Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6facbc91-4c2e-37c8-8f1f-20397a580f81.roa
File:                     6facbc91-4c2e-37c8-8f1f-20397a580f81.roa (raw, json)
Hash identifier:          gOoNFkjQPwAeR4EE61dGOpstsi3xeBpd23b3nigsIq4=
Subject key identifier:   BB:7A:BF:2B:CD:E3:3C:0B:17:3E:96:5B:61:C5:B1:08:60:AA:36:D6
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D703FD6BEFE9F047948FA1EA0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6facbc91-4c2e-37c8-8f1f-20397a580f81.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     11572
IP address blocks:        2607:ff00:500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d6:be:fe:9f:04:79:48:fa:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=2da572e1-3573-461e-b220-8ef4e2fed9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:b0:31:20:aa:3e:d0:e0:5c:95:a9:53:c7:
                    33:6e:2b:55:aa:6b:ce:5c:fe:03:08:bd:a6:e5:ac:
                    c7:eb:62:26:8e:de:72:30:8b:55:a5:c0:53:32:94:
                    0a:8c:cc:cc:37:73:ef:0b:a7:9b:19:5e:b1:19:a8:
                    24:cc:75:df:db:58:7b:6c:a1:f5:b2:95:0c:5f:d9:
                    4c:7f:52:f4:0f:e6:3b:19:3e:b3:0f:21:c1:51:fe:
                    c5:69:84:82:4c:0c:e9:6f:8e:8a:a6:df:93:00:1a:
                    b7:35:13:38:82:7d:e8:c8:f1:12:4d:5f:b7:1e:12:
                    b2:a9:a0:a6:0c:14:c5:75:f7:a5:d5:8d:8d:18:76:
                    3b:f0:44:27:cd:90:67:b6:42:31:42:4e:73:e2:80:
                    d2:5b:35:51:e1:73:69:b1:1d:0f:e4:d1:1f:59:a4:
                    6a:40:25:81:c7:7b:8c:8e:63:e9:91:f0:7f:a1:62:
                    85:5e:fa:ec:e1:23:8a:9d:ea:0a:ad:8d:91:6f:ba:
                    bd:1e:34:2e:9d:49:c6:ec:23:e9:73:c9:32:b2:3e:
                    22:02:8e:93:11:da:d0:11:2e:29:7f:9f:a7:79:49:
                    8a:71:b1:2f:28:b3:02:9a:f9:4a:e3:04:86:35:ea:
                    27:90:3a:2d:72:bf:6a:e8:c6:c6:d5:3d:f4:38:09:
                    52:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7A:BF:2B:CD:E3:3C:0B:17:3E:96:5B:61:C5:B1:08:60:AA:36:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6facbc91-4c2e-37c8-8f1f-20397a580f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:9f:0a:8b:8a:3d:59:d4:b4:97:0a:74:ab:ad:e9:fd:f0:
         90:51:3d:6c:52:33:79:b9:bb:84:31:c4:71:60:8d:73:18:b3:
         ed:ab:f6:94:0f:ca:6a:7a:e1:54:18:de:51:b5:ad:ef:ce:aa:
         03:f4:a7:8d:51:77:e3:f4:17:c7:3b:c9:06:cc:93:6a:de:37:
         78:2f:32:ea:a4:03:18:19:f2:b1:88:e3:e2:c5:8a:50:63:a6:
         57:6b:bb:3a:c5:ca:90:a2:16:00:77:fd:8e:b7:8a:30:f0:0c:
         35:94:32:5c:9f:41:a6:8a:da:10:c2:d6:d9:23:8d:78:af:21:
         c3:a3:a1:b6:d3:d1:93:5e:fe:69:a7:1c:51:35:5f:3f:ac:46:
         c3:a5:1d:55:36:07:84:5c:6a:33:c3:b9:23:ce:82:2c:ed:5d:
         8c:72:09:d3:10:f6:31:bc:e4:15:66:cb:1a:54:1e:05:0b:a8:
         4a:aa:7d:c4:fe:a3:11:90:a8:8b:78:c1:cd:06:98:d8:e8:b1:
         a1:05:6e:44:52:e4:90:db:2c:48:60:f7:ca:79:ca:6d:2b:d6:
         8c:8f:d9:1b:9f:62:d6:a9:36:07:73:ec:d4:d5:10:94:34:36:
         cd:2b:d2:1c:ce:c8:49:4e:dd:2b:54:68:32:ef:09:9d:9d:77:
         34:fb:57:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:49 2026 by rpki-client