Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/21bc10ac-6f2a-329c-aef5-f0d6188859f4.roa
File:                     21bc10ac-6f2a-329c-aef5-f0d6188859f4.roa (raw, json)
Hash identifier:          R4L8Yiy4MCExaj/Za9FZcmzZhl76Rx02u8tqgwAfghY=
Subject key identifier:   21:58:FC:3C:B6:7E:20:59:36:07:B3:8A:A9:FC:1C:2A:55:FC:8C:23
Certificate issuer:       /CN=eb047d23-6a3f-4a43-9374-a2cfa94f3359
Certificate serial:       010D0C9F4328584E1A143816AED4A857B81D7000
Authority key identifier: 4D:EA:4E:EA:10:C6:33:62:CD:76:08:E0:30:52:D0:94:AB:57:07:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/21bc10ac-6f2a-329c-aef5-f0d6188859f4.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2620:91:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/eb047d23-6a3f-4a43-9374-a2cfa94f3359.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/eb047d23-6a3f-4a43-9374-a2cfa94f3359.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:38:16:ae:d4:a8:57:b8:1d:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb047d23-6a3f-4a43-9374-a2cfa94f3359
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=f47e1c98-c111-4554-a3fb-669cc2e901a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:d0:b3:fb:d8:a2:9b:3b:f8:56:af:87:a0:
                    38:10:e0:3e:48:cd:40:a0:74:ed:5c:20:52:a8:48:
                    53:49:fb:bf:80:45:8d:74:a8:22:85:b2:3e:91:39:
                    4c:ad:bb:58:fd:ac:c6:bc:8c:e2:bb:7b:88:eb:93:
                    5d:dc:5c:d7:f7:58:3c:fa:3a:84:77:a9:68:38:a4:
                    f0:17:8b:57:13:7f:88:15:b4:49:36:0e:9c:75:3d:
                    0e:39:a2:a0:81:a4:fd:db:cc:7d:73:23:4d:43:e9:
                    a6:b2:88:a8:ce:fa:43:16:b7:56:0b:d9:72:99:97:
                    39:c3:10:30:ed:52:b2:72:34:2a:9f:14:87:e2:2a:
                    6d:19:8f:eb:46:6f:07:05:54:88:96:e4:b0:b2:fc:
                    33:d5:f0:e5:68:99:d8:8d:06:d3:80:6c:7b:be:d8:
                    91:22:2c:05:27:3c:39:6c:79:eb:8e:bf:59:09:1b:
                    fb:0d:72:b9:21:84:d5:59:8e:b7:b5:08:f5:fb:18:
                    3e:b5:76:69:32:42:ee:13:50:d3:a4:58:19:46:df:
                    9a:fa:89:ee:a6:b6:f0:3e:72:00:41:16:29:2b:85:
                    a8:7c:1b:cc:85:c3:6c:13:04:95:6d:bb:d0:51:40:
                    62:a6:f5:dc:32:16:04:c0:d7:40:c7:43:ed:6e:68:
                    d9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:58:FC:3C:B6:7E:20:59:36:07:B3:8A:A9:FC:1C:2A:55:FC:8C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/21bc10ac-6f2a-329c-aef5-f0d6188859f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/eb047d23-6a3f-4a43-9374-a2cfa94f3359.crl

            X509v3 Authority Key Identifier:
                keyid:4D:EA:4E:EA:10:C6:33:62:CD:76:08:E0:30:52:D0:94:AB:57:07:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:91:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:53:18:08:e4:55:5c:a9:5d:4b:a5:6c:92:1f:06:52:6a:45:
         04:cd:d9:d2:cf:f7:14:0b:aa:2c:3e:c0:e6:43:6a:b5:05:12:
         18:16:ea:34:9d:48:73:fe:ed:97:4c:4a:57:79:67:82:e7:fb:
         2e:9d:f3:f3:7d:97:1d:31:db:4f:3f:b7:d4:2c:4a:3d:1e:69:
         4d:94:e1:bd:8b:f6:f6:b0:5d:cb:95:5e:2b:56:69:fe:4f:0e:
         2e:36:1f:f0:94:7c:fe:5f:f0:88:ee:ad:ca:69:f3:ea:94:ae:
         7b:2e:28:7f:b2:99:54:39:62:46:b0:0c:cc:4b:20:84:ec:13:
         d2:dc:2e:3a:9b:ac:0d:d4:be:4d:54:d6:73:b9:32:82:d0:bb:
         08:72:7e:83:67:f7:d0:eb:74:fe:9f:c0:a2:71:98:bc:97:f8:
         ae:01:50:69:cf:b6:1b:28:64:30:0a:49:3b:4b:41:6f:8b:b3:
         cd:a6:02:f4:02:c8:5b:9d:5f:04:73:d7:17:d6:6e:d3:71:74:
         77:cc:98:b3:92:7f:bd:5f:65:08:8f:d4:fe:53:0f:66:ed:bb:
         60:93:d5:02:7b:cb:c1:14:ff:b1:1f:bf:16:68:16:c7:e5:43:
         4e:8c:cf:d1:8a:6f:b7:81:61:02:b8:4b:8e:76:f3:27:5a:9d:
         a7:ea:d5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:14:10 2026 by rpki-client