Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa
File:                     21945cb7-acae-3edc-9a34-60c668bc2e9b.roa (raw, json)
Hash identifier:          EyhT3wanS5Q4TQgBcCdp+l9U8nLFyUwnEvHnVpFIgEo=
Subject key identifier:   29:95:6D:C1:7A:66:1C:EB:AD:D0:6B:BF:C9:0B:9F:37:A9:82:BF:5F
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F4328584E253EFF89F1A7451B10943CC0
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     395287
IP address blocks:        2620:128:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:ff:89:f1:a7:45:1b:10:94:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=5e626839-57d4-4ac6-8463-d6bfe14a65eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:3d:59:fa:4d:46:9f:da:34:82:99:b4:3f:
                    6d:99:ee:a2:2f:df:2c:cc:44:1d:fb:56:2a:5a:b9:
                    8a:85:c8:e4:2c:33:93:be:33:a3:ba:06:8d:6e:07:
                    7f:7c:43:23:b1:c0:32:ac:75:fd:7f:49:ac:b9:05:
                    01:dc:97:27:ae:40:85:6a:9a:8d:7c:3d:ea:e6:be:
                    90:a2:8b:e9:d1:1f:61:e9:a5:e4:ec:70:8b:dd:2a:
                    1c:36:81:f5:dd:9d:7b:10:fc:f5:a0:27:a9:55:08:
                    86:2d:d5:06:9a:2f:2a:a4:16:89:56:24:b8:dc:5a:
                    e2:42:67:32:a0:94:16:85:f2:61:db:e4:c8:dd:d9:
                    f1:30:54:64:c7:51:a8:81:a0:eb:62:cf:fd:d6:9d:
                    b9:c3:33:38:4a:28:ce:e5:a9:14:15:f8:76:ce:51:
                    e3:4b:c1:5f:f9:af:ff:d2:94:28:1a:52:c6:81:47:
                    d7:81:06:d3:ff:e0:8a:18:30:42:d5:c7:6c:bb:ac:
                    5e:4a:1a:c9:34:b3:a6:b1:bd:2e:1e:29:6f:a9:ca:
                    cb:48:58:24:ed:c5:ae:98:5c:ef:ad:0c:0d:b2:1e:
                    2f:c4:bc:6c:9e:3c:84:4c:ef:80:fc:28:12:f3:c0:
                    6c:60:47:a1:40:ee:33:7f:4f:9a:f2:ff:22:b7:b2:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:95:6D:C1:7A:66:1C:EB:AD:D0:6B:BF:C9:0B:9F:37:A9:82:BF:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:128:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:43:bd:9b:f5:dc:c2:43:52:06:86:92:09:fe:7d:0c:a3:4d:
         9a:04:d0:2e:c0:30:a9:47:10:a5:fc:e4:f3:6c:14:8c:62:20:
         44:8c:8d:c0:41:0a:12:54:bf:0a:5b:33:52:46:c7:ca:17:1c:
         73:33:ef:2a:56:23:bb:19:00:04:e5:53:b6:12:d0:67:c5:94:
         73:af:ae:9d:71:1e:13:cc:97:73:2c:5a:34:5c:90:cb:0c:29:
         ef:45:bb:67:94:d9:68:1d:a2:96:84:8a:39:55:94:6c:c6:33:
         22:19:a7:fa:cb:5c:a7:33:bb:57:8d:92:93:a1:93:cb:c1:56:
         a1:69:09:a0:6c:4a:46:fa:75:ee:d9:30:dc:5f:69:69:93:a5:
         9d:4d:ed:ef:47:6b:11:66:af:63:c1:c5:67:81:d5:87:2b:45:
         b4:c2:79:02:a2:40:80:52:4f:55:da:8d:59:66:fb:17:40:47:
         9c:c2:55:52:e4:e5:df:e2:6f:08:af:90:9b:5e:d3:be:22:d3:
         cc:b5:46:40:a1:4f:00:23:74:df:da:cb:dd:65:61:80:b8:35:
         24:5e:3d:f8:c0:04:4f:e4:b1:29:f2:19:05:1b:95:ad:a9:8a:
         e7:99:ca:a5:52:bc:24:ae:b4:8f:ec:a0:4c:71:7d:7f:76:d4:
         e5:2e:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:30:51 2026 by rpki-client