Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa
File:                     1b1238eb-e2b9-3136-b32f-5b31006cc966.roa (raw, json)
Hash identifier:          54bK5x5+MJ+Is4Yj6qalroQT9aHMu5WcifZYitOmOOE=
Subject key identifier:   39:E7:87:FF:FE:FA:72:FF:4E:81:E3:D0:43:57:14:CD:FC:B3:E0:3D
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F4328584DE6E5CDD9F1CE5BF850EDD080
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     897
IP address blocks:        2620:ab:a000::/48 maxlen: 48
                          2620:ab:a001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:cd:d9:f1:ce:5b:f8:50:ed:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=65f70ed2-f38c-4754-9d2d-da7370910779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:04:61:b5:46:f1:03:b4:1d:e4:22:07:dd:
                    10:16:0a:55:0e:5c:ce:f1:c5:bc:99:61:88:d5:cb:
                    b6:55:76:3f:6f:b8:56:43:69:43:af:d5:21:12:21:
                    78:d6:2f:d4:4d:f7:75:1a:42:06:e6:86:da:df:da:
                    f2:4a:d6:7a:ba:64:a7:94:03:25:c8:51:80:ee:c6:
                    d0:b6:ff:a5:41:da:ac:c0:ef:cc:f9:3b:97:f5:e1:
                    19:af:d6:db:56:2b:d0:8f:c8:f0:c1:06:55:48:91:
                    d9:f4:7d:6f:7c:49:30:ed:1d:ed:15:a3:f3:8f:83:
                    a2:7e:89:51:35:50:8d:9f:ea:c6:3c:a1:3e:d4:0b:
                    3b:07:03:e8:a5:a5:a4:f8:54:dd:83:d5:b2:5e:d9:
                    21:73:3a:05:57:d9:dc:88:fc:f7:ae:fb:d2:9f:20:
                    3c:7f:bb:2e:68:a8:ee:e5:b2:26:6b:89:f2:04:3d:
                    0b:3d:85:cd:8c:69:5c:80:27:ed:c7:35:a1:ee:00:
                    98:4c:38:25:a4:16:35:15:93:54:34:de:bf:cd:1e:
                    f4:a3:1c:cf:b1:1a:e7:6d:c5:ae:91:7b:bd:07:b7:
                    5a:09:b7:62:1a:72:b2:e4:9f:1b:69:e9:54:43:7e:
                    20:b1:f0:92:ce:20:23:aa:13:29:b7:82:2e:a9:cb:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E7:87:FF:FE:FA:72:FF:4E:81:E3:D0:43:57:14:CD:FC:B3:E0:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:73:d1:0d:51:f4:c8:d4:7d:f0:1d:7c:28:b3:e0:7b:42:f3:
         0c:67:50:04:fa:7b:7e:6e:b6:ea:62:8a:43:c3:d8:e9:8f:c8:
         8b:bd:62:47:d4:51:41:87:f5:85:9b:64:e0:90:de:bb:db:44:
         74:11:f8:50:cf:84:98:9c:19:e4:ea:34:50:59:7c:66:14:7c:
         a3:98:55:56:14:71:67:e9:a3:f3:d4:d5:2e:46:37:37:f7:39:
         6c:37:4b:7d:18:17:60:e1:2b:6f:28:3a:d3:71:08:82:c5:4f:
         69:35:01:ff:34:dc:1c:07:21:01:72:38:52:68:e1:dc:6e:9c:
         e9:c8:4e:50:d9:03:f1:08:a8:17:4c:83:36:e2:fd:4a:1f:39:
         af:66:2d:89:05:fd:2e:2b:65:51:1f:43:a0:53:42:5b:25:c4:
         2c:91:88:bf:74:8e:34:42:03:3b:73:32:63:12:46:6f:29:00:
         67:aa:8b:73:b6:5b:5b:f7:90:e2:00:a9:84:3c:78:9e:18:42:
         fb:80:2f:06:ed:36:d7:28:a7:a2:c0:77:de:89:c0:e6:a7:fd:
         5e:b9:56:26:88:8c:fe:b6:fa:79:85:6d:6e:a3:43:20:6c:b1:
         21:77:08:47:2c:81:34:37:10:fa:77:d8:d8:75:e1:61:1c:84:
         6c:9f:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:10 2026 by rpki-client