Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa
File:                     6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa (raw, json)
Hash identifier:          aoSzDybuG/MEf9DW9P+GZH/cLMji19W4Vs30DgTkYs4=
Subject key identifier:   DB:5B:EF:6D:73:EE:3A:13:6C:FD:91:05:5E:0D:B5:78:D0:35:57:BC
Certificate issuer:       /CN=7ea21a7b-596c-45f8-899e-6879815f26b1
Certificate serial:       010D0C9F4328584D7CCFDF323671EEF300DB6B20
Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2620:85:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:df:32:36:71:ee:f3:00:db:6b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=79928eea-b689-4c03-9bc4-749d84454d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d6:29:c6:20:fd:03:f0:99:76:b8:63:09:6a:
                    79:78:50:34:e7:93:98:49:93:cc:97:60:c3:37:a0:
                    c5:45:cf:83:49:9a:ec:c1:d5:ed:1f:27:2c:ed:5e:
                    3e:71:ee:26:99:45:35:0d:bd:48:56:03:a7:e1:ef:
                    d2:4d:74:ec:7a:68:1b:1d:4c:22:a8:76:de:66:d8:
                    6d:69:b5:c4:95:7d:2d:01:20:94:2a:9f:67:0f:33:
                    b7:a6:5a:74:9d:84:8c:1a:c0:d8:be:48:91:c2:06:
                    14:08:1e:36:06:30:ce:f7:d1:b6:8a:ee:ff:8b:d5:
                    22:63:b1:5f:ef:d2:01:33:76:f5:63:43:75:d8:b8:
                    f1:db:29:e4:b0:37:7f:2a:df:8a:6a:61:27:13:e6:
                    52:1b:6c:d0:36:ce:37:7e:7b:0a:0f:17:7d:9b:fb:
                    7d:b5:ee:ca:5f:86:44:7a:b9:1d:5c:11:e5:cb:a1:
                    f3:16:99:03:a9:73:4f:20:bd:92:50:a9:3f:d2:b3:
                    72:da:16:6c:d1:c2:af:44:d4:91:84:58:e6:b4:4c:
                    02:d8:10:57:a9:2b:93:9a:b0:66:44:25:ec:89:4d:
                    31:e0:83:7f:67:cf:29:83:66:d0:41:88:2e:17:03:
                    73:df:db:51:3f:18:7d:f6:6a:5e:55:20:bd:99:50:
                    66:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5B:EF:6D:73:EE:3A:13:6C:FD:91:05:5E:0D:B5:78:D0:35:57:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl

            X509v3 Authority Key Identifier:
                keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:85:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:64:45:af:70:35:bd:46:af:83:55:21:4e:0e:ad:f0:b7:60:
         e8:63:1e:f6:88:c4:20:33:ff:14:6d:a9:75:fd:fe:42:b5:71:
         12:77:e1:ce:46:e7:fb:e4:4a:53:96:4f:c0:cf:e3:7e:cc:6b:
         c8:eb:a5:f1:a5:d8:4f:89:89:3f:3f:2b:fc:76:f8:20:5c:b3:
         be:46:73:63:f6:7e:9d:4c:8a:73:9a:13:e8:b0:73:da:98:54:
         19:28:be:29:8a:65:03:88:39:15:9d:9d:b7:a6:7a:58:c4:91:
         0d:ed:e0:23:1e:14:a0:6e:d3:02:92:35:47:97:e7:1f:00:34:
         fb:d5:e1:60:b7:89:45:d6:a5:34:f5:78:59:15:79:28:3d:67:
         3c:43:3a:55:10:8b:01:79:8b:67:69:93:2b:75:83:08:e6:6b:
         93:a4:9b:b2:4d:20:fa:de:de:3a:c4:7f:c0:d7:90:1e:5b:95:
         65:21:40:42:17:3a:63:91:36:a2:07:34:7b:28:b9:5d:68:e2:
         6d:7d:ca:07:55:78:20:b1:16:15:5f:87:85:c2:b3:e7:bb:cf:
         8e:9f:31:e5:c5:99:4f:32:db:b9:9b:d2:f7:79:46:3c:39:81:
         7e:cd:da:7f:a2:42:04:2b:b9:50:a9:ef:16:87:b5:91:a1:3e:
         0d:4f:bf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:34 2026 by rpki-client