Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/59eb2d2c-7934-3c61-9b3f-5bb22f9ce8c2.roa
File:                     59eb2d2c-7934-3c61-9b3f-5bb22f9ce8c2.roa (raw, json)
Hash identifier:          PZ1PguVVQJG8BQOpNcdBDmBoH2LaRfzkyHzBD6LK7Xg=
Subject key identifier:   09:EC:B4:91:A0:B4:84:8F:4F:BE:C8:3E:C6:1D:2D:0E:5A:AC:6F:F5
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F4328584D6515296D40BA661E2FAD0380
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/59eb2d2c-7934-3c61-9b3f-5bb22f9ce8c2.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     14618
IP address blocks:        2620:113:8060::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:29:6d:40:ba:66:1e:2f:ad:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=b0762470-0f06-453f-93fe-a95ee8018337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:61:2d:ba:c2:81:d8:83:43:22:a9:8b:dc:
                    cf:b1:55:b6:7b:b4:ab:5c:3d:fc:ec:34:d6:98:a4:
                    0c:3d:6d:4d:9b:98:b1:ea:a1:a0:b6:84:e2:2a:37:
                    eb:ff:5c:a1:49:38:6a:9d:5d:fc:59:a3:b2:da:e8:
                    c4:76:ad:4a:64:01:38:2d:b9:a6:27:5a:fe:90:e5:
                    1f:c5:4f:50:0d:78:58:c1:3d:45:6f:77:84:16:fa:
                    d4:29:85:22:67:8c:a8:03:34:0f:3f:b9:c4:35:41:
                    b3:0c:03:7f:fe:c9:0c:38:0a:b5:c0:38:c0:38:b5:
                    b0:ca:19:70:42:e5:8e:9f:60:2e:34:fd:e6:ff:ad:
                    5e:e5:b0:1e:ff:70:ba:5f:72:0f:67:d6:5c:a0:de:
                    98:60:52:7c:2c:d0:80:0d:b5:1d:b6:a8:14:a4:04:
                    12:d7:36:da:2b:b1:4d:fb:02:d7:a4:7c:6c:d2:4d:
                    34:50:d1:31:31:ff:c1:6e:f8:b7:7e:71:fc:f8:c0:
                    d6:2e:e1:58:c7:b0:24:ed:7e:3b:8d:3b:37:2d:74:
                    f6:72:ad:3a:2a:06:f4:07:54:90:ff:e6:aa:9e:08:
                    b9:73:3f:86:27:4d:36:db:84:75:77:09:e5:d1:fd:
                    ab:c8:86:69:10:3e:52:ef:21:65:4e:2f:49:64:61:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EC:B4:91:A0:B4:84:8F:4F:BE:C8:3E:C6:1D:2D:0E:5A:AC:6F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/59eb2d2c-7934-3c61-9b3f-5bb22f9ce8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:8060::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:12:49:eb:4a:b4:5e:cb:4f:f0:26:c5:4e:6d:c8:41:a1:c9:
         5b:0a:8e:1a:ab:6f:a6:09:a4:2f:2c:d3:e1:d0:f7:be:f0:1f:
         b0:f6:6b:f1:c0:46:c3:ed:9a:57:37:d3:2f:34:73:b2:e6:d5:
         01:41:58:18:cb:ef:fd:08:55:14:f8:45:a5:8e:a2:89:2a:46:
         59:ce:c8:b5:f6:67:60:d5:47:30:d7:c4:52:a4:61:9d:6d:c8:
         52:c2:1c:aa:78:70:ff:d4:52:d4:44:ae:1c:66:cf:b2:a8:bd:
         e7:81:f4:3f:0b:22:5a:7d:d8:26:a3:06:49:26:ff:fd:89:c1:
         10:1c:bd:6a:8c:28:49:38:44:dd:0c:79:cd:9f:13:35:50:3f:
         f7:5b:89:c0:c9:d8:a5:f0:3b:62:5a:4d:7f:bb:b2:1a:e8:f5:
         2d:16:74:29:fa:4b:a5:24:d4:b0:9f:ef:4c:06:be:99:1c:b7:
         2b:6a:b6:2b:3a:4d:73:34:e5:ff:7d:74:47:c3:da:10:38:0a:
         b0:65:fd:ed:a2:6c:2b:1a:a5:5f:f8:10:9b:15:98:60:fd:af:
         04:3c:d2:1f:f9:02:35:02:ef:d7:3b:17:b0:22:b4:58:30:7e:
         3f:61:6c:0a:a0:54:07:21:73:f3:21:33:07:9c:5a:f5:b0:4b:
         a9:ee:61:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:57 2026 by rpki-client