Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/a7081928-f798-3c9b-b518-1db69e174ed8.roa
File:                     a7081928-f798-3c9b-b518-1db69e174ed8.roa (raw, json)
Hash identifier:          95WwGHwCJPs+cLmRmUGIQZ2GWvJK+SXMs2QdML26Vjg=
Subject key identifier:   C7:0A:D1:04:8F:B1:27:E4:50:54:BB:3C:51:7A:65:D2:59:59:92:09
Certificate issuer:       /CN=3db33a74-4bfb-4717-906c-95b172456bd9
Certificate serial:       010D0C9F4328584DEB9B58631D641907267938C0
Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/a7081928-f798-3c9b-b518-1db69e174ed8.roa
Signing time:             Fri 22 May 2026 17:29:32 +0000
ROA not before:           Fri 22 May 2026 17:29:32 +0000
ROA not after:            Thu 20 Aug 2026 17:29:32 +0000
asID:                     401671
IP address blocks:        2604:c20:10::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:9b:58:63:1d:64:19:07:26:79:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9
        Validity
            Not Before: May 22 17:29:32 2026 GMT
            Not After : Aug 20 17:29:32 2026 GMT
        Subject: CN=4b673321-0871-4a83-8a12-88625ceafec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:d1:71:ce:1e:d6:a2:9c:a3:ed:bf:2f:40:
                    54:22:56:23:aa:18:3a:6a:cb:35:f0:fc:c1:af:67:
                    f1:f3:58:01:c8:54:3d:86:8d:d7:06:e0:6c:61:54:
                    1f:2f:f2:3b:7f:1a:66:2e:07:48:43:1b:ca:c8:27:
                    e4:7e:bd:38:eb:39:42:4f:1b:87:a9:16:f2:67:93:
                    94:9f:4d:25:59:b3:89:af:26:62:ea:f5:47:97:4c:
                    1e:d3:6c:c2:4d:92:65:67:fc:f8:2f:b2:6c:6d:b4:
                    69:76:3b:b4:c4:b7:3f:bc:6c:f5:27:50:6d:60:c5:
                    12:f8:1b:35:cd:02:24:57:9f:20:55:da:ed:57:6f:
                    88:a2:44:63:33:96:f8:e6:f4:70:09:35:cf:e6:e0:
                    d8:61:ad:5b:27:86:2e:ed:a5:98:2a:99:28:fe:17:
                    a5:67:ea:32:0b:34:f9:73:05:4e:4e:98:b8:87:48:
                    fb:b6:d5:3e:a3:1f:ac:11:c1:70:8d:22:bf:b8:08:
                    61:20:c5:fd:f5:5f:00:39:b1:12:b8:b4:ba:7f:cf:
                    71:31:7c:aa:b7:df:a9:68:c2:d4:f7:32:e9:72:90:
                    88:c0:d5:01:9d:81:8c:6c:72:3b:82:85:7a:b3:ac:
                    4e:e6:e1:19:84:f8:bb:34:5f:b1:80:d2:80:6a:1b:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0A:D1:04:8F:B1:27:E4:50:54:BB:3C:51:7A:65:D2:59:59:92:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/a7081928-f798-3c9b-b518-1db69e174ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl

            X509v3 Authority Key Identifier:
                keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c20:10::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4e:89:b3:7d:21:04:71:e5:60:fc:0f:55:68:08:34:b4:1f:
         3d:5c:f1:e2:21:38:3b:d6:84:25:e4:d2:4e:09:61:71:c5:d7:
         e2:91:86:cf:7f:d0:9d:99:f2:e0:47:7f:01:07:c6:f7:f9:2c:
         ab:0e:80:19:40:d3:d7:a9:d0:32:6d:8e:a8:0a:f2:c2:3e:e6:
         d9:a1:ad:af:45:fd:09:3f:ba:f8:50:32:64:2e:75:d4:6e:a3:
         07:e4:3e:43:70:20:16:07:a0:d9:a3:42:40:e8:34:a6:43:f2:
         9f:69:f9:de:33:68:9e:50:0a:d5:74:84:bf:09:10:80:40:52:
         32:36:83:2b:1b:3e:20:88:1f:6d:7d:7d:f7:47:07:cb:14:2e:
         70:74:4e:2a:1b:d7:02:94:94:8f:32:d5:1f:1d:b7:95:41:bc:
         1c:91:98:a5:0d:51:b1:b5:14:1e:96:47:e3:77:69:d7:a4:86:
         38:0e:1d:84:9e:08:b1:33:fa:55:03:c4:c2:55:3c:48:8e:eb:
         b0:13:b6:1d:de:97:a6:4a:07:5d:20:ac:c9:e7:cb:fe:50:08:
         aa:c4:4d:6d:6b:ac:9f:a6:d7:a4:c4:ea:34:96:e5:02:24:0d:
         7a:42:b7:5c:88:7f:fb:b7:f9:26:9a:e9:f7:fa:b7:f2:4c:da:
         59:ec:31:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:04 2026 by rpki-client