Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa
File:                     2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa (raw, json)
Hash identifier:          5uW27KIh24P8SbpTRGSkbYvQ21SGjxjQaVeJwUEFB1c=
Subject key identifier:   CC:3B:9E:0F:1D:3B:F7:8F:0E:27:07:9E:88:19:EF:45:70:6E:8A:6F
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584DC6CAFF8B7A5F670E745AA200
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     198949
IP address blocks:        2607:cc80:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:ca:ff:8b:7a:5f:67:0e:74:5a:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=906339e1-e1fd-4638-bcbc-8bfca1a1c04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:ff:33:5f:88:41:99:80:f3:46:20:5d:55:
                    ff:2c:59:be:34:b4:ec:cf:80:35:31:55:11:2e:2b:
                    f5:a8:09:e8:9f:b3:2b:de:54:d1:1c:50:a4:93:db:
                    ec:71:ec:66:66:93:4d:08:f9:7d:06:0b:8b:12:92:
                    59:76:aa:6a:6e:22:90:8e:b3:56:80:e0:7c:d1:24:
                    0c:5b:3d:2c:8e:56:1f:ce:db:8a:6b:e7:53:f0:af:
                    ca:c2:42:8a:db:c5:4a:54:9b:30:b6:ce:7e:65:d7:
                    ec:95:74:24:d8:65:9a:15:66:b3:df:a4:ca:25:d6:
                    fc:f7:71:5a:36:55:38:64:21:cd:38:7b:78:cd:fa:
                    6d:cb:07:29:ef:8b:9b:d2:eb:7a:96:fd:f2:2a:8d:
                    5c:c4:56:67:70:7a:c2:fc:7e:54:18:ac:e5:fa:db:
                    0b:2a:fd:20:cf:e0:f8:f4:64:4e:fb:dd:c1:8d:98:
                    19:88:dd:54:fd:75:82:8e:02:89:69:14:08:14:b8:
                    97:97:22:c8:5a:42:8a:57:c1:e8:7c:06:e8:fb:c7:
                    bc:ff:1b:90:c1:ad:4f:e1:aa:2e:ca:cc:ef:78:01:
                    3b:ea:52:5b:d1:26:e4:a2:14:e1:48:62:d1:e2:42:
                    dd:e1:7f:e8:8e:27:7c:14:83:80:e1:40:a2:1a:7b:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3B:9E:0F:1D:3B:F7:8F:0E:27:07:9E:88:19:EF:45:70:6E:8A:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:15:af:5a:aa:9c:92:11:88:51:a1:5d:0b:51:ef:71:72:51:
         ed:df:6e:b5:8f:d5:91:5a:ab:bb:00:f1:f3:71:7e:66:19:ac:
         2e:6e:e7:9b:39:9b:47:f3:39:d0:2d:70:12:57:45:93:cd:c7:
         b8:0c:37:dd:48:04:89:60:49:3f:76:a2:08:0b:e3:22:5a:d4:
         7b:e5:10:35:26:11:9f:42:ed:4a:3e:6c:cf:aa:9e:9b:b0:49:
         ec:59:da:aa:82:f1:10:06:26:01:52:fa:86:19:7c:9b:c2:25:
         81:0e:df:a9:b9:e9:57:b6:da:5d:c2:28:f5:13:16:8c:d4:02:
         f7:81:42:2e:6e:67:ea:4f:11:ec:50:e6:60:ef:eb:24:7c:13:
         88:6b:ca:83:b2:f9:81:98:b9:86:63:d0:b8:bf:c3:19:ca:78:
         19:84:79:60:67:51:af:03:4c:6b:c3:18:a6:d8:03:95:a6:08:
         43:b0:4d:47:2a:dc:46:2b:78:71:e6:0c:89:e4:c0:ab:97:c6:
         e2:ab:9b:ca:49:19:36:d1:04:e2:fb:b1:db:cc:80:06:c2:c1:
         14:8e:08:b4:8e:06:05:b3:87:08:54:5e:33:84:4c:03:aa:7b:
         4a:78:1d:bc:0c:bd:8a:41:86:65:7d:89:d3:46:de:04:e8:be:
         4a:4b:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:06:01 2026 by rpki-client