Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
File:                     a546cbb8-2a70-392d-873e-3968c05e710f.roa (raw, json)
Hash identifier:          bhPnNfT7vIVSmXbjdamwxFKW0rKwzJOBejmiykpi0ik=
Subject key identifier:   F5:DF:B4:C0:B9:DF:A8:AD:3E:DB:58:B8:D6:C2:C4:9B:6C:E1:14:23
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F4328584E07009915C0FC92291A21F790
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     393397
IP address blocks:        2607:8c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:99:15:c0:fc:92:29:1a:21:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=9294bbe5-6a0c-4fc2-8593-3b13726d9941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:56:e2:05:cc:86:bc:2a:fc:98:22:71:13:
                    73:1f:0c:13:bf:39:78:0b:26:cf:2c:ba:a2:fe:16:
                    b2:2f:17:9c:ff:43:dc:84:b8:df:2e:3f:ee:fc:23:
                    31:e3:db:f4:21:ef:73:a3:b1:3d:0b:ff:fe:1c:ed:
                    54:c7:6e:36:8b:e7:11:3e:20:e0:72:3d:be:3d:40:
                    75:35:81:71:d2:7e:40:b5:c5:12:e0:ee:2f:af:fb:
                    01:68:0d:ce:85:e1:c6:28:01:1e:df:98:4d:e2:b3:
                    22:c1:b2:48:d6:a8:3f:18:66:11:f5:7c:21:8a:5c:
                    32:12:44:03:92:42:9f:a4:a1:ff:d5:2c:55:f8:74:
                    7d:1c:37:97:a2:66:b1:b5:d0:7c:94:71:44:8f:f2:
                    16:d4:d4:3a:0e:2d:da:23:2e:83:ec:59:b6:1d:76:
                    fa:2f:a4:3d:7e:ae:90:0f:e9:30:ff:4f:54:0b:e7:
                    39:8e:72:c6:6b:82:30:fd:d8:c4:11:fd:df:26:68:
                    bb:a6:84:8b:13:01:79:3b:67:dc:dc:11:30:6b:40:
                    ae:75:2f:07:38:30:b6:8f:e2:fb:7e:b1:d8:e1:81:
                    57:ba:47:76:dd:17:5e:e0:eb:f8:d4:0d:7e:c1:58:
                    a0:13:89:62:52:de:fc:3e:1f:f7:44:ad:aa:dd:8b:
                    9a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DF:B4:C0:B9:DF:A8:AD:3E:DB:58:B8:D6:C2:C4:9B:6C:E1:14:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b2:f0:8a:28:e4:da:96:19:86:83:2e:71:d4:e3:15:0e:2c:
         3e:8a:94:1e:1e:9c:16:51:8f:c9:09:1e:30:ff:d6:d9:a6:39:
         0c:8a:9c:4f:03:14:cc:6f:f8:df:b9:25:1b:fd:64:e8:82:2d:
         a0:0a:6a:c1:97:a9:33:b0:e7:74:dd:a7:ef:55:18:9c:cc:be:
         06:28:2d:ef:5a:18:84:9b:55:02:64:bf:9f:d9:e3:d6:e2:e2:
         0b:3c:89:b5:96:22:f7:15:fd:01:c4:44:61:82:64:d0:fd:17:
         5f:36:3f:f7:1d:f8:70:1a:0f:66:dc:5b:73:d6:b1:60:94:1b:
         d2:05:cc:29:8d:0f:84:86:03:c5:a3:28:ca:e2:2e:e4:12:e9:
         5d:cb:55:93:34:8b:81:48:f4:d2:32:77:33:e2:a2:17:a8:c3:
         f2:59:e6:39:75:bd:db:08:71:79:77:67:98:b0:b2:4c:e3:46:
         8f:06:42:b4:6a:ea:e6:83:92:10:50:18:aa:f2:51:8f:6e:5a:
         60:46:03:35:9d:4c:67:1e:5f:5c:75:8a:5a:85:bf:9a:bb:7d:
         4c:d8:55:60:95:86:66:dd:c9:dc:bf:d2:62:53:44:a3:7b:af:
         e2:82:b4:8d:17:f4:e8:e5:9d:19:a0:3d:6e:31:fe:0c:7f:d8:
         41:69:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:40:58 2026 by rpki-client