Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa
File:                     a588bbaf-450f-36f1-ae20-8742ee82982c.roa (raw, json)
Hash identifier:          VQcLLSqtpK9wMpq7o7VoKePy+hGYp5xpdkO5BRlqqOI=
Subject key identifier:   93:5D:16:C3:71:BC:77:4C:33:A4:37:80:26:0D:E9:3E:49:6B:D6:26
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584E3E5F41B33E38A8111953EDC8
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     271
IP address blocks:        2607:f8f0:600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:41:b3:3e:38:a8:11:19:53:ed:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=9a2c0709-b861-4c40-ad2d-9814133b4f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:3d:51:36:da:01:04:e9:f2:ba:b0:2d:b6:
                    6b:22:1e:ff:45:9e:71:fc:36:4c:46:3d:00:c5:3a:
                    5f:81:ad:94:6a:32:a3:d0:1f:4b:a6:fa:96:4f:22:
                    ab:4c:0a:c7:21:c5:ad:40:4e:9d:d7:ba:14:c3:34:
                    35:5d:9c:e7:5c:ab:90:86:67:0e:ec:64:5c:be:6f:
                    89:7d:67:8b:a3:30:13:3d:d6:62:29:f2:5b:f0:b7:
                    88:87:c6:95:c2:40:0a:93:2f:75:b5:b2:88:16:a8:
                    28:1a:3d:ab:0e:63:7a:df:ac:fd:a3:7e:03:fd:8d:
                    10:56:27:12:22:a6:a8:84:75:a4:00:ba:ed:89:7b:
                    1b:1c:9d:68:85:a2:14:50:39:e6:9b:70:08:1a:43:
                    70:3e:01:7f:55:56:e4:bd:04:ca:24:4a:ba:14:6d:
                    89:92:5e:70:49:f5:7c:00:bd:6f:01:08:5b:eb:59:
                    0e:df:3c:5a:57:20:82:77:c0:9d:43:4a:18:b5:bd:
                    17:07:96:f6:3e:42:7f:25:35:78:f1:3a:5c:00:06:
                    9f:c0:a2:27:ee:17:43:9e:70:7d:57:96:28:b2:69:
                    7f:f0:3f:6c:cc:50:1e:ab:87:2f:1f:56:61:62:33:
                    52:d2:bd:e7:f3:85:4f:e8:cb:cf:55:66:ef:ad:83:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:16:C3:71:BC:77:4C:33:A4:37:80:26:0D:E9:3E:49:6B:D6:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:37:81:3b:c7:9c:c4:13:d4:14:e8:ef:7f:4f:66:ea:35:7a:
         6b:d3:44:23:3a:37:db:11:43:7d:15:64:38:eb:83:96:90:d5:
         54:ac:bd:5a:15:8d:6a:1b:65:5d:72:17:c2:08:4c:71:59:6d:
         50:bf:35:57:d2:27:84:00:2f:e2:8a:e6:f1:d6:14:87:b8:65:
         4c:f8:13:5f:d4:32:b3:79:6e:c8:a8:d4:81:38:68:0a:ed:7e:
         80:86:37:31:64:a2:d3:02:1f:05:8e:df:95:60:3a:22:b3:f0:
         c8:c7:38:04:87:cb:0c:7d:23:03:eb:ab:cf:7f:05:a0:1b:61:
         11:c7:23:d9:38:f1:2d:59:ff:a1:79:97:d8:58:ee:5f:a0:62:
         46:dd:11:f6:5b:6c:aa:d3:01:1e:67:19:06:39:ba:2d:c4:f7:
         05:2d:a1:35:5b:7e:2f:87:67:e4:48:28:69:71:c1:35:2d:45:
         06:16:94:b2:88:72:7b:bd:da:03:d6:72:d8:86:be:88:bd:19:
         0e:02:ec:cd:8d:7e:3f:b8:88:24:da:60:f9:9c:b4:48:db:b8:
         ef:f0:07:ea:e3:01:5a:68:13:b3:6c:0f:6f:0a:ae:8c:f0:1a:
         c5:cf:8c:93:e3:4f:9e:79:aa:05:1b:9a:73:84:0a:6b:6e:3d:
         59:a3:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:48 2026 by rpki-client