Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e89248d4-873b-37e4-be54-5eb1398e7abc.roa
File:                     e89248d4-873b-37e4-be54-5eb1398e7abc.roa (raw, json)
Hash identifier:          e1XKN032UekcLu4IayEV/4Y9ABPiVLLUSjOL6gn3DCc=
Subject key identifier:   F2:1A:CD:7A:CF:BC:18:FC:44:B7:8F:2F:39:38:F1:58:39:6F:A0:B4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DFBD5E0E11220136D9292F140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e89248d4-873b-37e4-be54-5eb1398e7abc.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:da80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:e0:e1:12:20:13:6d:92:92:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=ac1844ee-57b1-4c91-b088-f5854ae3f1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:f8:64:50:a9:dc:8c:7c:60:6d:1f:45:5d:
                    f7:ca:03:42:61:79:f1:57:f1:2a:16:cb:67:5c:f7:
                    ba:ab:6f:10:d3:df:e5:70:16:88:e5:bc:a5:f4:90:
                    0d:dd:92:50:96:4f:91:a2:b3:8b:69:38:9f:82:90:
                    e0:6c:43:31:67:6c:bd:59:4e:4a:d5:a2:28:02:12:
                    9c:05:7a:a1:20:d3:0b:4d:ae:50:62:98:47:94:72:
                    aa:8d:b5:51:81:ed:a5:aa:32:15:1c:2b:a8:d5:4c:
                    04:4c:df:d2:fa:33:18:7a:f9:19:5b:8f:88:02:99:
                    aa:d9:c6:bb:8e:45:2e:d7:5b:05:9d:ae:33:aa:6c:
                    eb:ef:52:97:6a:e9:a6:e9:cf:fb:8c:d5:58:78:70:
                    ac:54:d1:4d:5d:8a:63:b2:a8:18:3f:37:25:fb:65:
                    bd:77:73:27:f9:02:21:90:d7:6b:c6:60:0d:ef:f4:
                    12:2d:87:b4:73:70:40:fa:3b:10:72:78:ac:5e:3e:
                    11:f6:85:ee:1e:28:bd:ee:a7:cd:e0:21:ad:f3:ce:
                    1b:46:04:cb:f9:54:ff:50:91:28:b6:7d:d0:f9:05:
                    9e:fc:68:23:c3:e4:6c:5e:ce:2b:3f:3a:52:5a:af:
                    9d:2b:99:3e:3f:61:ea:42:66:64:d8:2d:d7:28:e3:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1A:CD:7A:CF:BC:18:FC:44:B7:8F:2F:39:38:F1:58:39:6F:A0:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e89248d4-873b-37e4-be54-5eb1398e7abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:da80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:ce:77:6b:a1:1b:d9:24:ea:a1:7f:26:60:ec:b4:18:17:
         ff:a0:64:97:8b:e7:dd:ba:93:33:b0:55:03:05:af:95:02:a9:
         56:ee:96:b0:a6:a9:95:54:84:3d:78:7e:40:32:71:11:2a:1f:
         02:39:5a:43:c7:be:6f:4f:08:08:80:a8:97:a9:18:ca:db:56:
         fe:9a:37:34:c9:79:fd:52:0c:eb:75:ba:77:6d:cb:f4:ae:fd:
         0e:f6:a2:2b:c1:26:6b:63:b4:69:a0:41:20:3a:16:92:3d:81:
         41:42:d6:55:bc:aa:48:8b:62:ea:d9:21:41:ee:a1:11:a9:c3:
         a7:12:17:e1:44:4b:47:87:d4:21:aa:21:71:94:35:f7:e5:bd:
         7b:15:f5:bd:c4:c6:8d:f4:f8:5a:cf:d8:36:49:1e:fb:c7:66:
         b4:61:38:b4:95:cf:ed:db:c9:1a:59:df:21:b2:fc:4e:b2:33:
         5d:30:a0:75:94:7f:b1:71:49:c1:20:96:18:53:be:87:05:02:
         b2:61:5e:c5:9b:cc:08:1c:c6:b0:36:d9:bd:07:9b:c4:34:ea:
         f1:2c:8c:89:3f:24:f2:52:04:62:e7:25:7b:5e:75:65:07:ff:
         c1:30:a8:bd:b0:a3:4d:35:42:98:10:a8:63:15:3c:fa:32:db:
         12:b6:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:14:12 2026 by rpki-client