Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa
File:                     064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa (raw, json)
Hash identifier:          AuzydVUI8fCTg2gkoNjf9MtN8erNhuJr6vhTX8kvKRo=
Subject key identifier:   8E:2A:58:68:EE:79:27:22:0F:25:75:1A:85:E4:91:7A:94:93:9C:AD
Certificate issuer:       /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Certificate serial:       010D0C9F4328584D624A59BE70071C4925B1D4C0
Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     5400
IP address blocks:        2606:f100:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:59:be:70:07:1c:49:25:b1:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=1f538245-f786-4130-b222-97de268e141a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:89:6b:c0:29:14:70:28:f0:df:ba:37:c5:
                    8f:76:51:5a:ac:60:21:e4:cf:63:b1:4d:35:da:89:
                    ce:05:32:df:cd:9a:cd:66:86:7d:bc:42:c4:8e:66:
                    ae:01:17:11:10:e9:a9:6b:20:81:e7:f9:4b:c5:0d:
                    96:9a:58:3d:dc:6e:cb:70:56:69:7e:f7:e2:70:65:
                    da:70:1b:62:57:45:36:21:54:28:24:1a:8e:57:40:
                    98:63:f7:48:60:4d:e8:16:ee:80:1c:ad:c8:c2:f9:
                    32:b0:52:34:1d:cd:9b:71:e6:08:cd:76:41:fe:ad:
                    f7:39:f7:be:02:77:96:38:51:b2:31:06:f3:a1:c8:
                    e5:ea:e2:41:b6:3b:da:32:67:f3:15:e3:00:93:75:
                    a3:37:33:30:3e:fc:85:e0:ad:40:da:6f:c2:89:18:
                    bb:2a:92:bc:3a:ba:0b:90:da:65:b4:c6:c8:f1:dd:
                    54:6a:1d:c2:c3:41:1e:15:7e:9c:c6:fb:90:49:49:
                    14:73:b6:71:da:d6:18:b5:97:f8:bf:ad:c9:a3:db:
                    eb:52:c4:73:dd:b8:54:0f:17:22:86:96:79:35:df:
                    60:e6:a9:11:50:aa:ae:93:d3:94:b8:2a:26:06:a1:
                    8e:65:5e:80:d2:40:78:2c:9d:67:97:b3:0a:f9:e3:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2A:58:68:EE:79:27:22:0F:25:75:1A:85:E4:91:7A:94:93:9C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/064f3ce5-c9d6-3c98-a80d-0189a49a6fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl

            X509v3 Authority Key Identifier:
                keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f100:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:54:31:13:92:9c:b8:16:d0:de:fc:74:d2:66:3a:75:a8:c7:
         90:8d:40:d5:94:cb:b7:f2:9e:5a:04:5d:ec:4b:f7:a9:ea:9e:
         7d:3e:f9:15:fe:fb:7b:6d:2a:e5:01:71:ac:46:5f:28:e3:f7:
         f6:59:c4:74:74:a7:58:b9:4c:0c:27:3f:de:c2:b7:6e:4a:34:
         3c:98:ff:62:b7:66:33:d3:c4:09:23:98:28:a7:01:7f:a6:de:
         ab:ed:d5:9a:4a:8c:f0:da:6d:87:6d:99:f6:cf:83:b9:61:44:
         1e:d7:93:27:1e:5d:dd:69:97:0c:d1:f7:8b:de:d6:e0:1a:da:
         32:78:10:0d:03:1f:30:29:d3:c5:bf:64:42:52:91:cc:aa:c2:
         99:dc:3c:3c:2d:ff:01:6f:e9:76:b8:62:cb:37:1c:92:61:b0:
         00:3c:6c:2d:5a:25:2b:c8:01:d3:68:c1:0e:20:f9:14:ef:64:
         45:35:3c:b0:12:cd:bf:34:df:d5:b8:4d:b0:22:3a:b3:10:e3:
         4c:63:41:bc:8d:f8:f5:0d:44:c4:6b:02:ec:8d:c5:08:81:b7:
         35:8e:9d:ec:3e:1f:9d:b8:72:df:55:8c:93:9a:01:d8:68:47:
         55:79:fd:72:aa:98:4e:d3:e6:4d:a1:47:9d:06:89:c5:97:c4:
         c2:2d:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:22 2026 by rpki-client