Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7d91a6da-6fa6-3b66-89a9-07abc6f05375.roa
File:                     7d91a6da-6fa6-3b66-89a9-07abc6f05375.roa (raw, json)
Hash identifier:          FurUvz3pqR1t4mB/Y7lo4L9qdq4LrAvD1PE0mtpMof0=
Subject key identifier:   40:0A:4C:D1:9E:83:81:CD:9A:7F:B5:F4:E8:A3:75:AD:57:9F:C6:51
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584E075CFBE1BA0B09A161C04FB0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7d91a6da-6fa6-3b66-89a9-07abc6f05375.roa
Signing time:             Mon 01 Jun 2026 16:06:31 +0000
ROA not before:           Mon 01 Jun 2026 16:06:31 +0000
ROA not after:            Sun 30 Aug 2026 16:06:31 +0000
asID:                     16839
IP address blocks:        2606:3600:202::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:5c:fb:e1:ba:0b:09:a1:61:c0:4f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jun  1 16:06:31 2026 GMT
            Not After : Aug 30 16:06:31 2026 GMT
        Subject: CN=fb52599d-1ad7-4b92-b3ba-8a8cf0a38eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:91:63:1d:ad:4b:fe:9f:b0:64:c4:6a:0f:
                    ac:29:d8:3e:8d:18:bb:c1:ae:e5:a4:b4:19:25:d8:
                    e4:94:3a:7a:59:67:64:8f:d9:cb:e7:75:7d:5d:3e:
                    03:aa:5c:f2:d9:61:44:46:6b:13:b5:60:cb:d9:4f:
                    87:60:31:32:7f:0e:7c:ae:21:44:50:8b:2a:e2:d7:
                    22:20:b8:a5:c2:a2:43:a2:a1:d3:fa:64:46:02:ef:
                    61:fd:f4:0b:85:e4:9a:4a:9d:ae:d2:fd:36:a6:0a:
                    53:92:c0:6f:75:3c:69:0e:12:9f:be:b0:be:9c:8e:
                    3d:f7:b5:79:80:ab:93:eb:8f:71:6c:07:a0:f9:af:
                    90:af:a6:eb:c1:20:c8:42:0f:f3:e1:d0:5b:ce:bd:
                    4a:c1:b6:f2:6f:2e:02:31:8b:fc:94:22:b0:15:1e:
                    1f:1e:27:ed:f3:9d:52:d1:56:bb:2d:36:48:1a:f2:
                    28:1e:bf:4b:56:73:3d:bf:28:70:53:8b:55:ae:9e:
                    b6:42:f4:30:04:45:1e:80:39:81:2f:85:94:44:35:
                    0d:23:f7:02:cc:b6:b9:39:4d:65:a8:72:e9:ac:05:
                    3d:f7:8a:ea:f8:8a:f6:a0:11:34:f0:2a:ba:79:9c:
                    02:20:92:78:69:d0:45:93:68:50:d2:ec:1d:5e:4a:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0A:4C:D1:9E:83:81:CD:9A:7F:B5:F4:E8:A3:75:AD:57:9F:C6:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7d91a6da-6fa6-3b66-89a9-07abc6f05375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:202::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:28:23:08:29:ba:d4:d3:f1:46:a1:80:0f:33:10:b6:86:4b:
         05:ac:b2:47:07:f5:97:ad:0e:ae:b9:0a:bf:f5:c3:df:29:cd:
         69:7c:1a:87:d4:93:7f:2c:0f:e7:80:50:ac:96:b5:b6:f0:6d:
         d9:ab:db:c6:d8:3b:04:32:73:eb:22:20:20:e9:03:47:c3:9f:
         15:8a:14:5d:75:24:8b:10:09:09:3d:23:06:8d:0e:70:b3:84:
         af:e8:d2:11:5d:72:b3:97:c2:d4:f3:89:6c:cf:a9:88:0f:3f:
         be:e4:71:03:be:c3:9c:f4:8a:e3:32:e3:00:56:da:3c:a4:09:
         e9:f3:60:18:7d:cb:af:6f:79:b6:a5:b8:ec:ca:78:0c:58:15:
         e6:ef:23:34:a9:73:df:a4:3e:fb:7f:01:c9:7c:f4:af:21:3e:
         cf:a0:90:54:6a:2b:20:66:90:d1:ed:82:6e:34:77:a7:b0:0f:
         11:74:f7:00:0b:f2:84:29:a5:62:9b:00:15:6c:06:39:f9:9a:
         e4:30:3c:20:4c:0e:ca:d5:4c:d4:86:78:29:ef:72:7d:9b:c6:
         4d:13:59:0e:72:d6:ee:8e:ce:10:0c:bb:71:96:bd:c3:30:61:
         e3:15:dc:54:f2:b0:e6:5f:91:3c:e1:57:b8:b9:6f:cd:e1:06:
         4e:a1:72:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:33:37 2026 by rpki-client