Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e83c5795-8197-350a-8f84-13a04f15b724.roa
File:                     e83c5795-8197-350a-8f84-13a04f15b724.roa (raw, json)
Hash identifier:          xz2I6RIDM9JmSFdg/tLhxckznM1ODb5YXKx9HLjLgBc=
Subject key identifier:   6F:68:FD:77:15:EC:E1:CB:DC:D1:DD:7C:58:2A:3F:A0:06:75:B5:41
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584D19B4E2E39805A22F125D27D4
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e83c5795-8197-350a-8f84-13a04f15b724.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2605:b040:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:e2:e3:98:05:a2:2f:12:5d:27:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=1f5c1b51-fbc0-4e46-8d6d-698ee7082bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:dd:7f:c4:b3:85:07:91:34:9b:0f:43:71:
                    f8:15:e1:3c:2d:24:02:be:78:06:38:71:24:58:84:
                    eb:77:e0:fe:f9:38:5d:ef:5d:4d:69:02:05:20:b3:
                    33:0d:6f:95:38:d6:33:0d:3d:90:71:62:9b:67:60:
                    e9:09:0d:28:0b:2a:bd:32:e0:63:44:40:67:2a:ea:
                    d6:a9:85:18:d3:a9:25:04:b6:3e:78:d1:d4:db:af:
                    3a:9c:c8:c2:2d:6d:cf:d5:dd:37:e3:fe:8e:76:0e:
                    3d:4b:ae:d0:e0:a7:f7:48:a4:96:8b:38:b8:3b:de:
                    b7:77:c1:4f:29:93:c7:f9:c6:7c:1b:9d:49:48:fd:
                    22:cd:90:31:b3:8a:2e:e5:db:70:e8:e7:a3:8f:5c:
                    33:22:44:a6:63:5a:23:da:ab:a1:95:33:8a:db:46:
                    01:18:4d:be:b1:43:b5:47:97:06:c2:43:f3:f2:91:
                    71:49:56:06:a0:72:9f:fd:87:24:47:2b:28:b5:41:
                    aa:8b:53:f1:92:53:14:31:72:3d:7d:9c:b7:94:ab:
                    45:d1:26:b4:49:95:cf:c0:67:ee:8f:00:1a:7e:4d:
                    03:e8:fb:1e:62:83:08:03:ad:9f:c7:3d:36:a1:2d:
                    fa:b2:bc:80:57:79:89:29:07:ce:e3:a9:10:bf:98:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:68:FD:77:15:EC:E1:CB:DC:D1:DD:7C:58:2A:3F:A0:06:75:B5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e83c5795-8197-350a-8f84-13a04f15b724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:48:a6:b5:7b:43:23:3f:a7:ce:d7:55:c8:ae:d1:7f:68:
         f7:34:f9:aa:5f:ff:97:6c:6c:07:62:7e:e4:35:68:00:1f:8f:
         86:53:2f:cb:09:d7:84:e8:f3:55:02:ff:70:56:05:ff:ee:61:
         fe:24:9e:cb:9b:22:89:5e:c1:de:71:25:21:e9:7c:79:55:a5:
         2e:b3:83:d2:e7:0f:d4:f7:0c:a5:a1:39:c4:23:f2:ed:13:d1:
         80:bd:b3:8a:63:76:9d:4c:3a:e4:de:6e:6e:24:4f:f7:b3:cd:
         83:7b:d5:cd:b8:72:bf:61:85:00:a7:f7:0a:c0:f9:29:af:b4:
         cc:1f:48:0c:90:9f:2e:05:b9:ae:d1:98:b9:26:16:b0:96:18:
         d2:e2:87:15:f8:62:c0:d7:22:0a:2d:d4:d6:b1:00:28:17:0c:
         e4:18:0f:4c:ab:27:15:1d:d9:0e:cd:8d:7c:e5:2c:0c:b6:15:
         f7:46:45:dc:b6:c6:7a:5e:4a:d8:f6:e4:44:30:0a:f5:c3:70:
         78:a2:f1:ab:5f:bd:77:7d:15:02:32:1f:94:b8:19:3b:48:cc:
         79:99:f7:67:5c:61:40:fe:00:6d:39:5b:7b:5d:0e:56:5f:ee:
         a0:bf:fc:36:28:ef:23:ac:4b:21:85:86:54:fe:aa:52:ed:7e:
         8a:ed:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:45 2026 by rpki-client