Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85653d51-6ced-3488-b5c4-6bd643dc06d8.roa
File:                     85653d51-6ced-3488-b5c4-6bd643dc06d8.roa (raw, json)
Hash identifier:          RV33KsJiO7tBCqHAmwyA+92uj1P5S9QvFQu1kLZ+9vY=
Subject key identifier:   FC:38:4D:40:20:92:70:7A:4F:2A:F9:F5:46:0E:2D:AF:C5:F1:15:14
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584D8100500120BB2545A28EA980
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85653d51-6ced-3488-b5c4-6bd643dc06d8.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     16839
IP address blocks:        2606:3600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:50:01:20:bb:25:45:a2:8e:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=51a82fee-0288-4406-be39-114e3cfec1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:46:02:68:20:b8:7b:f3:cf:1c:ac:d9:0a:
                    d4:cf:9b:53:96:32:12:c8:95:1c:f4:d5:34:2b:04:
                    3a:74:c0:57:bc:09:4d:d4:44:fe:ad:5c:c5:a3:a2:
                    03:fd:67:65:6e:42:6e:dd:76:d2:76:e6:3c:f2:a1:
                    59:65:55:df:dc:31:7d:b0:7c:32:b5:b3:90:91:0c:
                    28:55:8c:ef:0d:9c:3e:f6:5b:c8:eb:4a:32:34:61:
                    b4:95:78:f7:00:41:82:a3:26:d2:e1:f5:6e:80:d5:
                    3b:3f:24:5f:50:42:12:b5:f6:b5:9a:48:20:5a:76:
                    a0:a3:59:03:82:35:39:aa:84:13:21:34:2d:2f:04:
                    93:6a:d1:09:d3:eb:f5:2f:3f:71:ab:4e:11:c2:9b:
                    da:8d:64:04:a5:28:af:76:9a:45:5b:da:04:c5:76:
                    d0:b7:fa:f5:46:50:14:47:f7:b4:13:eb:94:82:54:
                    b7:86:63:56:3b:66:59:b6:a0:a0:4a:d6:04:11:2d:
                    88:c5:62:37:98:63:cc:53:56:5f:77:88:83:dd:b4:
                    4c:51:93:52:bb:d4:b9:bc:2f:48:29:b3:0f:ab:21:
                    5a:4e:74:61:1e:fa:8e:6c:59:00:2d:27:40:f0:eb:
                    df:aa:ed:4d:27:84:c5:67:21:61:21:2f:4b:0d:2c:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:38:4D:40:20:92:70:7A:4F:2A:F9:F5:46:0E:2D:AF:C5:F1:15:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85653d51-6ced-3488-b5c4-6bd643dc06d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:64:ef:2c:a4:fc:46:b0:2d:5e:32:35:07:42:05:31:e7:
         58:4e:62:65:aa:88:df:56:82:8b:f1:ce:13:08:f8:2d:39:3f:
         4d:99:16:ff:a7:d7:25:0c:3d:10:cb:92:df:7f:ab:af:96:4b:
         67:f9:2e:44:92:4f:ea:4d:53:ae:e0:b0:d4:24:bc:e6:98:53:
         89:72:66:d8:fe:d0:4f:f7:18:1d:45:53:15:a3:25:d7:83:15:
         f0:4c:80:b6:d2:01:95:65:35:84:b7:ee:ab:ec:17:5d:8c:90:
         6f:3c:6c:3a:b3:11:51:89:6f:0b:15:be:8e:f6:82:dd:30:0a:
         0b:6b:36:3c:06:00:19:6d:a2:a6:50:2a:4b:56:e1:c1:11:18:
         44:78:92:ad:c9:00:0d:2a:bb:60:68:d7:d5:a0:1c:3a:2d:26:
         dc:b6:11:3f:d2:99:8c:05:eb:40:b1:77:12:2e:93:2a:2f:4d:
         c5:14:d8:76:23:2a:2d:76:e7:ef:09:29:05:00:d4:b5:d4:8f:
         a2:51:af:bf:68:86:88:40:1c:87:b3:7f:dd:f0:85:ce:d6:e7:
         7d:d8:03:f7:3f:d1:11:6f:d8:0a:6a:46:dc:7e:35:98:8f:f8:
         8b:93:75:fa:2e:dd:55:47:43:45:af:46:79:20:1f:d6:f5:6c:
         ba:85:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:19 2026 by rpki-client