Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/93b900bc-0d28-30d8-9927-a772a8d90994.roa
File:                     93b900bc-0d28-30d8-9927-a772a8d90994.roa (raw, json)
Hash identifier:          sdlZsUiHuD77tj8PHYXEiwOiG0rCu/tpa0tLF4TjNnU=
Subject key identifier:   6E:23:AE:13:08:B5:4A:BC:4C:80:71:97:B4:82:BB:86:4B:11:33:27
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F4328584E0CB7A4BF70C5C750A3240F80
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/93b900bc-0d28-30d8-9927-a772a8d90994.roa
Signing time:             Wed 03 Jun 2026 14:08:14 +0000
ROA not before:           Wed 03 Jun 2026 14:08:14 +0000
ROA not after:            Tue 01 Sep 2026 14:08:14 +0000
asID:                     376
IP address blocks:        2001:510:c014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:b7:a4:bf:70:c5:c7:50:a3:24:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Jun  3 14:08:14 2026 GMT
            Not After : Sep  1 14:08:14 2026 GMT
        Subject: CN=3e2b9cbd-9ec7-42a2-899c-568947771e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:77:7d:a9:1c:dd:a6:4a:46:00:45:1b:04:
                    35:04:1c:37:86:63:20:87:5e:af:f7:de:60:a2:aa:
                    eb:b2:42:1e:60:af:94:cd:e5:87:5d:a3:da:5e:8b:
                    eb:b7:83:b6:9c:93:13:a7:f0:ab:3f:81:db:0c:55:
                    54:50:6c:4d:ba:b3:8e:43:2b:0b:e4:4b:8a:31:b5:
                    c3:b8:f0:55:a7:77:7b:85:30:ad:87:f1:31:a8:58:
                    5c:3e:db:2a:3c:fe:22:bf:da:ef:d4:f1:aa:2a:ce:
                    14:9d:54:55:fb:06:ba:bf:37:2a:bf:84:6a:55:66:
                    27:a8:8f:d3:e3:ea:3a:60:1e:ba:4f:d0:3a:76:b9:
                    b4:28:98:65:9f:35:b4:ec:2c:32:84:48:20:b5:9d:
                    98:00:87:ee:db:30:d9:ba:86:08:ec:38:bb:e1:c9:
                    73:f5:0f:ec:f3:c9:16:8b:8a:50:97:f3:00:ff:83:
                    22:1c:55:c0:79:b1:da:d9:a4:47:19:3d:dc:b1:61:
                    49:5f:7b:7f:5f:c3:0a:57:f7:c8:50:08:cf:20:f6:
                    68:5b:49:f7:2d:2a:9b:7b:26:53:fe:cd:07:f7:11:
                    ac:f6:78:d7:e4:67:d9:68:0d:f8:7e:fd:36:14:ff:
                    ea:ec:4a:a9:49:2e:14:1a:29:e2:16:1e:64:bb:6f:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:23:AE:13:08:B5:4A:BC:4C:80:71:97:B4:82:BB:86:4B:11:33:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/93b900bc-0d28-30d8-9927-a772a8d90994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:c014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4c:40:99:37:5d:eb:04:73:c9:dc:10:fb:4f:00:f7:1e:9d:
         2c:b5:cc:b7:dc:40:37:2a:b4:cd:ac:85:88:40:09:ad:ca:57:
         5d:09:3f:8c:d4:c6:a4:95:25:f7:93:5e:13:84:f3:77:f4:d7:
         98:19:41:d5:43:79:29:66:d9:46:7d:85:93:c1:48:22:32:50:
         d9:cf:68:14:f9:c1:4d:e0:86:59:6b:cf:7c:f2:5f:00:8a:9b:
         0d:ab:31:fb:37:45:68:19:f6:c6:14:65:e1:51:01:d7:91:2e:
         ce:c7:c1:6d:08:af:d0:87:b8:72:c6:4d:ee:8f:55:b6:ed:04:
         39:e7:83:27:cf:4c:e7:3b:16:33:d5:c5:70:aa:4b:09:cf:da:
         bf:fc:cf:23:1a:6d:32:ce:56:a3:b0:80:12:ab:8d:2d:62:e9:
         41:e6:bc:8d:4c:95:1d:7f:70:40:88:44:4d:82:43:af:df:0a:
         f2:50:fb:fc:4e:13:9a:fd:f0:3b:eb:32:f7:47:4d:fe:eb:3f:
         be:20:14:b4:ea:dc:df:0d:42:fb:2f:5a:61:38:fd:05:5a:1c:
         6c:4c:74:35:dc:f6:1d:5c:35:ee:8d:95:06:e3:4a:ad:45:cd:
         6d:7f:63:2a:27:51:04:c4:8e:cc:ed:1f:4d:97:e6:3c:5e:86:
         7f:43:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:24:41 2026 by rpki-client