Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/1193cf10-90d6-35e0-9915-3646f2eb71e1.roa
File:                     1193cf10-90d6-35e0-9915-3646f2eb71e1.roa (raw, json)
Hash identifier:          zlbgEWk7xWNdIXy1Bs8TVWUQInTp1GzWcwsMvWjv0vw=
Subject key identifier:   D1:9A:07:D7:CB:16:9D:6A:E0:4E:2E:E5:EB:C2:4A:15:49:84:50:BB
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584E18AEE6D7C3C07DB3B203DE80
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/1193cf10-90d6-35e0-9915-3646f2eb71e1.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     5744
IP address blocks:        2610:20:5010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e6:d7:c3:c0:7d:b3:b2:03:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=a9d9f0a7-c956-43ae-9c42-e178e7c9679b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1d:2a:3d:99:75:a5:d6:23:57:90:20:1e:85:
                    70:fc:4b:0b:63:29:1e:55:d2:ab:32:26:7c:af:26:
                    e4:15:95:c9:38:67:97:64:1d:9f:ed:05:0f:e2:81:
                    07:ff:f0:ec:3c:2e:a5:c7:0c:6d:59:a0:d3:65:c7:
                    e9:68:be:5d:bc:ea:bf:b6:9a:7c:dc:ef:20:4b:ed:
                    0c:ba:64:67:04:36:89:45:81:b3:6f:21:68:f0:86:
                    33:ae:99:a4:69:95:85:2a:2d:6d:1e:4b:5a:46:a1:
                    8a:26:85:ed:c7:dc:e8:f4:7d:3f:70:ec:64:f1:6b:
                    ab:87:fc:30:26:c5:0c:e9:bc:64:55:04:b5:c8:4f:
                    7a:a8:48:78:93:4a:50:37:cb:ff:4d:54:8c:d9:06:
                    66:60:fe:52:df:9e:b4:4c:ab:32:9f:76:48:68:cc:
                    ea:cc:be:8c:42:a6:56:b2:f8:e6:e1:84:8c:c3:ea:
                    ab:8e:d5:33:c3:bc:e0:2b:91:15:a0:e3:02:e6:3b:
                    1d:79:48:6d:e8:74:9f:cd:cd:c3:94:af:39:12:db:
                    4d:8d:21:9c:14:64:13:4b:e4:25:d1:f7:28:7d:5c:
                    64:8a:d6:ef:c7:4c:6d:f4:02:2b:d3:8a:95:12:aa:
                    99:03:e2:1e:3d:1d:05:3b:7a:2c:fa:28:87:67:f9:
                    ee:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9A:07:D7:CB:16:9D:6A:E0:4E:2E:E5:EB:C2:4A:15:49:84:50:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/1193cf10-90d6-35e0-9915-3646f2eb71e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:5010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:80:1d:e2:88:2c:e5:c5:42:9c:ba:48:1a:34:76:60:a8:23:
         65:12:01:c2:bf:e9:5f:1c:a0:7d:e1:a0:d2:f2:ab:cd:69:c9:
         b3:3b:ff:05:90:bb:b9:f9:ee:e7:29:08:f5:e2:12:e1:6d:d6:
         e9:c6:13:89:e2:64:74:d3:ea:91:87:24:36:82:23:bb:63:43:
         1d:a0:bf:4f:1c:56:04:72:24:0a:bf:c2:44:15:3e:25:1b:41:
         ee:9e:66:02:6e:4d:2f:05:b9:f5:f8:8e:10:40:11:ab:23:59:
         27:0e:bf:90:57:20:2f:f0:fa:c9:e7:21:1f:cf:55:b0:a7:a5:
         82:d4:c8:3d:ab:1f:cb:b2:5c:1f:59:02:a4:f9:a4:4e:0b:dd:
         6f:fd:c6:1c:8d:98:71:0e:ea:f0:45:f4:78:b6:21:2d:09:3b:
         49:90:6b:67:57:4d:b5:e2:11:94:27:c5:34:45:73:04:c9:7a:
         56:80:11:6c:56:20:6d:d6:85:e9:72:3d:3f:29:58:bb:f8:4a:
         bb:96:02:85:16:b6:07:9e:7a:3a:f4:84:6b:cf:d6:4a:20:80:
         85:bd:e0:eb:62:b5:53:85:8a:f6:56:e6:20:ce:4a:7c:25:0e:
         52:ac:e3:81:e8:f7:48:51:6c:97:99:08:94:cd:9f:ca:ab:2a:
         bc:3e:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:35 2026 by rpki-client