Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/2e2bdbea-dc57-39ba-ae79-df6747ae6f1c.roa
File:                     2e2bdbea-dc57-39ba-ae79-df6747ae6f1c.roa (raw, json)
Hash identifier:          v2oWnaKNPHWlygJ4aLjLDNocRNtO1bibWeZDlvEc054=
Subject key identifier:   31:A3:A1:47:8A:C7:EF:89:A1:5D:14:E9:0A:5A:9E:52:29:12:A0:B0
Certificate issuer:       /CN=3db33a74-4bfb-4717-906c-95b172456bd9
Certificate serial:       010D0C9F4328584E000636AA3BFC2B1D09B7BB80
Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/2e2bdbea-dc57-39ba-ae79-df6747ae6f1c.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     401671
IP address blocks:        2604:c20:42::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:36:aa:3b:fc:2b:1d:09:b7:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=4f121e2c-e9de-4d9c-9ca7-79e9927eae78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:0a:04:ee:ce:ff:8f:9d:56:85:b2:dd:67:
                    c2:19:60:f1:f3:f8:0a:32:fa:2b:9b:34:74:a3:30:
                    3b:40:35:0f:92:ce:b6:73:b7:8b:e1:66:89:bf:35:
                    36:24:7d:95:7a:6f:a5:42:04:40:b0:cb:ba:a1:b2:
                    a7:a8:d1:d1:9b:c6:ea:b3:ef:ec:d6:2c:ec:8c:f7:
                    88:c6:50:66:15:b5:43:ff:6b:c7:25:39:a9:61:0e:
                    54:4b:97:3b:36:be:4d:9a:4f:6d:67:35:31:9c:67:
                    ac:5b:f0:e7:6d:da:8e:a9:d8:af:b7:16:9c:53:8d:
                    5a:c3:f4:26:06:30:4d:9e:7a:59:0d:67:30:1c:a8:
                    4f:4b:2a:39:b0:7a:a3:d7:c6:4d:c4:29:a6:cf:32:
                    0a:1f:6d:e2:98:29:a0:22:da:7c:1e:be:b1:58:e2:
                    71:bf:b0:03:bc:24:7c:d1:32:cc:8e:3f:b4:e1:8c:
                    05:8f:cd:a0:08:70:ed:45:99:9d:6f:30:e1:8f:ec:
                    ae:f2:cf:ef:29:f5:43:7b:b2:94:d5:be:88:c4:1c:
                    ec:bb:2f:86:88:ed:bf:93:e9:15:f9:a0:e2:df:60:
                    dc:7b:62:16:cb:cf:f3:1b:73:49:6e:6b:1b:45:44:
                    da:67:cc:60:c3:de:36:b1:9f:ce:35:38:f7:64:8c:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A3:A1:47:8A:C7:EF:89:A1:5D:14:E9:0A:5A:9E:52:29:12:A0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/2e2bdbea-dc57-39ba-ae79-df6747ae6f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl

            X509v3 Authority Key Identifier:
                keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c20:42::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d6:31:61:38:4c:37:d1:dd:a7:33:96:e4:fb:36:5e:d7:87:
         9b:38:aa:26:46:0a:98:c0:9e:cf:89:b8:8a:ec:7f:43:f8:ec:
         24:8b:67:ec:df:e5:88:8c:9b:8b:a4:d6:ef:6f:b6:cb:5a:36:
         b5:16:cc:04:a0:5d:e1:37:e4:17:fd:9c:5b:f3:06:bd:ce:98:
         ff:ee:5d:49:a9:80:45:ed:80:08:83:59:47:f8:9a:27:3a:5c:
         fa:be:ce:ba:22:3c:b1:61:04:36:cb:ef:38:bd:d4:67:9d:01:
         0e:1c:35:47:e2:e9:5f:ec:13:08:4c:12:c6:d8:83:80:22:55:
         42:40:73:41:b6:32:55:22:31:64:95:85:3e:09:4a:1b:17:72:
         6f:c1:02:b8:49:ff:75:bf:8f:cd:30:d5:e9:36:c6:9d:d3:fa:
         6d:a8:cb:07:4e:b7:c9:36:29:bf:e2:ef:fe:d2:32:25:31:97:
         ba:07:6f:f4:21:23:07:31:49:bc:fa:16:15:7e:5a:e2:04:94:
         e5:6e:10:37:46:69:5e:c4:03:27:95:d1:86:c3:15:cd:af:2c:
         2d:7c:a6:28:1b:14:e0:49:93:d5:45:e1:59:df:96:c0:a0:a8:
         34:12:bb:7c:7c:07:5e:d3:de:36:c2:ab:8b:28:1b:a7:31:e1:
         c2:6d:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:27 2026 by rpki-client