0:cd:5f:da:62:8d:28:b1:ee:20:8b:
                    f6:47:1d:ae:4b:9a:b0:7e:dd:84:b6:82:04:10:82:
                    3d:56:20:3a:a3:2e:5b:73:94:45:93:30:87:2b:d6:
                    8f:a6:49:00:f9:f5:d0:9d:a3:e1:49:a2:a4:b8:24:
                    4a:94:5a:f4:54:6a:21:e5:74:b6:5d:0f:2c:5d:2a:
                    58:14:9f:cf:c3:0e:de:97:31:40:30:11:63:1a:94:
                    76:5d:94:7b:2b:ac:08:d8:b2:ae:e0:56:75:65:6b:
                    e9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0A:EF:0E:97:33:2E:83:15:71:E9:B3:D3:2A:DA:05:B1:B5:40:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fcbfa343-9ac0-3e1f-84d6-539cbd6d4ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:80:2c:d5:45:8a:55:35:dc:ef:28:04:fd:61:05:19:8f:cf:
         c0:95:f0:bb:ba:22:c1:6c:d0:97:32:bc:cf:45:25:7f:e8:c8:
         5c:b4:fa:1e:f6:10:2f:e1:ed:92:11:9f:4f:48:a3:75:b3:5f:
         0f:fe:a5:41:a4:f4:d8:03:29:89:b6:82:a0:13:63:bc:20:83:
         0c:4d:6d:9b:41:e2:af:4e:12:ac:73:c7:d5:93:c8:ad:bc:07:
         bc:02:62:cf:77:16:8b:c5:69:da:51:02:fa:29:a9:be:72:e0:
         c4:9a:84:07:c5:6d:b5:79:0f:9c:b6:6a:62:2d:24:f4:bd:c2:
         cd:cc:a0:d9:a5:e1:c1:38:dd:17:b4:68:fe:45:74:18:04:bf:
         3f:ff:e5:b3:6b:45:96:76:15:62:d4:15:d6:f9:0a:a4:1a:35:
         b2:32:ab:e3:34:35:82:98:ec:3f:e0:80:fd:e2:59:b8:24:86:
         7c:aa:a9:95:d1:41:58:d3:a5:a0:0c:b7:80:a9:4e:a8:40:e7:
         d6:f0:bc:77:e8:96:41:16:c8:4b:4e:4b:14:7c:6b:a6:36:e1:
         2f:ab:a2:12:8f:81:88:3a:98:34:f7:ca:94:5c:e8:2d:1b:55:
         db:cf:87:7b:7a:e4:77:1f:44:74:f2:de:60:aa:52:4c:45:3f:
         6d:73:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:45:45 2026 by rpki-client