Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/a2537378-88f7-3290-93a6-55b48a73fc13.roa
File:                     a2537378-88f7-3290-93a6-55b48a73fc13.roa (raw, json)
Hash identifier:          +LOWYheAollIY0J230qamnbQyMR2Mzv272qAUQARgkI=
Subject key identifier:   91:F4:79:DE:47:2F:9E:3E:84:65:5C:06:96:52:6A:A5:27:3E:53:16
Certificate issuer:       /CN=d04d2126-a09e-46a8-b6c3-1c3c12a6342f
Certificate serial:       010D0C9F4328584E210EF741BF51570C942D1000
Authority key identifier: 0C:1B:AA:14:E9:9B:10:4F:A2:BF:22:A9:1B:30:7D:AA:A8:E2:9B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/a2537378-88f7-3290-93a6-55b48a73fc13.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     13850
IP address blocks:        2620:a6:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f7:41:bf:51:57:0c:94:2d:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04d2126-a09e-46a8-b6c3-1c3c12a6342f
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=164bb4a4-6c6e-407b-b0ab-e314c7d16681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:55:d3:a9:af:86:35:d0:3e:e6:70:e7:51:
                    e6:bf:d1:61:64:a0:c7:76:4c:77:9a:5d:6d:a1:ef:
                    99:66:f9:45:a6:21:3b:7b:35:4a:be:8d:39:02:4d:
                    11:1c:47:01:7b:d6:a2:01:d2:67:a5:f1:10:90:5e:
                    78:98:1c:72:9c:1e:2f:dd:f5:56:f3:51:30:32:06:
                    94:6d:60:87:13:00:57:c4:9a:60:6b:5b:ad:d8:2a:
                    c1:49:31:11:1a:1e:23:28:f2:08:b7:48:1e:08:5a:
                    99:19:58:1d:e8:64:57:db:94:8d:20:fc:23:92:cf:
                    1d:cd:63:69:21:55:3a:d3:fc:8d:80:d2:2a:ff:c7:
                    c9:99:3d:c6:31:eb:b4:4f:9d:fb:46:f1:53:8c:17:
                    5e:af:1f:16:f6:ac:71:2f:b8:e1:e7:b9:4e:90:29:
                    ff:87:68:42:b6:7c:52:4a:11:da:25:76:a8:95:ea:
                    18:76:b4:31:9e:8a:b8:23:92:4d:e9:e5:37:e4:02:
                    e3:07:8b:ad:a1:d6:a7:b4:b9:47:5e:bd:d2:98:72:
                    47:92:34:e5:dd:53:c2:44:40:6c:77:e1:c6:10:6d:
                    13:17:db:a9:a4:3b:10:09:6d:62:f2:64:cc:76:ee:
                    fc:e0:76:24:d9:97:c7:b4:e7:e9:40:bf:80:76:27:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:79:DE:47:2F:9E:3E:84:65:5C:06:96:52:6A:A5:27:3E:53:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/a2537378-88f7-3290-93a6-55b48a73fc13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:1B:AA:14:E9:9B:10:4F:A2:BF:22:A9:1B:30:7D:AA:A8:E2:9B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a6:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:61:27:54:b7:fd:31:62:c7:b2:a8:8c:e7:e3:06:be:27:d0:
         12:d2:30:7a:d3:c2:dc:d8:c0:73:22:6e:2f:62:79:6f:44:72:
         85:4d:7d:c4:f1:47:1c:bf:fe:15:27:4c:35:27:40:f6:88:4d:
         e2:15:15:c8:44:1a:b2:98:88:37:0a:a3:8e:37:62:17:0b:e9:
         f6:d0:76:0f:10:78:99:ce:ec:2f:43:a8:c1:64:43:68:18:c1:
         d0:f0:c9:63:0c:a9:f8:1f:87:99:13:e3:24:28:a7:f5:73:c3:
         07:03:7e:0a:b4:cd:6d:b4:e3:82:a9:01:59:cf:52:a9:f1:ae:
         fb:a3:f9:37:6e:d9:18:1b:7a:8d:19:62:30:0a:02:2f:06:24:
         47:f4:60:92:33:1e:a0:ca:5c:f1:ea:c9:17:68:dd:bc:a8:e9:
         66:89:04:44:1a:42:c1:ac:f9:ed:57:a8:70:e3:ef:5b:29:3a:
         78:2b:a5:35:0b:29:ac:8b:95:65:b8:89:96:52:b8:e9:f1:a8:
         af:83:28:03:18:02:bb:4a:39:31:88:22:f0:a2:38:1e:43:19:
         8b:fc:cf:63:07:cb:17:dd:da:e8:5c:85:b4:d2:5a:35:8b:4d:
         3c:3d:3d:cb:b7:05:9d:2e:83:37:cb:22:16:29:d7:43:14:6b:
         65:50:1d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:41:01 2026 by rpki-client