Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/dc606f75-83a4-3f64-ae7e-5c1f7c0d3612.roa
File:                     dc606f75-83a4-3f64-ae7e-5c1f7c0d3612.roa (raw, json)
Hash identifier:          vRA88efJ9jRdV2axIo9f+RFXIL0/Bd9wNsT8givm68k=
Subject key identifier:   23:72:7F:39:95:FE:D5:8E:B5:A6:C6:7A:65:F6:4B:2B:2C:12:AD:CE
Certificate issuer:       /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial:       010D0C9F4328584DBBA043D3729C6473BF547F00
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/dc606f75-83a4-3f64-ae7e-5c1f7c0d3612.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     394353
IP address blocks:        2001:500:84::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:43:d3:72:9c:64:73:bf:54:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=50a1029a-3e7f-4d42-ae5e-f6684dc6dbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:7a:07:f7:88:6e:ea:ac:1f:3b:33:ba:49:
                    ae:18:59:1b:a4:ff:aa:5c:52:7b:bf:6a:2b:68:9d:
                    50:92:43:5b:46:80:52:eb:9d:0d:24:b1:e1:f4:b2:
                    59:50:1d:16:1a:19:d9:41:f6:37:e0:d0:4c:1b:a6:
                    84:2d:67:ee:c4:38:93:17:63:19:3e:37:b2:c2:90:
                    ae:2a:d7:c6:55:5c:02:2d:63:6a:04:1e:b4:27:ad:
                    55:80:b2:97:65:af:bb:47:05:62:5e:cf:35:c0:aa:
                    7c:ee:07:a3:db:8b:da:d7:e8:87:7f:64:ae:7b:dc:
                    b4:16:db:1d:ec:50:e9:b0:67:68:ce:48:bc:58:eb:
                    ce:90:4b:b4:c7:25:19:53:91:e6:c1:dd:c4:39:e9:
                    64:73:cc:0f:1c:bd:bc:5a:da:56:a1:5e:df:33:43:
                    1c:ee:24:ce:01:f7:eb:28:30:19:35:d4:1b:86:ea:
                    04:e8:b5:26:76:65:f0:44:d6:ff:f5:22:19:97:c5:
                    46:f4:2e:8b:df:26:26:0d:26:5e:c7:96:64:83:63:
                    cf:aa:62:9f:63:ed:3a:9a:29:4c:fb:aa:0f:13:87:
                    49:af:2f:06:a4:80:d2:07:20:e9:b0:fe:a8:9c:76:
                    cd:4f:8f:d3:cc:3b:80:71:3d:f1:12:bc:40:ba:48:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:72:7F:39:95:FE:D5:8E:B5:A6:C6:7A:65:F6:4B:2B:2C:12:AD:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/dc606f75-83a4-3f64-ae7e-5c1f7c0d3612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl

            X509v3 Authority Key Identifier:
                keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:84::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ba:5b:e6:c9:0e:c8:e0:39:61:68:be:5a:c5:90:4b:1c:97:
         31:d3:51:32:37:73:e2:df:d3:2e:6d:a6:04:85:ba:f9:55:82:
         68:44:ae:33:06:52:c0:ef:51:20:5a:b5:a0:c3:e8:34:0f:dc:
         38:12:e8:4d:2f:33:b4:d3:31:57:b2:22:c2:92:db:f1:72:ac:
         13:e4:42:07:9f:f9:87:9c:b1:fe:4e:c8:ee:8d:e7:a2:2a:d6:
         7d:6d:62:49:6d:34:a3:a9:ea:f4:f0:1e:ce:cf:e1:4d:67:ae:
         68:3f:12:3f:a2:b6:75:4c:1b:45:1d:5b:4a:47:8a:66:98:69:
         76:63:2a:0a:2a:37:e5:6e:d8:15:0c:47:70:aa:f8:c9:b2:8b:
         cc:66:51:7d:20:40:46:24:f2:ff:37:1b:6a:7d:e5:08:bc:5a:
         48:f8:75:5e:11:1d:7c:94:6d:a2:90:43:36:7d:0c:9a:7c:f9:
         89:e9:ef:dd:27:11:e3:6b:b1:e2:6c:81:c9:1c:ed:5f:c0:93:
         a3:ba:9f:72:37:8f:cf:ba:ac:a9:ef:d3:61:8c:db:7f:cb:76:
         7d:2f:f8:1e:d5:66:05:44:9a:38:62:88:a8:8c:fb:62:37:27:
         61:71:e6:17:4a:14:03:44:e9:4f:7d:bf:5f:40:2d:42:59:3b:
         84:37:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:58:45 2026 by rpki-client