Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa
File:                     8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa (raw, json)
Hash identifier:          4fCWMvZVJNX2dYUzh0/bp2fIQm/8iis0iOfOkxNW/wk=
Subject key identifier:   F6:9A:CF:4A:FB:BC:3D:88:2C:54:BA:46:C7:51:5F:3F:05:85:C7:79
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584E18AEEA44DA84CB5D29620D00
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     5744
IP address blocks:        2610:20:5020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ea:44:da:84:cb:5d:29:62:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=4e0748f2-12f9-4204-a1a4-ce0ab066e69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ab:7e:e3:71:4d:52:0c:23:b4:db:5c:1a:fb:
                    7e:2f:d5:14:d4:6d:81:e0:43:87:47:08:6c:74:61:
                    30:a6:71:ee:ea:64:05:e7:69:33:f4:2d:6b:8e:e4:
                    f8:bc:b9:63:4d:fe:4d:3e:ad:50:5f:48:28:cb:da:
                    09:06:0a:ee:98:22:76:8b:9b:8e:cc:0c:51:1e:53:
                    8a:28:0d:d7:02:ae:25:ff:67:33:d9:63:41:3f:ef:
                    4f:ff:6f:9a:4e:5d:59:89:23:d4:1d:d4:67:4d:f3:
                    61:da:f5:d2:76:0d:ce:29:44:cc:ce:3b:93:22:f2:
                    85:15:63:19:ad:42:b3:ba:1c:42:d9:cc:71:0e:05:
                    3a:ae:3d:3c:f5:db:e2:3a:5d:6e:31:53:23:9f:de:
                    69:06:7e:ea:18:39:ee:f4:29:e3:a5:f4:aa:2a:15:
                    c5:7a:73:15:b2:ac:f0:9f:01:59:2d:c5:d9:90:f4:
                    ab:1e:e8:a6:e6:bd:15:b6:03:5d:3c:98:e1:99:6e:
                    7c:d9:08:e1:b2:20:83:ea:17:b8:a5:33:72:20:3a:
                    3e:a6:90:1a:c1:be:9d:1b:fc:d2:76:9d:be:75:a9:
                    31:03:9f:0a:47:3f:df:bb:8f:1e:9b:7a:f9:fa:5f:
                    cc:b9:32:0b:00:f0:54:ca:66:83:83:d9:20:9e:32:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9A:CF:4A:FB:BC:3D:88:2C:54:BA:46:C7:51:5F:3F:05:85:C7:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:5020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d0:89:ef:16:30:f5:cd:00:6c:cc:50:0a:9c:c3:2a:23:69:
         f2:aa:1d:cc:f0:e7:5d:c7:b7:68:57:31:dc:2f:9c:93:f8:44:
         98:ce:0a:4e:33:4a:07:5c:52:ee:e1:c0:64:51:7a:76:bf:b8:
         56:57:56:69:02:2a:27:59:06:0b:47:1f:ca:ac:e2:73:21:0f:
         cb:45:e2:46:c6:99:0b:89:e6:44:f6:9b:27:c4:fa:61:6e:d1:
         36:e2:af:d2:e8:bd:61:d2:db:b6:dd:49:d1:05:a7:b4:9d:79:
         12:fd:c9:e2:05:fc:b7:ba:38:61:d2:9a:a7:88:e2:d4:b0:79:
         ed:71:81:46:e1:08:38:ad:1c:19:bd:36:af:27:5b:ff:31:60:
         76:b4:a7:57:3f:a1:2f:c7:d4:2e:95:c3:63:3e:7f:56:b4:4c:
         2d:5a:78:85:16:f8:9e:c1:0c:4d:5c:7c:5b:a7:61:6a:02:5e:
         cc:49:4b:0b:22:94:a3:c3:3e:ce:74:58:95:58:75:72:54:72:
         48:92:a0:ad:4f:0d:2a:de:95:00:8b:41:d4:e2:32:a7:f3:49:
         65:f3:97:08:53:be:4c:71:ab:d0:55:59:66:3c:9e:68:b1:65:
         52:27:6a:9f:42:94:a5:b8:9c:1b:17:42:e6:b9:c5:f9:78:99:
         e8:36:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:04 2026 by rpki-client