Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa
File:                     12742b04-3c62-302c-a844-0e1fc03e34d6.roa (raw, json)
Hash identifier:          xuql0G3GUI3O/DbgXSnenVbE+R2y+czhxuCt2DJD/aA=
Subject key identifier:   91:C4:35:A4:65:FF:ED:63:F5:2C:1D:1C:B3:FA:AD:A2:E1:9F:F1:B9
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584DE9B086804A53038CD254D874
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     8987
IP address blocks:        2605:4300:2c1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:86:80:4a:53:03:8c:d2:54:d8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=f1b23906-0c5d-45a9-986b-c2266475f126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6b:22:f7:6d:dc:10:ce:f4:58:be:c0:5c:7e:
                    fc:48:a7:2f:f3:d8:9a:ad:c5:71:38:b8:9a:8e:51:
                    92:7d:a8:17:10:d3:3a:0f:9b:d6:7d:fb:1f:b0:f4:
                    43:2b:5e:05:8f:13:48:aa:33:9d:91:69:11:ed:40:
                    a9:26:7f:a5:c1:e5:94:0c:e3:d2:d4:ac:de:da:11:
                    39:ae:f5:32:bd:34:09:7d:48:7e:59:39:e2:ee:71:
                    4b:38:9a:30:71:b5:7e:f6:c5:41:77:21:5a:f7:f1:
                    23:17:48:c0:43:8f:44:e3:c3:23:a0:76:b3:56:64:
                    ac:b6:6b:c7:63:9d:db:0c:59:d9:06:20:a4:0f:5d:
                    c4:50:19:27:35:4b:47:8a:df:b7:88:03:82:8d:61:
                    2c:92:2e:ea:3b:cc:09:36:1b:a2:3c:e2:cc:3c:50:
                    fc:9e:f5:05:89:a9:5b:e9:61:a8:f7:04:ad:ba:01:
                    ce:21:3b:12:81:38:11:0a:f5:bb:18:ad:a3:e0:f6:
                    7a:73:60:ac:5b:f7:41:fa:d3:e9:80:42:28:42:70:
                    d5:4a:da:b0:66:a4:33:ee:d6:18:cb:56:21:77:40:
                    85:6a:27:68:da:cb:af:0b:f6:20:4e:78:d1:5d:bd:
                    56:e8:4a:0c:7b:5d:4e:29:e4:36:a3:9d:3e:84:b9:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C4:35:A4:65:FF:ED:63:F5:2C:1D:1C:B3:FA:AD:A2:E1:9F:F1:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:75:22:0d:f4:1a:1d:05:96:53:96:41:53:a3:d8:29:33:a0:
         d4:61:2b:43:32:ab:bd:44:c6:8e:0f:e9:9d:97:98:33:ce:86:
         7d:14:2c:db:7a:c9:60:a7:b5:ec:82:33:26:c8:ff:c1:de:29:
         a8:be:88:68:93:69:d1:e3:99:84:65:b9:22:15:e6:f6:b8:64:
         74:04:11:77:30:13:4a:ce:31:cb:37:a0:65:75:ec:54:26:22:
         6e:fc:94:55:cc:80:c7:03:cb:1d:18:a9:48:ce:73:d6:00:16:
         dc:f6:08:84:8c:77:29:b9:42:dc:4d:db:34:51:31:6c:ae:f5:
         c2:9b:96:10:53:46:12:63:32:8b:bf:5a:9d:27:c1:9d:f1:0d:
         c9:1d:b2:d7:df:11:37:30:1b:31:92:87:a1:ae:19:bf:b2:f9:
         21:52:f8:28:e8:a4:60:0d:2f:d3:98:f7:be:3f:df:5e:77:15:
         2a:45:80:67:8d:f8:aa:58:3a:3f:7b:52:0e:c5:4d:7c:2b:00:
         be:44:83:5c:25:33:da:ba:a4:22:bb:11:29:5f:57:0f:93:b2:
         52:02:68:43:d5:16:7a:8a:f0:3e:25:fa:ff:c4:e9:ff:a8:d9:
         7c:25:63:95:19:a7:36:59:68:37:7e:cc:52:30:82:de:76:f6:
         ec:f2:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:35 2026 by rpki-client