Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa
File:                     8f53cfe8-3766-31b5-8862-753274ab5043.roa (raw, json)
Hash identifier:          zLm0FIl9mpeFS7btVwl0PHdLI8x14fXcWK3+/dWafQw=
Subject key identifier:   1E:80:DC:47:95:13:1F:EE:3D:CF:D0:01:74:69:12:FD:28:2E:B6:8B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059BD4573C56C81715B95F70
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     11344
IP address blocks:        2001:4860:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:d4:57:3c:56:c8:17:15:b9:5f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=7af27028-e40d-4321-9118-8e7d39149860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:e4:ca:56:02:0d:dc:1c:32:ab:20:0c:ad:
                    99:98:77:3d:9d:9c:b5:7b:01:b9:20:2e:f1:71:d9:
                    2a:6a:0c:dc:1a:3d:90:34:22:11:6c:15:c1:08:05:
                    cb:ba:fc:18:96:33:ac:e6:d7:e5:22:47:53:b4:cc:
                    85:76:8a:5e:97:6b:6b:bc:18:6b:18:bd:19:e7:35:
                    5e:ea:4d:89:d2:04:8d:f0:01:29:3f:5a:25:86:94:
                    e8:33:46:8f:28:2c:e8:30:b5:36:44:51:dd:2b:37:
                    b1:a2:89:3b:91:34:d3:29:5e:86:ea:f9:1a:ac:08:
                    36:8e:40:ab:75:08:44:36:16:5d:5e:ee:3a:cf:a8:
                    0a:57:55:ae:15:74:e2:fa:21:ef:ea:29:44:ed:3d:
                    95:62:d1:bb:b6:17:58:02:0c:78:ca:68:8d:06:b1:
                    f9:b2:c3:6c:df:6b:3c:ee:d7:c9:94:bc:f2:43:5b:
                    04:14:43:31:0d:19:34:4a:ce:71:d7:89:f3:fb:e0:
                    57:39:c1:31:56:db:9b:53:7e:07:f2:fe:dc:a9:f6:
                    01:f6:3e:88:24:74:86:ee:64:b7:aa:69:3e:ae:b0:
                    50:11:7b:30:b4:7b:09:b6:e8:ba:e6:fc:07:cd:59:
                    c8:c3:15:ca:c1:bf:cf:5a:32:54:6d:e7:0a:f9:17:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:80:DC:47:95:13:1F:EE:3D:CF:D0:01:74:69:12:FD:28:2E:B6:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:d8:0a:f9:c9:0c:69:93:c5:6f:bd:c1:4d:ae:13:59:ed:
         ae:ca:e9:ee:17:7a:ec:47:93:70:88:31:84:6a:1f:b4:bc:96:
         f8:71:e7:8b:78:32:1e:4d:9d:96:c1:a4:e1:e0:87:56:eb:da:
         40:a6:49:72:65:19:c5:7d:8d:45:49:f2:c9:cc:c3:f6:62:dd:
         93:64:12:95:35:cc:52:7f:66:9d:81:fb:81:e5:4b:e3:e5:2a:
         04:bd:e7:71:5e:73:94:69:63:37:7a:81:5b:e1:84:27:b6:68:
         ff:7c:25:4a:c5:a0:1e:d0:e0:36:2e:7f:f1:f4:2b:3e:26:ca:
         1e:c2:20:42:bd:45:b6:ce:7b:68:ae:ad:38:f0:7c:b9:75:33:
         8c:c6:78:e2:f3:c5:9c:7e:64:38:3e:c9:46:00:c2:d3:e3:8a:
         d3:ae:00:20:52:46:ce:ad:d4:b9:ed:9d:fa:56:84:b4:1e:32:
         06:47:6c:fd:38:b0:37:cf:ac:f4:56:31:02:93:43:b9:2c:9a:
         68:a8:13:00:65:15:3b:7a:3f:54:1d:a5:d1:83:82:d0:47:2e:
         ae:96:3f:46:50:63:d7:07:b3:64:cc:53:42:cc:34:90:2f:09:
         f1:fb:ab:cd:70:37:ff:bf:d7:4f:f1:8a:92:4e:ed:66:04:05:
         8e:c6:fc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:48:02 2026 by rpki-client