Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/e517ce2d-2311-3962-910c-eda4bf1da862.roa
File:                     e517ce2d-2311-3962-910c-eda4bf1da862.roa (raw, json)
Hash identifier:          pwaEjLh6u208riFtzqzV/JvaGLSr3DW6MmTjce6cfc4=
Subject key identifier:   37:5F:AE:91:F5:57:0A:33:9A:14:D3:91:5A:72:E5:74:C0:FC:14:A3
Certificate issuer:       /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Certificate serial:       010D0C9F4328584DBBA04E48E65269C38E6B2200
Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/e517ce2d-2311-3962-910c-eda4bf1da862.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     2055
IP address blocks:        2620:105:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4e:48:e6:52:69:c3:8e:6b:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=cad67eef-4ccf-4a00-a3db-ebd56fa01aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ef:78:ad:44:cb:bd:64:41:21:0e:99:7e:0d:
                    fd:4a:c1:30:a0:90:a6:18:91:23:c8:73:44:5a:84:
                    b0:4c:1f:e0:48:e2:3f:21:6a:32:68:31:22:a8:a0:
                    b8:10:cc:21:86:74:3e:92:8c:75:23:26:ef:70:d5:
                    fd:df:87:9e:c1:c5:4d:17:9c:30:61:23:eb:02:b4:
                    ce:ab:62:1e:48:33:5e:a0:7f:ff:d6:04:0e:b4:bd:
                    25:e0:e5:af:2f:a8:33:04:82:dd:87:56:30:75:57:
                    81:a9:28:f3:91:7d:5d:00:a3:e4:29:b6:48:eb:94:
                    97:d2:ce:70:ff:ca:3b:a8:22:05:2d:ad:4e:d9:6d:
                    3b:5b:f4:e4:8e:c6:cb:22:1b:45:fa:be:bb:54:8b:
                    d7:c4:ef:1a:4f:e0:44:aa:26:b5:dc:5c:f4:1e:06:
                    d4:a3:57:ef:db:2d:84:c7:03:25:10:bd:d1:b3:e5:
                    aa:0c:3f:34:7a:7a:04:e5:7f:fa:79:5d:e8:ee:0a:
                    c4:7a:4c:37:bc:f9:b8:4c:9d:0f:02:57:93:c6:2d:
                    14:d3:52:3b:0b:ae:f2:0b:ae:3a:b4:ee:4f:76:3a:
                    3d:0e:8b:8d:ca:fb:68:c7:c7:49:fa:6d:5b:09:5e:
                    c5:2f:db:d0:82:ca:c7:78:63:55:2a:17:e9:52:98:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5F:AE:91:F5:57:0A:33:9A:14:D3:91:5A:72:E5:74:C0:FC:14:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/e517ce2d-2311-3962-910c-eda4bf1da862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:105:b000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:15:bb:ff:3a:fc:f7:d8:b0:54:52:ca:8e:92:28:14:c6:
         51:4f:a3:2d:bd:ee:11:e6:33:37:4c:31:3b:71:4a:24:18:54:
         e7:bd:74:98:e7:f3:0c:01:0a:1d:b5:84:85:71:f2:8a:7b:62:
         5c:bf:64:98:ce:bd:cb:a3:b9:bd:3a:df:48:cc:b8:41:ee:46:
         47:31:67:f4:be:aa:c3:05:f3:98:7f:1c:13:4f:e5:74:bc:7f:
         bc:6a:90:e0:f2:59:a5:ef:62:54:a4:d8:45:e8:c0:95:d7:eb:
         5b:32:fa:30:a4:af:69:72:66:fa:4f:b0:60:9a:17:8e:5b:65:
         4f:cd:8c:fe:6a:34:2b:77:61:e5:26:53:f4:a8:31:bc:a6:6e:
         e7:a3:1a:34:ad:16:e5:76:c5:01:d9:8b:f6:31:05:a6:c4:35:
         de:1b:6a:ab:f0:0d:8d:e1:7f:82:1d:30:58:19:c3:08:ae:5d:
         68:f2:bd:3c:f0:98:f8:83:73:9a:99:06:7c:27:ff:01:99:db:
         fc:8a:84:37:05:96:b3:7e:4a:b9:60:29:75:ca:64:f0:e6:d9:
         2f:27:ae:b2:d9:b5:d6:25:46:79:1c:38:80:74:6c:7f:60:76:
         43:c5:68:69:57:77:d1:5a:bf:b4:ae:ad:5d:f9:52:61:55:e4:
         9d:b2:06:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:13 2026 by rpki-client