Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa
File:                     f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa (raw, json)
Hash identifier:          XK5WaHUQvSQMgjaLiK3vGH2GR++CqGIw0fJvKAeO8E0=
Subject key identifier:   C9:27:C6:DA:3D:DA:37:1B:5C:3C:BB:02:40:E6:8C:04:E6:B4:0D:59
Certificate issuer:       /CN=13fecd24-0da7-4140-9636-71a72de851ec
Certificate serial:       010D0C9F4328584DE9B0848A5975B9362F5B4380
Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     396871
IP address blocks:        2604:d0c0::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:84:8a:59:75:b9:36:2f:5b:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=44cc8b71-4e37-4912-a1ba-5a27b26fe8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:fe:6e:a0:79:b0:bd:9a:ed:f9:ac:fb:29:
                    f5:f5:e2:f9:5f:a4:7a:a7:c9:4b:4e:01:81:62:6c:
                    51:86:42:23:3f:dd:2f:ad:c9:9b:f2:f9:3a:4c:4e:
                    0b:bb:2f:43:51:e7:23:83:7e:de:ff:53:63:41:ee:
                    fa:45:ec:85:06:f5:9f:03:bd:df:af:18:4d:93:37:
                    bb:2b:23:4d:da:01:13:a0:0b:75:39:21:f5:9a:7c:
                    a7:8f:da:82:61:0f:c7:42:39:3a:ef:68:3b:4e:ca:
                    b6:5a:ec:f0:36:55:7d:f5:b4:6f:3b:4c:af:ef:c8:
                    82:49:a1:ca:42:7f:d7:8f:42:fc:8c:c4:6f:d2:65:
                    46:d5:e9:0d:59:17:9b:30:55:8b:5f:1c:ea:b4:eb:
                    10:8c:90:74:28:5f:4e:96:9b:60:4e:c0:32:36:db:
                    74:ff:e7:23:f8:dd:4a:eb:96:fc:d3:2b:07:11:09:
                    cb:cd:4f:4e:67:e1:1c:7f:83:68:2f:be:56:09:62:
                    37:8d:84:49:94:12:99:d3:f0:b6:d4:f3:16:b8:1e:
                    59:21:65:17:74:89:4c:8f:8d:87:da:23:28:a7:46:
                    82:a7:45:f9:f9:c8:9b:44:85:76:00:b6:30:a8:7d:
                    70:71:49:ce:8f:d1:b6:5d:e5:21:40:41:5e:1c:49:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:27:C6:DA:3D:DA:37:1B:5C:3C:BB:02:40:E6:8C:04:E6:B4:0D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl

            X509v3 Authority Key Identifier:
                keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:66:8e:d3:2b:e8:bb:d4:74:d6:e0:2f:ca:60:bf:2a:db:e9:
         5f:00:59:e1:0e:02:ea:21:d0:c9:97:9f:24:9d:c6:b1:50:ea:
         d3:be:b4:e9:fd:00:ec:8c:f5:f6:a4:bd:01:2d:38:a1:e2:7c:
         fd:cb:d6:cf:67:f2:20:ee:60:d3:23:2f:b8:f2:6a:c0:d2:06:
         86:60:85:16:c2:48:42:19:bd:22:8f:44:03:67:ea:76:59:a0:
         f1:d7:5b:21:12:df:1f:44:dc:35:04:ad:ac:3e:46:9e:56:41:
         f7:72:9d:ce:1a:57:9d:ed:cd:60:5d:7a:df:9e:31:d6:e7:f2:
         7d:b7:fa:6a:13:9e:c1:da:b6:25:d2:24:bb:14:a9:a8:f2:9f:
         8e:10:32:c2:f2:4f:ab:80:d4:05:57:c7:02:a6:36:2f:c3:d7:
         84:1f:b4:eb:0d:4d:6f:58:ea:cd:e9:6c:d8:db:7e:2e:96:b9:
         8f:b8:a7:69:a6:6c:be:1c:23:dd:d3:7e:23:0d:3c:f9:b6:27:
         bb:28:b1:e5:9f:05:06:fc:82:ab:cf:02:19:78:84:e0:2b:77:
         00:e2:d3:e8:36:68:2b:72:a9:1a:9d:d7:d4:1f:6d:70:2a:f0:
         b1:94:c6:c2:3a:97:02:5c:95:31:74:48:0f:a7:ec:5d:7f:fe:
         01:b0:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:24 2026 by rpki-client