Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/fdeead2d-3023-34cd-b41b-0f952146b093.roa
File:                     fdeead2d-3023-34cd-b41b-0f952146b093.roa (raw, json)
Hash identifier:          v5hdILF+V4OpTLvoIgEVXO+iN03PFgE1H+nNyWPlsTs=
Subject key identifier:   60:BB:AC:A9:73:01:AD:D2:D3:C6:9E:DB:33:D5:16:91:13:35:E4:99
Certificate issuer:       /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial:       010D0C9F4328584D7A052C23809E4D364FD1D300
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/fdeead2d-3023-34cd-b41b-0f952146b093.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     23188
IP address blocks:        2605:7d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:2c:23:80:9e:4d:36:4f:d1:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=6fbdf55d-8d92-4437-94bf-1cff1959e3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:a5:4a:17:ea:78:62:f5:c6:0d:1e:62:80:
                    19:3a:53:c9:7d:0f:4e:83:23:d4:28:f2:0a:95:a7:
                    0b:b0:0b:59:a6:e0:13:36:ac:08:a4:5b:43:06:db:
                    30:c1:17:a5:24:9e:85:8b:c3:ca:f8:5c:dc:fd:26:
                    81:55:43:6c:15:cd:09:ec:60:86:33:7c:eb:34:29:
                    5e:5c:ef:f1:f0:46:64:f8:69:f3:eb:26:ed:c7:6c:
                    37:1e:3d:c6:e9:b2:6d:53:84:69:14:f5:58:8d:3e:
                    54:81:9c:e6:57:ba:e1:d3:80:4d:79:27:29:af:d1:
                    38:07:fb:dd:25:9d:e2:24:4f:9e:2f:e4:db:e5:d2:
                    c2:07:9f:60:9b:1b:56:63:cf:5d:ba:a3:77:63:56:
                    67:f1:5c:20:47:cc:91:cf:81:68:27:e9:23:cb:70:
                    45:8a:d3:4f:39:56:e6:54:9b:48:ac:cc:ab:84:9c:
                    dc:9f:cd:7c:51:df:a6:a8:64:77:e4:8b:fd:56:91:
                    69:25:fa:7c:40:0b:cb:b1:61:20:b6:cb:0d:75:2f:
                    84:07:98:65:cb:01:d6:64:1c:3e:f5:44:ff:69:e5:
                    6c:26:02:2a:1b:ab:91:fd:78:32:1b:a0:82:6b:2c:
                    3e:39:01:d6:e4:c0:b9:52:79:a1:ee:8c:67:56:d1:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BB:AC:A9:73:01:AD:D2:D3:C6:9E:DB:33:D5:16:91:13:35:E4:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/fdeead2d-3023-34cd-b41b-0f952146b093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl

            X509v3 Authority Key Identifier:
                keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:80:bb:56:66:00:4b:60:e9:43:da:53:22:68:91:e8:9f:3f:
         02:90:bc:90:42:78:85:d4:13:cc:a0:fc:63:ba:81:fd:54:75:
         8e:4f:fa:85:c6:9c:30:4a:2c:81:ce:e2:4c:79:59:d4:2e:01:
         23:04:75:63:0c:36:34:8c:9b:e6:96:97:1e:b2:88:1b:1a:8a:
         9b:42:db:5f:3c:26:50:e2:22:af:39:78:fb:80:ca:1b:ae:7d:
         be:af:e8:6b:31:a2:e8:cd:4a:f1:03:89:cb:2f:99:ae:fc:1a:
         c1:8f:a9:af:a7:b3:48:9f:ac:e6:c3:52:ff:43:5e:84:d5:fd:
         c0:e8:e7:c8:df:51:be:c2:90:cc:db:a1:1c:f0:91:68:33:2f:
         83:b0:0c:36:0e:8f:1b:a4:92:4f:34:98:cc:ab:43:99:b5:b0:
         f9:df:bc:77:5e:0b:16:7e:b1:6b:be:8c:ef:05:24:23:4d:8d:
         6f:01:95:05:a9:12:2f:02:97:2c:be:7d:bf:b6:19:54:19:fb:
         73:7d:ef:08:b7:61:95:d6:52:a7:a3:7a:50:f5:6a:2b:f6:7a:
         fb:5f:6a:a6:1f:e2:8c:83:4f:81:22:c8:80:70:1d:14:e4:61:
         07:c0:78:74:6e:87:c6:01:4c:10:55:83:df:c6:8c:f6:e4:3b:
         97:dd:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:37:29 2026 by rpki-client