Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa
File:                     e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa (raw, json)
Hash identifier:          +qRGYPJwSmDVe9F5l2I3KfhU5SZaUFAcZzt4jYV0yPA=
Subject key identifier:   7A:F4:47:A8:6D:58:E7:62:A7:B0:26:4A:A0:35:5E:91:FE:93:E1:CC
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584DA11ABD8EEF657D487B97F100
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     394996
IP address blocks:        2604:a880:803::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:bd:8e:ef:65:7d:48:7b:97:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=8827d0e8-4c04-414b-b223-71ee4a713d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:1c:51:23:c8:48:e0:94:d6:ff:0f:f1:2d:
                    7c:8d:ec:b0:71:67:25:71:8c:fd:af:d2:92:09:fd:
                    a7:e5:c3:f1:f0:c8:11:bd:b4:37:f8:e3:ea:62:40:
                    5e:34:1a:47:f8:69:a1:0b:c1:1e:45:e8:df:c8:cb:
                    dd:c2:a5:da:89:a5:ee:bc:78:7f:93:3d:ae:bb:00:
                    52:fa:11:8e:31:dc:21:62:37:2c:3e:57:51:77:f3:
                    f8:30:fc:79:13:f5:ae:16:3b:2c:17:3b:22:13:2f:
                    49:5b:e2:ea:16:6b:39:f3:a5:bf:45:a1:de:6e:60:
                    7b:83:74:27:a4:b9:52:51:a1:2f:47:a7:7b:15:34:
                    24:52:23:36:9d:45:0b:33:c7:1d:87:7f:0a:72:42:
                    96:ec:de:c5:7c:b5:e6:f7:39:93:9c:3a:cd:ed:e4:
                    03:16:41:a6:74:49:09:67:96:5f:b3:f9:83:0a:00:
                    ed:e7:dd:31:4c:c6:5b:f9:0c:3b:27:5c:41:60:8e:
                    f3:03:f4:cb:f7:21:a2:ce:0d:69:4c:57:a8:4a:a0:
                    6e:99:ed:54:67:7f:87:3a:94:29:50:c2:4b:05:09:
                    50:10:8a:25:0c:ba:cf:15:69:05:de:be:9c:13:22:
                    fc:9c:b1:11:fc:73:aa:9d:2d:7a:b6:89:97:42:bf:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F4:47:A8:6D:58:E7:62:A7:B0:26:4A:A0:35:5E:91:FE:93:E1:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a880:803::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:d8:4a:dc:94:9d:eb:dc:4d:41:09:3e:4b:1d:95:c2:2a:3e:
         78:68:43:bb:c9:13:7c:1a:4a:61:6a:9b:c5:3d:d7:e4:23:5e:
         21:01:62:b5:24:cb:d2:7f:df:d1:2f:d3:65:2a:ce:f6:aa:28:
         3e:ef:9c:94:58:ec:ea:ca:a1:a9:db:6a:10:d8:e1:60:35:14:
         be:49:70:14:6b:d8:3a:a4:cb:fd:46:ac:bb:af:bf:06:b9:c3:
         41:63:0f:0b:80:77:02:48:38:40:70:9e:30:8e:17:9a:bf:e2:
         7a:cc:27:33:2c:6c:01:77:15:3b:14:6a:23:20:7a:ca:9d:3d:
         fd:83:ce:52:16:20:c2:d4:29:d1:57:1a:78:75:6c:65:4e:a9:
         72:5c:40:a8:81:97:97:ae:6e:4d:52:fe:c0:5d:73:84:86:24:
         c7:88:4b:13:9c:ce:47:c0:e2:76:08:fa:8a:8f:bf:da:1a:8b:
         9e:57:0d:19:71:8a:95:90:85:c9:37:d2:43:d4:28:87:57:60:
         05:97:af:27:64:28:39:3d:85:2f:2d:79:ed:a2:d3:83:f8:84:
         8b:07:83:40:6d:ce:e6:37:b0:f1:ef:f9:4a:a2:36:ec:58:08:
         23:e7:78:14:c1:de:e1:13:a7:e3:e2:79:b2:9f:c5:3c:77:6d:
         99:65:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:50 2026 by rpki-client