Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa
File:                     8a673006-55a5-3418-963c-f9a5b7571cea.roa (raw, json)
Hash identifier:          VR/3NMQk8BMNbVpqCIhjxCUHHAUTnAno6udMUvaNlbk=
Subject key identifier:   B9:B6:12:29:C7:C8:C6:FA:46:A8:32:76:73:E1:BB:5D:7C:9F:45:32
Certificate issuer:       /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
Certificate serial:       010D0C9F4328584DCDC5A4DEBEC7007D698CFC00
Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     393869
IP address blocks:        2620:11f:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a4:de:be:c7:00:7d:69:8c:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=59635ad5-224d-4f78-b1f7-018a30519897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:05:1d:8a:0a:3f:05:38:bb:d3:96:f0:47:97:
                    e6:80:36:40:63:01:36:ad:b4:71:97:af:1d:fb:ce:
                    d4:7d:c0:77:27:4d:b1:0d:55:79:03:33:fd:52:e5:
                    cb:ee:ec:73:37:a9:82:9a:3d:45:3f:0c:94:4f:08:
                    91:24:0a:51:99:8b:d1:da:41:3d:7f:70:e5:e7:5b:
                    83:c7:84:30:44:98:36:a8:44:88:7d:77:e2:33:7f:
                    78:5e:7b:95:1a:fd:2c:98:1e:2c:3c:54:42:6d:9c:
                    a2:5b:50:0d:bd:11:6f:aa:be:7b:dc:97:ee:ba:14:
                    e5:f0:0f:e9:8c:a1:30:e5:b4:6d:27:a8:0c:db:16:
                    8c:fe:38:78:a6:2f:10:0f:9e:a5:26:56:7a:0a:7e:
                    0f:23:29:cf:7f:72:6c:a1:70:01:78:06:a4:53:39:
                    d0:9b:d2:a5:f3:73:9e:21:d0:b4:9e:1b:68:8c:79:
                    86:c6:0d:ae:2a:50:fa:e6:02:50:e5:0b:b8:b8:80:
                    e3:fd:e5:19:7d:09:b4:b1:97:47:b2:31:91:9d:05:
                    3e:95:0b:ba:8a:98:0f:89:62:75:92:6c:46:6f:96:
                    1d:5d:22:d0:c5:d4:79:d9:7d:e2:91:3b:26:84:1c:
                    87:42:00:8a:92:3e:9a:4b:3e:05:64:d4:f9:5d:1d:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:12:29:C7:C8:C6:FA:46:A8:32:76:73:E1:BB:5D:7C:9F:45:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl

            X509v3 Authority Key Identifier:
                keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b8:4e:cd:26:b9:18:43:f8:10:48:77:94:61:e3:53:5a:35:
         7a:ec:6a:ba:b8:b3:b0:a0:f5:28:4a:2b:e9:df:fa:5e:34:88:
         a0:7b:d3:ba:98:3b:e5:38:f8:27:69:68:e1:a8:bb:ff:05:1e:
         42:6d:22:dc:93:44:4d:72:7d:93:15:94:df:4d:8d:58:d9:5c:
         6f:07:ac:d8:d2:2e:30:65:c7:62:5b:f8:9a:70:01:07:65:21:
         90:28:6d:79:f5:1a:d9:43:78:49:f3:e7:a9:04:38:59:c0:c4:
         95:12:d9:1f:75:68:23:61:7e:d4:7c:e2:ee:b0:5d:06:81:a0:
         46:35:5e:29:c2:7a:02:b2:c6:6c:e3:44:33:01:f7:4d:e1:9f:
         8b:b5:67:63:d4:33:07:4c:97:09:6f:85:64:94:9c:bc:61:4f:
         26:ea:fb:0f:55:7b:b2:5b:81:49:42:11:88:75:69:97:0a:51:
         3b:27:8e:cd:14:3f:93:50:8e:b4:e6:f8:ea:19:66:87:c5:d5:
         21:fb:34:8a:9d:5f:79:f0:90:1f:d5:23:d8:83:a4:6b:06:33:
         a8:59:7d:a3:b0:3b:34:42:d0:5c:23:1e:df:e3:91:25:c1:07:
         9f:49:17:ba:c6:8f:4b:cf:f6:9a:a6:bf:31:90:50:12:a3:48:
         6d:e7:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:40:40 2026 by rpki-client