Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/531c87d4-b71e-38e9-af69-12aeb95ac062.roa
File:                     531c87d4-b71e-38e9-af69-12aeb95ac062.roa (raw, json)
Hash identifier:          QFTVCzWz4jS5QpK7smMUwD/ipFKi5iu6nq3u46vFyP4=
Subject key identifier:   B4:B5:A9:40:EA:7C:3C:E8:4A:55:CD:06:ED:0A:87:D7:50:70:5D:E2
Certificate issuer:       /CN=85faca83-186c-473a-88cc-290a53538b08
Certificate serial:       010D0C9F4328584D8A6AEAA5640E9CCDB76F5280
Authority key identifier: 2B:06:F7:85:C5:E3:D4:4A:F0:DA:07:82:22:97:1E:1F:40:6D:99:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/531c87d4-b71e-38e9-af69-12aeb95ac062.roa
Signing time:             Fri 17 Apr 2026 21:58:33 +0000
ROA not before:           Fri 17 Apr 2026 21:58:33 +0000
ROA not after:            Thu 16 Jul 2026 21:58:33 +0000
asID:                     20295
IP address blocks:        2605:9100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:6a:ea:a5:64:0e:9c:cd:b7:6f:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85faca83-186c-473a-88cc-290a53538b08
        Validity
            Not Before: Apr 17 21:58:33 2026 GMT
            Not After : Jul 16 21:58:33 2026 GMT
        Subject: CN=8e7a4017-279d-45f2-b5c9-e667bd074e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:c9:8e:50:9b:95:3f:b1:cc:f7:b2:93:4f:
                    bf:54:77:9e:3f:75:a4:40:fd:20:32:95:a8:8e:c4:
                    95:fb:76:92:8b:ac:9d:87:08:4f:42:41:fa:5b:d7:
                    bf:38:5d:b3:78:8f:de:99:0d:9c:ac:2b:75:a3:bb:
                    66:15:91:88:2c:4e:03:f2:3a:d4:3b:f2:38:ec:cd:
                    de:9d:92:be:06:39:5c:e7:8a:42:f6:ad:56:63:45:
                    1d:de:72:8f:73:84:98:b5:b2:4c:76:b2:b9:bc:28:
                    be:e0:3d:0d:41:d8:c9:93:30:b6:e0:22:4a:d9:5d:
                    7e:6d:d1:04:c5:0d:e5:bd:19:52:ff:18:65:31:98:
                    07:ac:57:a6:d9:90:fb:d9:c8:f5:6a:3b:e5:e9:8c:
                    bf:0e:80:27:5b:9f:6a:27:50:47:4c:30:c6:c9:28:
                    a2:59:2a:73:e9:e3:ea:27:33:5b:b4:56:62:e7:19:
                    27:a0:88:2f:83:a5:98:cc:64:1f:80:3e:d6:5e:a9:
                    2e:44:21:01:e9:66:d3:dc:fe:a9:3c:a5:1b:50:7d:
                    91:2a:f6:1a:9e:e6:7e:61:79:0e:97:b3:0e:c2:5f:
                    2a:de:1a:3b:17:3a:0d:c2:d1:71:83:fa:9c:02:59:
                    df:88:b8:26:39:76:86:50:3d:50:4a:e2:3d:fb:0e:
                    5e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B5:A9:40:EA:7C:3C:E8:4A:55:CD:06:ED:0A:87:D7:50:70:5D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/531c87d4-b71e-38e9-af69-12aeb95ac062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.crl

            X509v3 Authority Key Identifier:
                keyid:2B:06:F7:85:C5:E3:D4:4A:F0:DA:07:82:22:97:1E:1F:40:6D:99:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b3:73:20:c7:bd:b8:89:de:a7:44:61:0c:32:df:aa:10:77:
         bd:88:db:79:6e:73:c3:8a:77:69:58:9c:8c:44:01:4d:d3:31:
         a3:8d:da:37:b4:1e:81:bf:74:f9:51:7b:e6:2d:6e:a2:8b:d6:
         84:93:c3:d3:f3:d6:14:e5:41:d8:0c:3f:85:0e:8f:f2:a7:fd:
         fe:ed:11:5b:c6:6b:f8:35:20:34:60:1a:28:22:fb:b8:4c:b0:
         82:c4:0c:5d:a0:29:50:e7:1d:ce:c6:1b:56:5b:e8:30:6d:25:
         27:d3:0b:5c:6d:56:ea:d9:5f:f1:b2:31:e9:08:9b:28:23:74:
         ad:2a:7e:0f:ec:a7:84:ef:35:33:d6:e8:f9:94:7c:83:92:79:
         a1:64:6d:b4:af:fb:31:f0:59:3c:0a:dd:1f:c3:d8:bb:80:53:
         3b:ac:95:83:75:b5:fe:9f:40:45:57:04:2f:88:37:ef:51:8c:
         38:2a:c8:23:c2:ed:24:1d:18:85:96:1a:97:a2:41:06:91:f9:
         8a:52:08:2c:72:7e:aa:da:32:b7:21:4b:e9:7d:78:26:3d:22:
         14:36:42:f5:36:36:e9:06:22:24:80:d3:ed:2c:d4:6d:45:60:
         1c:69:9e:39:a0:3b:f4:0b:7b:b4:ea:27:e3:40:14:3b:63:ab:
         ac:1f:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:28 2026 by rpki-client