Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/d28c0219-5798-341b-a3bf-be4ed586f980.roa
File:                     d28c0219-5798-341b-a3bf-be4ed586f980.roa (raw, json)
Hash identifier:          ZGq/Y+8gjMTVI3G9YRtuJ7ri1B3YpdiG20PNVCAWmiA=
Subject key identifier:   50:6A:20:38:68:95:E0:9F:7B:22:7C:ED:3E:54:DB:CA:6F:E1:33:26
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584DF2108B0F1464F23409BE2E80
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/d28c0219-5798-341b-a3bf-be4ed586f980.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     32771
IP address blocks:        2620:111:8002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:8b:0f:14:64:f2:34:09:be:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=b464579e-b987-4768-aba8-657045d852f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:8e:27:e9:aa:9f:ea:b5:3c:da:80:e7:de:
                    4f:e2:8a:46:80:c1:8e:06:7c:e0:a4:3f:35:83:3a:
                    01:de:32:70:9e:3b:3d:4a:9a:cb:a9:7c:3c:e7:15:
                    93:50:65:55:91:5e:5e:07:94:d8:22:40:a0:b3:82:
                    50:52:c8:a5:d0:d4:fe:90:d0:fe:49:27:ca:da:23:
                    9b:5f:36:37:25:57:34:f3:9e:f4:5b:6b:04:cb:31:
                    28:86:46:62:51:27:6f:6e:81:a0:2e:c1:97:92:e4:
                    3f:ca:11:5d:cd:d3:81:48:f6:e0:71:ec:7e:ca:f9:
                    3f:11:04:4f:a2:97:22:47:5c:bd:86:c0:27:b0:d1:
                    69:4b:94:4e:02:43:ce:a4:78:b9:50:28:35:42:fb:
                    ba:4d:5f:d2:e2:7e:87:e3:c3:29:7f:1f:7d:af:2b:
                    86:ee:00:e2:0c:8f:57:06:84:84:76:b5:c9:67:fb:
                    03:3d:f4:ef:9d:8a:1f:77:5c:62:18:04:2a:15:f1:
                    5d:c2:99:46:c3:47:f8:2e:95:e1:36:e8:ee:b9:5c:
                    e2:3d:e0:b9:9d:dc:1e:6b:25:da:c7:d3:b9:75:45:
                    66:dc:47:2b:dc:61:0f:0d:b6:88:c8:8b:0a:68:1f:
                    7d:6c:d4:7b:d3:65:70:76:29:7a:f4:bd:be:b9:08:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6A:20:38:68:95:E0:9F:7B:22:7C:ED:3E:54:DB:CA:6F:E1:33:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/d28c0219-5798-341b-a3bf-be4ed586f980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:8002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:15:e4:83:27:49:69:51:c0:84:c3:1a:41:16:b0:55:3a:e2:
         b7:d4:b3:41:40:de:af:c4:f2:61:8b:43:6e:c8:7f:f5:fb:a2:
         10:91:e7:03:2b:5d:d2:f2:56:38:97:42:46:97:19:12:22:bd:
         3e:1c:28:b7:0e:7e:c8:18:e9:42:b3:71:53:18:ad:e6:9e:16:
         fa:58:4d:c3:04:4e:7d:01:9f:7a:6a:86:ef:52:9a:d8:d2:3e:
         e8:db:d0:af:c2:84:fa:4f:44:dd:3e:99:8b:eb:ed:fd:d1:7e:
         34:30:3c:5e:ef:a9:6a:f5:82:39:12:42:94:ac:d5:b5:22:fd:
         0d:d4:fd:d0:86:ae:c6:38:77:4d:f3:a7:31:d7:87:94:19:e9:
         6b:bf:cf:b7:77:68:31:b6:35:e7:a1:ba:88:4e:92:42:bf:8b:
         75:b8:80:c9:b0:28:60:2a:3f:26:bc:6e:1e:1b:30:b8:b6:1d:
         dd:15:7f:4f:45:a1:b4:dc:52:c0:fb:af:49:77:e8:8f:a5:ef:
         8c:28:d3:c2:eb:c6:15:78:2a:86:ac:35:ad:84:f1:49:1e:ac:
         66:58:08:87:89:e9:33:47:c9:2d:42:06:b0:54:e7:5b:25:91:
         2c:30:75:b7:64:5d:1d:82:33:e8:d3:c5:50:7d:e0:5e:c5:cc:
         69:21:44:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:51:50 2026 by rpki-client