Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/d271dde0-2fa3-31de-8ce3-cc167fb544d6.roa
File:                     d271dde0-2fa3-31de-8ce3-cc167fb544d6.roa (raw, json)
Hash identifier:          lS+F4pIjDg3e2cnrIvkzGEFKNZXspVSqkPQMMg6nUtM=
Subject key identifier:   9F:A0:00:F0:99:92:DF:07:7D:C3:13:5C:F9:59:59:4C:F7:6A:F7:3A
Certificate issuer:       /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef
Certificate serial:       010D0C9F4328584DEC7B39A878DA126BE7BB94E0
Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/d271dde0-2fa3-31de-8ce3-cc167fb544d6.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     14523
IP address blocks:        2607:5640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:39:a8:78:da:12:6b:e7:bb:94:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=32a0a85f-e8cd-4084-b2c8-c62f46a79012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:4f:ee:bf:0f:32:86:eb:8c:54:1c:c9:9b:
                    64:fb:87:e2:2a:c5:11:b9:91:af:12:c4:2f:a1:66:
                    dc:49:e5:69:06:88:02:b5:d2:02:15:53:53:f2:97:
                    d5:28:9e:0e:fe:b4:67:c3:6e:e2:ec:ef:14:52:44:
                    12:89:34:4a:cd:43:d5:e5:3e:1c:64:02:45:98:4f:
                    3c:c3:45:57:26:46:5c:18:d5:2f:d1:8b:8e:48:e2:
                    4a:19:c4:4f:de:d0:81:41:09:62:5d:44:f9:e1:96:
                    3d:c5:a3:ec:a0:e8:71:d9:7b:c0:20:64:20:03:92:
                    56:4d:be:57:f5:89:58:88:22:e6:a9:65:53:2b:8a:
                    62:c1:1d:40:fe:fe:72:54:a1:14:4d:48:2a:27:d0:
                    3f:9e:79:b9:c0:2a:96:52:34:f5:a7:8e:cb:ee:c6:
                    b6:9a:0b:47:9e:fc:e4:ae:a7:4c:66:05:dc:01:25:
                    99:a4:3d:dc:8e:9a:8f:e1:c2:f8:ad:a8:a3:03:93:
                    92:d9:ab:c3:45:cf:c5:9d:ce:aa:98:ca:d3:f4:54:
                    8b:3f:4e:ba:f6:1b:29:4c:6b:c0:4f:f2:a9:b8:1d:
                    1e:5e:50:0b:08:c1:8a:b6:4a:65:ab:8d:74:86:38:
                    bc:91:bf:53:6d:93:57:fe:b9:d9:54:70:38:c8:b2:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A0:00:F0:99:92:DF:07:7D:C3:13:5C:F9:59:59:4C:F7:6A:F7:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/d271dde0-2fa3-31de-8ce3-cc167fb544d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl

            X509v3 Authority Key Identifier:
                keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e5:e4:54:7f:43:71:b9:7a:41:bd:26:0f:ac:8f:31:dc:05:
         bd:96:98:bd:98:76:57:dd:f8:9d:ff:4c:e4:63:aa:d8:4a:ad:
         85:5e:b7:2a:dc:a0:0b:e7:61:d5:64:9a:c9:4f:d2:62:ba:f4:
         b0:ff:75:dc:60:58:63:ec:43:a2:74:6e:52:ed:9e:78:50:9e:
         a4:26:55:3b:6e:8d:a8:f6:cf:0a:4f:5e:98:f7:09:7c:e7:7e:
         b3:16:b1:09:d3:ac:e4:89:d7:3d:52:78:ad:60:92:a7:46:3a:
         5f:11:23:3c:1d:85:aa:46:10:09:bc:5c:ea:91:2e:05:b8:f6:
         14:b9:1f:49:96:4e:e8:a3:e8:b5:38:2d:31:dc:95:6a:66:ef:
         a7:ed:21:b9:2b:a5:97:09:84:1b:62:69:7a:a6:e1:fd:50:ba:
         99:97:29:63:7b:db:88:7c:75:09:14:3d:8d:2a:53:c4:b7:0c:
         c3:09:91:6a:81:d3:60:aa:7a:a6:da:f7:b4:71:04:66:b3:be:
         fb:b7:08:9b:97:39:62:a0:c5:1b:73:98:28:55:73:3f:23:9e:
         d1:d6:99:ca:26:4f:40:52:e3:25:d4:c7:c5:00:ea:89:b7:40:
         c8:11:b3:e2:75:68:99:7c:e7:6c:af:c8:1f:ae:64:51:ed:3a:
         2c:75:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:21:41 2026 by rpki-client