Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa
File:                     7fada44e-ab60-3ed5-b0e0-767e589309f8.roa (raw, json)
Hash identifier:          PXyHsZBk591futy5f0J678mdJtln65Yg2CYMA7NuqoE=
Subject key identifier:   E8:6C:56:2C:38:F3:60:47:FE:79:CF:6B:C4:8E:D7:A3:74:71:D8:90
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584E15E46B522C533E0CD185C6E0
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     32771
IP address blocks:        2620:111:800e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6b:52:2c:53:3e:0c:d1:85:c6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=6fa574f6-85a9-4731-a0cb-f6f0cd725cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3d:81:d3:32:b3:36:e8:0a:61:4d:94:e1:cb:
                    d2:45:fc:15:aa:5c:b7:7e:7f:0d:cb:7c:89:2e:9b:
                    cb:40:ea:81:2f:86:6d:20:75:df:bb:7f:bb:35:f6:
                    28:b9:cb:51:13:94:4f:f1:67:3e:88:d9:69:f5:71:
                    56:fc:e7:75:42:5f:19:db:8f:af:cf:ad:0c:88:60:
                    c6:6b:d8:96:a5:d3:c6:6b:28:e7:3c:16:75:b5:7d:
                    68:76:e1:ec:b9:44:de:74:bd:61:42:8e:5b:b3:d1:
                    5c:60:75:58:84:e2:fd:76:34:b3:81:2f:ff:3c:c7:
                    56:52:ba:84:d9:32:84:51:b7:b8:79:2a:c6:c0:a3:
                    a2:0f:30:9c:b2:bc:e2:da:84:f9:91:83:80:12:09:
                    ff:13:88:36:20:a6:c0:62:70:ae:25:07:40:14:a6:
                    87:73:f2:42:c8:31:4b:de:ad:4e:25:4b:14:14:e8:
                    8c:4a:df:47:b3:e5:62:16:ab:65:9e:12:d9:9a:6c:
                    7d:58:44:2a:96:de:24:f0:de:e5:5c:da:0f:4c:31:
                    a3:0d:04:43:8e:61:a7:ab:01:70:86:8d:40:52:a4:
                    62:9b:fd:98:e1:a8:8f:7e:3a:8d:6d:bc:3e:28:aa:
                    b2:fb:d6:c6:b6:5e:02:69:da:7e:ba:f8:c4:bd:e5:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6C:56:2C:38:F3:60:47:FE:79:CF:6B:C4:8E:D7:A3:74:71:D8:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:800e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:50:a4:b7:cb:6e:77:3b:5d:14:0f:b4:30:23:d4:12:5a:ad:
         26:b6:7b:0d:ba:66:c2:39:b2:1e:3e:4e:bc:94:68:16:14:5b:
         d7:be:e2:6f:f9:de:ad:a3:cd:fc:2f:01:c5:73:df:75:f6:d5:
         48:d7:dc:4b:e1:1f:4a:29:54:2e:74:e1:12:77:04:d4:bb:85:
         7c:b8:63:7d:63:61:81:5d:9a:f7:5e:47:bf:f2:f7:cc:5e:a6:
         07:f6:5d:cc:6f:e3:b3:a0:80:a5:7e:45:67:77:08:b4:48:56:
         8d:f4:a2:f4:6f:27:b1:21:b8:38:96:fc:cd:29:0a:bf:1f:16:
         b9:e9:e5:59:df:d7:19:5c:7b:52:26:00:0f:83:91:fb:54:b1:
         19:f3:7b:1e:b9:a4:0d:0c:61:dd:44:92:10:b3:d3:eb:fb:58:
         12:13:ae:d8:c1:ab:ac:6c:a4:10:a1:b8:8c:1c:1f:19:7c:f6:
         c6:5d:e8:60:ef:97:80:3f:b3:52:e1:e1:23:43:03:80:d9:6b:
         2b:5b:d4:23:0c:34:a2:2b:7e:26:d3:75:c7:89:8f:cd:e7:9b:
         21:5a:53:c3:69:f3:1c:aa:2a:c8:a1:09:f4:b4:26:06:2c:f2:
         55:9c:6e:83:cb:f1:43:92:5b:05:73:da:1c:c9:25:61:af:61:
         a4:19:b3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:50:45 2026 by rpki-client