Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/0b2a314a-f1eb-36e4-bb95-7d543ca67af6.roa
File:                     0b2a314a-f1eb-36e4-bb95-7d543ca67af6.roa (raw, json)
Hash identifier:          KNBlU/aBXLbruu3+1kHjtTpYs7o953YbWY6ryuS8BiI=
Subject key identifier:   06:CD:2F:AB:37:5E:B2:52:66:90:F3:62:90:E2:F6:CD:8A:32:B4:81
Certificate issuer:       /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
Certificate serial:       010D0C9F4328584DE84B2ECFC656AA17B8300B00
Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/0b2a314a-f1eb-36e4-bb95-7d543ca67af6.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     22611
IP address blocks:        2607:f298:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:2e:cf:c6:56:aa:17:b8:30:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=b1d88256-7559-4e86-9fc9-e51dee2aadb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:aa:d9:64:fb:8b:43:7e:69:59:ad:f5:75:ac:
                    a9:01:9d:38:09:7a:93:92:98:bf:cc:e8:32:29:2a:
                    d4:bd:bc:8a:c8:0b:c8:92:35:f6:73:27:2a:d8:a2:
                    96:dc:c8:0f:4f:c0:e7:36:12:42:5d:36:93:91:52:
                    35:6e:47:9d:79:99:0d:73:61:20:dd:36:88:83:81:
                    90:5f:33:26:8a:d7:e1:03:95:a4:63:33:51:70:f3:
                    38:65:b7:66:e0:d4:a0:3d:a4:c1:f3:b5:31:a5:d3:
                    f5:6d:bf:f7:94:f6:30:80:69:34:1c:95:3d:26:48:
                    0d:33:dd:75:41:b6:61:a9:1e:cb:c7:bd:c6:55:bb:
                    66:f5:68:90:0a:e2:bf:64:7e:d9:4c:12:c3:b2:6c:
                    8d:f7:05:e6:c0:ff:b3:bd:14:4a:87:c0:ff:15:8c:
                    d2:30:89:58:08:53:ab:21:94:3e:4d:09:a4:4b:cb:
                    69:ba:65:19:30:57:3d:e3:d4:ac:ac:ec:0c:5a:c4:
                    c9:64:36:07:6f:81:76:a5:d8:0d:3e:34:b0:bb:01:
                    30:c1:56:0e:56:fe:3b:c0:26:60:6e:ba:a0:58:03:
                    5c:b2:cf:c4:dc:a7:f2:1b:e1:35:16:b8:81:c8:cf:
                    9a:80:f0:ff:28:23:18:06:9e:97:16:32:4d:ac:35:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:2F:AB:37:5E:B2:52:66:90:F3:62:90:E2:F6:CD:8A:32:B4:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/0b2a314a-f1eb-36e4-bb95-7d543ca67af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl

            X509v3 Authority Key Identifier:
                keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f298:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f8:c0:cf:ac:5a:d2:34:ea:84:a7:5d:2b:35:2e:aa:bd:bb:
         ec:60:ec:fc:d4:33:23:aa:00:a0:9e:fb:c6:8c:38:28:26:74:
         03:ee:7c:10:04:84:6c:77:16:65:f1:d5:0d:28:ab:a3:49:a3:
         c5:11:44:23:3c:cf:06:cd:fd:64:d0:1d:eb:43:99:96:ae:50:
         08:05:2c:67:cc:d5:1b:f9:75:b5:72:d5:d7:62:e5:31:c0:80:
         b8:8b:a6:cd:4b:2b:fe:cd:80:b5:5f:d7:17:44:a9:f5:cf:12:
         e5:cf:49:5b:a3:18:e2:aa:a5:61:94:fb:4a:dd:b2:21:66:e2:
         82:60:9d:be:01:fe:cd:9d:55:0f:b8:07:74:90:ef:8c:4a:d0:
         1b:a8:2e:9d:73:26:16:75:0a:ad:6a:a4:37:23:7b:1a:f8:45:
         5b:89:4d:a1:09:f0:15:0a:e1:4b:fc:29:ef:70:0c:2f:0f:8e:
         8a:fc:40:81:64:04:30:c3:51:5e:c2:8f:71:ed:aa:bb:89:ea:
         f0:c2:ce:7a:27:ba:76:1b:ab:a5:41:b7:db:f2:e2:ef:4c:7a:
         c9:53:36:c7:a7:6e:04:f4:4e:8f:ac:7a:e9:5f:e0:87:00:93:
         f7:e7:0f:fa:2f:62:e7:87:6b:34:24:d9:ac:6f:7f:95:57:cf:
         d0:d4:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:45 2026 by rpki-client