Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa
File:                     cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa (raw, json)
Hash identifier:          65oXg0p+qsqFwsSr7w45jJ/NZ8GCPHrO88SQ2ZRjkkc=
Subject key identifier:   AB:C1:49:0F:91:81:42:F5:41:73:6E:DA:46:0D:5B:8A:48:CC:5D:90
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584DE84B3AD5D0AB06EB6DD61D40
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     399728
IP address blocks:        2620:98:e005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:3a:d5:d0:ab:06:eb:6d:d6:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=bbb86727-aacc-4041-b96b-ca927900fe5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:a7:72:b8:4a:35:47:00:8b:d7:7c:b8:2f:
                    24:a1:bb:8d:f9:32:41:a5:b8:d2:0f:37:21:10:d8:
                    16:8f:79:ac:b9:ca:28:a7:5f:09:85:b8:d4:9e:92:
                    5d:6e:66:38:16:e6:2d:ce:8b:02:25:56:68:f0:3a:
                    90:0a:82:2b:dc:0c:f9:e1:ec:7d:1d:ab:7c:36:e2:
                    bc:3c:22:f7:39:ca:0c:5a:9c:f8:f6:23:da:da:70:
                    69:de:43:2e:29:2d:e8:36:66:c9:90:09:84:b8:cc:
                    80:fa:8d:ea:0b:71:f4:6d:f6:c5:85:d7:e3:0f:9c:
                    06:8c:7c:04:b0:81:d6:c0:a9:bb:77:a6:28:82:9d:
                    f2:31:b3:85:30:ce:59:05:30:55:54:62:ed:29:73:
                    a0:f4:c2:1f:ac:a0:b2:58:1a:15:dc:90:11:37:f2:
                    ad:6d:e2:f2:98:42:ef:7f:b1:a2:64:e4:cb:4b:c5:
                    dd:e0:b5:3e:97:e5:81:3a:ed:06:4f:f7:a8:76:88:
                    3c:10:1a:63:43:08:c0:b2:f6:48:91:df:97:6a:4c:
                    15:db:b3:bf:84:83:8f:15:33:75:a6:4d:13:1f:3d:
                    b7:77:8e:4c:52:62:41:fd:b4:fe:7b:96:1d:63:64:
                    61:77:d6:e6:65:3e:a3:52:22:47:f0:22:4b:c0:6b:
                    07:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C1:49:0F:91:81:42:F5:41:73:6E:DA:46:0D:5B:8A:48:CC:5D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:23:7a:eb:66:50:bb:4f:fb:a7:05:ff:31:32:0b:dc:c4:
         c1:cb:15:e2:bd:35:08:b3:ca:24:a9:5b:43:53:b0:a0:05:7b:
         9b:40:19:98:e3:51:68:7b:9f:0d:23:cb:8d:2e:44:12:d0:a6:
         ef:82:32:72:18:ff:f1:c5:b0:9d:4f:69:1a:79:d8:e6:1b:3a:
         8f:9b:0e:6c:d5:7d:f1:a9:7d:de:72:6b:54:29:0c:90:77:51:
         ac:a1:d7:3f:da:66:dd:f3:e5:fd:a7:a5:8b:0a:50:7f:3e:fc:
         b1:b7:24:63:d8:ca:e4:79:86:e9:bd:b5:60:02:f2:64:88:a5:
         c7:f6:f7:63:56:2e:c7:5c:97:05:db:46:75:bd:31:e0:56:ff:
         1e:d0:e4:5e:97:41:ba:93:8d:e9:db:6d:b7:12:d3:96:16:42:
         6e:b0:8a:76:33:34:a4:30:58:1a:4e:e3:ec:04:75:7f:d5:ee:
         d1:13:5a:b6:f8:b0:e0:63:60:08:ad:de:ec:d0:26:f3:70:21:
         f3:fe:78:01:36:17:2f:69:7d:73:b1:a7:c4:d3:b3:c3:fb:99:
         43:a8:5a:2e:59:69:2d:62:d3:c1:a8:5e:1a:92:5a:7c:03:a6:
         2d:0d:42:11:b7:6b:6e:3d:a2:8b:65:3d:01:5a:1a:4e:a3:33:
         28:69:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:16 2026 by rpki-client