Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/f204cb4d-22af-3e8f-8171-b184c97add9e.roa
File:                     f204cb4d-22af-3e8f-8171-b184c97add9e.roa (raw, json)
Hash identifier:          UGi8ZGJ2LIRqiTAZqsY5WaLgw6S3vcxLW3PfGeQLp20=
Subject key identifier:   6A:13:6A:0E:53:28:A9:1F:72:3B:7D:69:27:B8:0A:5B:D4:9D:A6:5B
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F4328584D746FD7C9D4E920ED43B85300
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/f204cb4d-22af-3e8f-8171-b184c97add9e.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     3755
IP address blocks:        2620:f:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:d7:c9:d4:e9:20:ed:43:b8:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=81a6d225-23e3-414b-b010-8687545e78ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:be:b8:50:17:09:7f:71:fd:6f:54:90:4a:
                    d5:66:13:0b:98:83:ae:89:62:39:38:9c:22:0d:90:
                    34:7c:2f:9a:1d:f9:cf:2d:26:60:da:91:cc:af:ba:
                    85:29:10:89:75:44:a7:fd:e8:61:9b:88:04:d3:07:
                    b7:c3:0f:68:0c:df:8a:b1:48:43:29:66:93:e4:63:
                    b1:39:19:f4:61:33:61:f6:e0:f8:81:f6:1d:79:9b:
                    c0:2a:8c:a2:90:4a:9f:46:69:8c:1a:d5:89:cb:1a:
                    89:91:f8:c4:7a:5c:a5:5f:af:9b:59:ef:f5:eb:d4:
                    87:76:74:bf:ec:51:fb:b0:ea:5b:73:a0:34:cd:05:
                    3c:11:90:1d:38:d6:2d:92:2e:97:84:05:37:91:c7:
                    51:9e:9b:fe:47:97:22:b4:1c:4a:7a:d3:40:5c:9a:
                    97:b0:29:03:20:26:af:85:07:1b:9f:00:43:da:06:
                    87:10:b5:fa:c5:7e:67:c2:84:b3:ad:f2:4b:c6:98:
                    e6:5c:0a:bc:b2:e6:ba:33:cc:74:19:6e:c0:cb:de:
                    48:20:64:00:2a:f7:ce:b4:df:8d:04:02:4f:2c:b8:
                    a2:ef:e0:a8:69:d5:7a:fe:d5:8b:08:46:b4:bf:c3:
                    be:30:29:11:9e:39:bc:46:98:f9:32:84:2a:ab:a8:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:13:6A:0E:53:28:A9:1F:72:3B:7D:69:27:B8:0A:5B:D4:9D:A6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/f204cb4d-22af-3e8f-8171-b184c97add9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:57:93:40:a1:72:2a:6c:ff:86:81:e3:d1:9b:d1:fe:ff:
         27:43:73:69:5b:b9:17:19:cf:79:24:c4:32:e2:5d:d6:47:a0:
         e3:d3:43:e2:a0:f5:18:96:13:7f:fb:b4:8c:ad:bc:33:a0:b7:
         d6:70:14:90:6f:76:85:44:11:cd:6d:b0:a6:58:db:2d:84:2b:
         87:76:0b:55:ca:08:f4:29:87:62:97:c2:37:98:30:96:b0:b4:
         8d:e6:d6:7c:cf:79:e0:48:33:f3:bf:63:d4:8a:2f:e9:d6:c6:
         57:33:46:0e:0d:70:88:bf:5c:6f:70:99:9e:95:b7:25:70:6f:
         96:cc:d6:fb:f8:e1:4a:54:ee:e6:a8:c3:50:2b:6a:bc:b0:1b:
         19:7a:a2:d0:aa:27:ff:d4:bd:f6:c7:14:e9:77:b5:9b:1b:4f:
         fc:b0:e1:6a:a4:f6:36:88:b6:6e:2d:18:4c:48:51:80:4e:7e:
         17:42:de:4f:dc:ae:89:9f:43:dd:44:70:cf:26:4e:8a:2d:cf:
         7b:c3:63:ef:c0:0f:34:3e:ac:43:31:d8:20:ab:53:ed:1c:74:
         9c:ab:c1:22:f4:22:45:7d:5a:59:bb:94:8c:4d:36:e7:53:fc:
         7e:31:e2:7d:db:0b:d9:84:37:e6:31:6d:f6:02:f0:1b:8e:7d:
         6d:df:70:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:43 2026 by rpki-client