Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/346126f1-afa9-35ba-8367-f2cf5b47395b.roa
File:                     346126f1-afa9-35ba-8367-f2cf5b47395b.roa (raw, json)
Hash identifier:          bFx/4QumG1xy1nJnD5Nea2Q6+QDBLBgbKnaZlzI2U/c=
Subject key identifier:   63:2F:84:67:BF:1A:4A:A0:87:C1:FA:93:01:47:1C:58:44:11:DA:E1
Certificate issuer:       /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
Certificate serial:       010D0C9F4328584E1FA99F27779AA7B1AF90A880
Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/346126f1-afa9-35ba-8367-f2cf5b47395b.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     33387
IP address blocks:        2604:4300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:9f:27:77:9a:a7:b1:af:90:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=17c9f939-072e-4ac1-a4d5-b977cded3d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:01:2b:b6:99:aa:d3:b9:c1:77:88:bf:37:
                    2b:ce:af:c1:8d:e2:5d:9c:86:f1:14:d1:c7:2b:d8:
                    b9:a2:eb:9e:f7:0e:bd:29:64:31:55:61:cf:57:a2:
                    c7:9d:b5:39:63:93:c3:bc:e1:2d:ae:45:64:c2:78:
                    69:e8:88:05:b7:74:e8:64:23:39:a0:40:72:ea:26:
                    89:9b:49:73:8a:97:f8:33:bd:fc:00:27:68:60:d6:
                    ad:49:b5:04:92:78:df:ea:e7:10:fb:b9:46:0d:f3:
                    26:65:f5:e0:a0:c6:12:30:dc:7c:41:18:e8:14:9d:
                    8a:1c:61:77:7d:df:d1:43:5d:46:ff:f9:2c:d8:48:
                    1b:c2:4a:50:c8:cc:d5:24:f8:0e:80:1c:73:fd:ad:
                    b7:d9:c3:13:c6:ee:14:49:36:dc:a5:83:84:99:f5:
                    15:95:f3:94:a9:17:67:86:ab:58:77:52:f3:c0:40:
                    a0:e2:e4:b9:de:ea:e6:eb:4c:54:e0:0a:ca:4f:69:
                    ed:b3:c1:e9:bd:a5:d3:47:1b:c2:7b:72:54:88:a7:
                    1c:25:00:83:f5:e1:48:a3:66:9c:f9:41:be:04:b4:
                    86:30:90:93:ed:ff:32:98:4f:56:d1:5e:15:02:63:
                    f9:b2:39:9a:a1:66:ca:6c:5c:0d:03:06:06:3f:05:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2F:84:67:BF:1A:4A:A0:87:C1:FA:93:01:47:1C:58:44:11:DA:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/346126f1-afa9-35ba-8367-f2cf5b47395b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl

            X509v3 Authority Key Identifier:
                keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:bc:f3:84:dc:08:53:82:fe:fe:eb:4d:94:e3:27:2f:67:0b:
         b7:1b:8d:ce:8e:dc:34:bd:e8:74:cc:38:19:b2:10:ae:18:c2:
         ce:ea:3c:8a:9a:68:f7:4c:55:20:63:c1:4f:31:e8:08:c9:a5:
         64:ce:62:89:dc:73:af:e0:82:49:80:14:ae:6e:12:5e:26:8d:
         33:fe:b8:7f:66:76:20:9b:ce:96:68:47:de:70:80:a5:f2:72:
         42:ce:48:ca:93:b9:58:48:ca:c5:97:85:b9:a9:9c:4b:22:4d:
         e6:e6:1e:d1:47:1f:d2:41:80:b4:ff:5a:54:44:3c:16:db:77:
         05:9c:5f:12:75:40:b4:ef:a1:5e:06:c1:0c:02:db:bb:a1:81:
         e7:66:f3:13:44:53:e4:24:14:9a:00:81:c6:0e:f2:6c:8f:ed:
         c9:d3:4e:29:a1:a0:dc:c6:05:90:fd:be:de:fc:59:ee:96:94:
         70:c0:2b:f5:9a:f9:d9:09:e8:f3:05:75:7c:ba:ff:b0:89:88:
         2b:cb:7e:51:6b:cb:6a:24:0a:07:73:ca:70:a7:39:7a:ea:09:
         d9:d9:d6:f9:1d:4d:bd:d7:70:b4:6a:4d:15:5c:22:4c:87:3a:
         e4:c2:b4:31:18:c9:f0:09:7a:5a:f5:77:dd:96:17:7c:00:7f:
         be:67:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:59:52 2026 by rpki-client