Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/58c9354f-222a-32b0-8251-4712e7262aae.roa
File:                     58c9354f-222a-32b0-8251-4712e7262aae.roa (raw, json)
Hash identifier:          rcBYW3N9C16tiAMG5sYOmPZFC8uttRPYFsYnHUNxbKQ=
Subject key identifier:   15:CB:05:73:E4:74:12:B9:73:EA:7B:F8:56:E1:04:43:1A:A8:54:45
Certificate issuer:       /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
Certificate serial:       010D0C9F4328584D01FDE0014DC66A1EFA8C0490
Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/58c9354f-222a-32b0-8251-4712e7262aae.roa
Signing time:             Sat 28 Feb 2026 01:08:55 +0000
ROA not before:           Sat 28 Feb 2026 01:08:55 +0000
ROA not after:            Fri 29 May 2026 00:08:55 +0000
asID:                     400011
IP address blocks:        2605:b9c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:01:fd:e0:01:4d:c6:6a:1e:fa:8c:04:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
        Validity
            Not Before: Feb 28 01:08:55 2026 GMT
            Not After : May 29 00:08:55 2026 GMT
        Subject: CN=d412294e-6309-4514-a073-9d393a55e0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:33:a6:52:6d:09:18:73:b9:3a:c1:a1:e0:
                    2b:98:a1:cd:8c:f4:98:6f:71:81:b5:d1:70:b6:50:
                    ab:0a:61:aa:7f:ff:d9:6b:fe:e0:5e:4b:dd:9e:1b:
                    7f:e3:f4:ae:00:b1:ae:75:04:a2:fc:e8:6f:b1:48:
                    b6:a4:44:88:57:b9:7d:f0:50:0c:00:50:eb:7d:27:
                    cc:e7:e5:f3:c6:50:5f:55:40:99:01:e2:67:d7:2c:
                    6b:22:a8:a1:fe:4c:1c:89:a8:ed:ff:c9:b4:fa:a2:
                    83:bb:8a:4b:32:34:db:45:c9:59:29:ec:8c:cd:39:
                    77:12:d9:20:9d:be:31:4e:b3:cd:b4:3e:d1:c9:87:
                    96:fe:00:d1:31:dd:0e:44:68:72:13:31:d5:79:7c:
                    12:f7:8a:66:e5:bd:ed:a9:84:69:41:be:36:77:c0:
                    40:ea:16:4a:5a:21:79:fa:f8:f0:17:67:28:c3:7c:
                    32:c2:32:c2:6d:d2:fb:27:7f:eb:92:97:be:cd:c6:
                    cf:45:91:d7:8d:a3:ac:8a:6b:3a:8f:3d:d2:bf:0d:
                    99:c9:26:49:88:d1:f5:c1:53:6b:03:fc:36:10:18:
                    36:25:23:5c:60:d3:0c:33:67:23:b9:1c:12:b7:11:
                    fb:18:9a:52:67:e1:03:50:20:e6:e0:0b:2c:58:a1:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CB:05:73:E4:74:12:B9:73:EA:7B:F8:56:E1:04:43:1A:A8:54:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/58c9354f-222a-32b0-8251-4712e7262aae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl

            X509v3 Authority Key Identifier:
                keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:96:5c:11:05:87:9b:8f:78:be:e3:89:9a:3f:4b:6e:35:63:
         0e:40:58:85:9c:42:27:42:28:bc:f9:53:30:bc:94:63:c1:94:
         19:c1:fb:57:c6:99:da:6d:2c:b4:ed:c4:a3:37:cd:10:a4:3b:
         71:00:27:ae:81:40:fc:34:ed:ac:6d:7c:a0:e1:fc:ed:de:29:
         75:2c:61:55:12:e1:6c:83:95:c2:5a:27:d6:a6:4c:c3:2c:08:
         13:14:92:95:3f:07:81:fd:7f:d4:59:33:75:bb:db:1e:0a:a2:
         ce:4a:8e:e5:b3:70:88:71:58:38:c8:c7:f1:69:de:da:61:20:
         97:10:e8:c5:c8:b0:f6:66:c1:e3:88:55:4d:b3:2c:84:b1:03:
         3b:ec:21:19:b4:a5:75:69:4c:e4:b5:eb:04:7c:db:91:7e:89:
         94:ae:d1:34:22:9d:08:1a:bf:ca:32:1b:c5:5e:a7:15:43:92:
         70:89:48:da:d3:31:44:ab:8e:46:4d:89:49:da:10:47:83:d7:
         61:d7:91:50:d1:22:8b:da:bc:6a:5d:06:d6:7e:e0:18:f6:a3:
         cd:95:f9:b4:f9:af:9d:8f:07:93:73:30:1a:a2:96:4b:6a:0c:
         00:cb:07:ed:8b:ce:cf:40:5b:34:63:8e:47:91:bf:e5:69:ac:
         e2:df:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:28 2026 by rpki-client