Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8870644e-30b4-3e41-9fe2-f378575547f3.roa
File:                     8870644e-30b4-3e41-9fe2-f378575547f3.roa (raw, json)
Hash identifier:          SEMUMsOdXa2MzVKC/u9N8uU5H20XzBIdugUYqtiAIUw=
Subject key identifier:   25:1B:B0:17:3D:0E:72:8B:D8:50:20:5C:35:CB:E2:01:88:C5:8B:11
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584D95EFF40F75730539E9E32180
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8870644e-30b4-3e41-9fe2-f378575547f3.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f4:0f:75:73:05:39:e9:e3:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=734d78d0-ce94-4296-9af6-593e5674c60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:2d:7d:91:69:5a:f4:b7:da:8f:d0:e4:93:
                    a7:64:a2:be:9a:b3:b2:5c:f8:b0:6b:ce:f2:3c:a0:
                    98:3a:bc:be:ec:8b:36:35:54:be:52:3e:c6:c5:75:
                    05:b0:06:88:81:a2:7b:35:1a:d7:b2:bc:fb:9e:ac:
                    fc:8b:05:55:f7:bb:40:72:90:68:42:11:90:f1:19:
                    d3:f7:b0:46:a8:c4:e3:ef:20:61:e4:38:ec:4b:80:
                    a8:0d:81:5a:f8:95:4e:6d:81:42:89:81:34:ca:37:
                    16:6e:75:10:ff:8b:15:bb:bb:d2:c2:ca:ae:d6:9c:
                    63:80:41:fd:0c:63:a6:4d:a9:ca:41:e3:a7:23:f2:
                    85:21:1d:a6:77:f4:59:5f:0e:da:9b:71:2f:9b:94:
                    c1:2d:b7:6a:b0:fb:9d:06:b4:1d:33:c8:d8:26:33:
                    78:8f:7e:19:34:bb:e9:18:40:86:96:f0:1d:e3:2d:
                    7e:4a:e5:58:e8:0e:15:f3:02:a0:2c:11:4c:08:66:
                    27:2e:2b:3b:10:cd:80:bd:17:11:f5:c2:9d:ac:1e:
                    68:ba:dc:8a:99:89:7f:e4:97:00:0b:aa:b1:7b:66:
                    06:d5:47:91:52:6a:a8:f2:1d:cc:cb:10:ad:d3:76:
                    87:3e:b6:89:37:33:f9:87:ed:39:2a:0b:92:80:94:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1B:B0:17:3D:0E:72:8B:D8:50:20:5C:35:CB:E2:01:88:C5:8B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8870644e-30b4-3e41-9fe2-f378575547f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:29:f8:3e:fc:c7:0b:8a:84:16:ce:66:be:6e:63:8e:6b:f2:
         0d:4b:5c:4b:9b:67:0a:e2:ed:06:96:87:2d:2b:97:fa:cd:ed:
         12:d5:b7:04:de:c5:58:ca:fe:44:78:49:70:11:e6:38:e9:8c:
         b4:b7:c6:c2:bd:b4:d3:42:51:25:07:86:71:96:e6:d4:bd:23:
         79:99:e1:08:ee:1e:38:ae:0d:3d:ed:79:24:f0:e4:52:68:24:
         71:cb:64:59:63:b3:6a:15:82:ea:65:b1:d1:94:71:2d:21:64:
         a7:e1:63:6f:e2:fa:e3:81:d9:39:de:ad:db:48:ff:50:4b:e3:
         23:af:bd:a7:33:25:16:41:1e:0f:31:68:f0:93:cf:b7:55:90:
         4a:b2:df:e1:37:e1:e1:f2:2d:b9:4f:d6:cc:06:32:f7:46:23:
         5e:89:6f:fb:ba:01:c9:a9:7c:a3:46:bf:04:53:5f:47:9c:8d:
         79:05:f1:ab:ae:f3:f4:cd:8a:d8:c5:c7:54:fc:c7:c7:3d:86:
         9d:f2:bb:e5:ca:db:18:4c:0f:34:bb:44:13:56:57:20:4c:68:
         13:1f:ee:62:9d:8b:54:b5:38:f5:24:21:83:92:98:97:1a:92:
         4f:71:6f:b4:83:2a:61:88:0f:52:4c:ac:c6:1f:e8:ec:1d:b7:
         1b:2b:d2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:23:37 2026 by rpki-client