Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/60232445-db5b-3c06-a511-b1f62fa79ccc.roa
File:                     60232445-db5b-3c06-a511-b1f62fa79ccc.roa (raw, json)
Hash identifier:          sY/F1+tIzuIiw2jzTNmNN6nG2AJSen/KUDp4VA5MH7A=
Subject key identifier:   C6:02:91:5F:E7:02:29:EA:7B:AF:4A:8C:0E:07:A2:26:34:DC:BE:28
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F4328584D7CCFD8C23BDE88FCEB7D6CC0
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/60232445-db5b-3c06-a511-b1f62fa79ccc.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     7106
IP address blocks:        2607:fa10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d8:c2:3b:de:88:fc:eb:7d:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=9c964017-3d1b-40f6-90d9-6d49b53de602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:8e:e6:a7:12:6f:bf:97:77:fe:64:99:43:
                    0c:27:46:7b:37:c7:dc:e8:02:a2:09:11:c8:55:76:
                    fa:bb:ab:eb:0a:3c:f9:bf:88:35:e7:30:0f:5c:c0:
                    43:0b:7b:da:40:4a:60:d8:51:20:88:dc:70:d6:50:
                    9c:7a:a7:69:40:01:fd:1a:54:7f:ed:7a:dc:66:be:
                    0b:b7:75:12:f5:c1:15:3c:2d:bf:d1:32:8e:f5:3e:
                    a0:8e:07:b1:20:a0:93:4d:88:3a:5e:2d:b4:57:82:
                    e7:ea:57:43:5b:ca:f5:36:58:4b:0f:e2:7b:a4:50:
                    a3:4b:d1:e3:4b:e2:48:06:47:45:25:a6:b7:4f:4f:
                    36:11:ba:5f:10:d2:99:fc:e5:e1:0c:79:12:50:5b:
                    c9:6b:08:bf:b1:ca:6e:28:85:f5:21:95:c6:01:da:
                    56:61:ff:42:8e:de:f0:67:8a:d9:89:bf:4b:cd:6c:
                    63:20:75:e0:16:ee:a1:2a:6a:8b:27:2a:57:6c:92:
                    ac:cf:15:68:03:30:af:d3:b1:9d:eb:99:32:86:db:
                    ec:2c:ef:db:fc:1e:ed:fe:82:9f:54:3e:93:dd:48:
                    10:6b:7d:4d:e5:79:b0:7d:89:dc:23:75:56:6a:ef:
                    c7:21:7e:6a:01:2a:8d:3d:67:98:c7:07:93:06:c9:
                    c7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:02:91:5F:E7:02:29:EA:7B:AF:4A:8C:0E:07:A2:26:34:DC:BE:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/60232445-db5b-3c06-a511-b1f62fa79ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa10::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ed:8f:c0:39:17:09:88:68:df:47:f9:76:ce:61:09:da:d8:
         98:25:df:19:0e:1e:a3:24:a3:20:ec:9d:e4:eb:8d:39:95:f0:
         1f:e8:35:12:e4:42:45:8b:6b:60:52:73:63:a4:69:13:d7:ff:
         8d:84:32:fe:f4:a1:63:38:1e:cb:7c:70:f4:14:97:85:7e:cf:
         75:0c:6e:28:ad:74:d2:ce:f2:94:e8:94:e5:08:f0:84:c7:47:
         c8:90:da:ad:11:7a:ca:69:e6:7a:4e:da:8e:6e:21:df:92:20:
         27:93:86:89:07:28:a3:a0:67:15:f7:41:85:95:d4:fa:6d:f8:
         d1:98:30:72:34:e7:fa:4d:a9:83:47:dd:b0:c5:59:af:ae:88:
         93:b8:f3:60:80:a9:87:ee:e6:ed:7d:0a:53:87:e1:07:ee:41:
         63:c5:c0:9c:f2:48:74:c7:8e:df:96:d4:83:8e:94:d8:2d:e3:
         6b:e2:87:d7:0e:5b:d6:67:22:a1:d2:14:ee:eb:49:21:9f:47:
         d2:3c:9b:63:ba:35:8b:cb:dc:d5:86:6a:1f:19:4d:d9:5c:f9:
         6b:a7:42:3b:af:b8:fd:8f:3b:29:f2:75:83:ba:33:eb:19:ce:
         db:a8:06:86:55:dd:1a:e5:49:0c:67:cf:3c:7a:e4:25:4f:47:
         9f:87:4b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:33 2026 by rpki-client