Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/93889a34-4b8d-3286-8653-2478a9708bf0.roa
File:                     93889a34-4b8d-3286-8653-2478a9708bf0.roa (raw, json)
Hash identifier:          lVg7bm29/usuqxqTSivsYPtoxVPz3NF59ZV4BpVw1sk=
Subject key identifier:   3E:3E:01:15:8B:9B:26:46:CE:C2:CA:1B:91:A1:B5:A2:4C:FD:BF:2C
Certificate issuer:       /CN=693058af-5777-47e8-8d51-1b7f5214bf85
Certificate serial:       010D0C9F4328584D00B27C1A7014CC411A7EB980
Authority key identifier: 10:6C:66:4D:7F:62:A8:1A:E3:A3:AF:C5:D9:18:DB:B6:0F:40:4F:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/93889a34-4b8d-3286-8653-2478a9708bf0.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     64249
IP address blocks:        2607:5840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/693058af-5777-47e8-8d51-1b7f5214bf85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/693058af-5777-47e8-8d51-1b7f5214bf85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:7c:1a:70:14:cc:41:1a:7e:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693058af-5777-47e8-8d51-1b7f5214bf85
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=8bc9a932-9aeb-46cc-a356-61b2996614d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:28:a6:f7:b9:f6:a3:e5:b4:00:4f:c3:58:db:
                    f9:19:44:fc:65:f2:0d:a3:7e:d9:1f:59:e8:be:4e:
                    63:89:5d:4a:f0:a9:b4:68:ee:c1:69:58:50:1e:43:
                    d5:b8:9d:d3:13:ea:23:99:16:33:b2:7a:77:bc:5b:
                    36:d3:3b:af:f1:91:63:b7:e6:34:26:ff:db:fe:9a:
                    53:2f:e9:ca:40:70:ef:94:65:90:95:b5:79:05:6c:
                    6b:fa:4e:f4:9a:71:6c:1a:31:ce:b9:54:b6:50:22:
                    22:4c:2a:c8:8f:e2:46:dc:56:95:a5:69:41:eb:16:
                    09:21:95:20:7b:63:0c:58:81:27:02:db:86:80:24:
                    52:13:15:cd:86:06:01:6a:a3:34:ce:3e:b5:b8:a4:
                    49:c8:3c:7c:f1:b4:ac:ac:bb:da:3a:b7:72:84:82:
                    0f:33:94:cb:a4:d0:d6:bd:d9:d5:2a:18:b6:41:ec:
                    c7:31:bf:5d:81:c3:bf:dd:c4:d3:05:7f:30:a9:6d:
                    f2:38:07:8e:0b:85:9c:30:44:05:b8:4b:08:44:76:
                    f7:cb:f8:cc:90:5b:d8:eb:aa:2a:87:73:c0:4a:bb:
                    d9:d6:5a:3a:04:8b:52:2c:e5:8c:c7:8b:cc:51:5f:
                    21:dc:ca:41:82:a4:a0:46:11:74:7f:91:80:07:af:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3E:01:15:8B:9B:26:46:CE:C2:CA:1B:91:A1:B5:A2:4C:FD:BF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/93889a34-4b8d-3286-8653-2478a9708bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/693058af-5777-47e8-8d51-1b7f5214bf85.crl

            X509v3 Authority Key Identifier:
                keyid:10:6C:66:4D:7F:62:A8:1A:E3:A3:AF:C5:D9:18:DB:B6:0F:40:4F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4a:3f:7e:aa:0e:17:a0:2b:e4:9f:fd:fe:e5:60:10:ab:19:
         f5:c2:1a:95:57:e1:65:b8:ca:27:a4:01:7e:fd:29:e9:7f:0d:
         ac:22:1d:17:6c:2e:c9:75:07:d5:e9:39:ba:53:83:ed:01:9d:
         db:ac:14:86:21:16:21:af:e9:75:48:03:a7:3d:9f:6a:84:29:
         63:43:d7:99:03:5b:ee:aa:33:3c:10:98:e6:92:55:b7:f7:12:
         be:e5:77:b2:3b:a0:37:2d:dc:5c:51:be:d3:c2:4c:4c:93:0f:
         b0:03:8e:2e:c7:8e:99:06:3d:d1:73:f3:11:1f:6c:a8:a2:72:
         18:97:7e:7f:0f:5f:c0:95:5e:2d:77:42:50:22:40:bb:3d:72:
         27:81:fb:9a:95:c0:29:16:e4:1f:5e:08:99:89:fd:91:49:0c:
         b3:c3:fc:f9:5e:ec:ee:b2:09:e1:da:f6:4b:2e:08:84:a7:ea:
         84:05:f2:28:5d:04:1c:3d:28:e4:a2:08:10:c3:47:ac:0c:24:
         66:6f:d7:7f:ee:3d:50:3e:99:23:de:44:83:41:47:96:6c:47:
         78:ca:ce:cc:f3:79:90:3a:e2:0e:2d:e1:21:cf:d2:3b:5c:49:
         de:d8:e3:0f:40:21:33:96:00:88:37:ca:d3:43:3f:28:d5:7a:
         94:7e:db:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:29:09 2026 by rpki-client