Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/6b295071-e758-35cd-86a2-9b413d559a1d.roa
File:                     6b295071-e758-35cd-86a2-9b413d559a1d.roa (raw, json)
Hash identifier:          zlrQkr1TiavPTCl3Of15jwqRtsau+gjfDn3bFdm8Usk=
Subject key identifier:   C6:74:42:69:28:F1:2B:3A:A0:25:6F:B9:1C:CC:21:38:55:82:9F:68
Certificate issuer:       /CN=8bf08e2b-3722-4799-800f-2ecf7a554b0f
Certificate serial:       010D0C9F4328584D7A0551687E0023CC0C3D32E0
Authority key identifier: 0B:A0:ED:10:56:8B:05:D9:58:04:69:EA:B7:47:7F:B1:43:E4:CE:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/6b295071-e758-35cd-86a2-9b413d559a1d.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     393667
IP address blocks:        2620:11c:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:51:68:7e:00:23:cc:0c:3d:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf08e2b-3722-4799-800f-2ecf7a554b0f
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=65ca33fc-2301-461a-bd4e-83cc938df552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:db:6c:05:ad:c8:dc:db:6f:17:26:f1:59:
                    f9:44:5b:d0:6a:1c:5d:52:4b:79:31:8a:2f:d9:b4:
                    0d:05:16:46:a2:29:f7:b8:a3:ac:55:24:08:76:75:
                    6f:aa:47:17:6b:91:ca:39:39:e6:8e:44:d2:3c:11:
                    65:f7:22:ef:5b:04:2d:06:a7:17:5f:9d:84:14:18:
                    2f:63:f6:53:b2:01:ae:b9:db:0d:59:24:d6:10:f6:
                    fa:1a:ea:d5:06:21:49:29:2e:c9:2e:c3:bb:08:0d:
                    30:67:a9:7f:c6:3f:a7:f0:4e:aa:e5:e1:84:94:da:
                    eb:e4:36:2e:cd:b0:14:0a:cb:66:60:28:c5:e9:aa:
                    43:a9:3c:e0:7c:6b:7b:08:40:d1:fe:10:a0:24:3d:
                    db:3c:f5:13:2e:e2:51:c0:94:1b:79:35:c8:75:12:
                    a2:bc:4a:10:7e:74:1a:17:ce:ff:55:50:09:c7:96:
                    4b:54:91:3d:a9:99:cd:ee:71:7f:b2:9e:db:c6:3f:
                    98:53:e1:42:23:f8:a1:c8:7c:1c:d5:ac:2e:1e:e7:
                    02:fd:ae:73:ad:78:2e:af:59:b0:54:1e:44:ba:f1:
                    92:49:68:68:b7:d9:8e:29:02:1f:77:53:98:35:47:
                    7e:cc:9e:82:07:75:b6:59:d7:46:3f:02:d8:8a:d8:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:42:69:28:F1:2B:3A:A0:25:6F:B9:1C:CC:21:38:55:82:9F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/6b295071-e758-35cd-86a2-9b413d559a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.crl

            X509v3 Authority Key Identifier:
                keyid:0B:A0:ED:10:56:8B:05:D9:58:04:69:EA:B7:47:7F:B1:43:E4:CE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11c:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:47:a7:d8:c4:72:81:23:33:b5:11:99:a0:9d:0f:bf:2a:63:
         c8:28:92:7f:07:1f:97:f1:be:52:f1:db:ee:b4:7d:54:38:12:
         fc:cf:d0:2e:37:2f:1a:05:0d:ee:5b:8c:6a:3e:01:51:77:10:
         f9:e0:94:6d:82:55:d0:59:c3:78:b7:5e:01:2c:9e:f6:fc:ea:
         c1:b9:8a:b0:94:48:24:5b:3a:20:72:e0:12:57:92:99:f3:ad:
         a2:05:88:55:65:55:0c:1b:78:3e:99:f7:cd:a6:d3:a8:18:58:
         27:09:23:3a:c0:c0:c3:3b:b8:b8:42:72:2a:52:50:ef:43:db:
         4a:19:82:d4:d6:5f:49:b6:4c:d3:df:45:25:d7:54:6a:06:7b:
         bc:42:1e:5c:6d:4e:a1:70:49:03:80:77:d6:ac:03:27:c5:a6:
         f5:f3:bc:df:93:fc:27:d0:f5:73:13:67:6c:84:5b:c6:7e:c5:
         00:a1:e1:c3:9e:2b:0f:32:c2:14:36:c5:6c:7a:83:92:21:4b:
         b4:e4:1c:0f:a2:0b:b2:36:d5:52:ce:42:f2:24:70:65:45:2c:
         e2:59:d8:29:c6:5b:39:4a:de:9d:3d:aa:b0:8c:74:63:1b:10:
         b8:0b:27:ca:53:01:e5:73:db:e3:e6:30:7a:f6:2b:91:74:a1:
         4f:e8:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:17 2026 by rpki-client