Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5ad7d883-57cb-312e-aaf3-ab65a165705c.roa
File:                     5ad7d883-57cb-312e-aaf3-ab65a165705c.roa (raw, json)
Hash identifier:          cW8S/DWEFjRpNs+J+YxhNtHnBwCy7bmyPu7bYpbYRYQ=
Subject key identifier:   A7:44:8F:B6:43:02:F0:37:94:1C:14:32:51:06:25:41:E0:5F:B8:8B
Certificate issuer:       /CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
Certificate serial:       010D0C9F4328584D8EF55F6E2299236E10870180
Authority key identifier: 72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5ad7d883-57cb-312e-aaf3-ab65a165705c.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     6649
IP address blocks:        2606:5240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5f:6e:22:99:23:6e:10:87:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=ccbf76bc-ae79-45a3-8f13-2e37723abf50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:b4:92:45:a2:0f:ce:c8:5b:d4:2a:cb:0c:
                    3e:19:fe:85:3b:53:97:41:6d:38:e0:c7:d5:e2:d0:
                    3f:cc:73:a2:aa:7e:e1:44:95:17:de:f3:a6:c9:af:
                    f1:1c:30:49:9e:bb:91:c1:5e:fc:8b:3f:fa:9c:c6:
                    8c:e7:95:58:76:26:dd:af:04:44:57:c8:34:fa:a5:
                    84:a8:24:b8:7c:df:42:d7:35:39:ff:12:03:f9:41:
                    3e:95:1c:ad:97:1c:03:bd:d5:83:9c:85:ae:e1:b1:
                    fd:e0:e6:85:cd:0b:9f:bc:4f:3e:5c:b0:fb:c5:87:
                    0a:a1:47:cd:56:bb:c5:9b:d8:21:de:99:36:1b:38:
                    f3:4b:52:a6:34:4b:13:05:78:a1:8d:3f:a9:bd:b6:
                    47:b9:02:a0:81:30:64:e9:6f:1a:fa:60:50:8b:0d:
                    7c:1b:86:4a:04:9d:1b:cb:ff:ef:5d:0c:a3:4b:86:
                    0a:66:3c:16:07:84:8f:aa:4b:e2:60:12:77:c4:f1:
                    1c:71:8c:00:f9:66:94:3e:47:0b:09:43:44:b4:32:
                    2e:6b:b5:a9:c9:ee:c7:24:3e:10:7a:9b:2b:89:b9:
                    13:9d:61:05:1f:80:fe:79:f8:cc:cc:94:c7:73:57:
                    b5:56:09:61:0c:4c:ee:59:b7:f1:39:c9:5c:2f:60:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:44:8F:B6:43:02:F0:37:94:1C:14:32:51:06:25:41:E0:5F:B8:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5ad7d883-57cb-312e-aaf3-ab65a165705c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl

            X509v3 Authority Key Identifier:
                keyid:72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:79:85:d9:76:cb:4a:85:5d:b6:79:94:25:f2:4f:42:d0:ec:
         70:5d:69:49:1f:21:02:52:67:48:7c:d1:8b:d7:d7:3e:c6:6c:
         11:97:b7:33:e3:cc:a7:8b:25:d2:ea:64:5f:e8:29:61:23:60:
         bc:7a:e2:d9:eb:97:43:ea:a1:8e:bb:10:f6:d3:65:27:6a:36:
         57:8b:68:18:33:cc:dd:b4:cc:9d:5a:9d:cd:75:1f:47:64:83:
         6c:bd:6e:da:4a:ba:51:53:45:30:9d:0f:23:72:fa:e4:f4:7e:
         7e:04:81:ea:b2:e9:22:3c:b9:e6:21:57:37:f8:6a:ea:70:a9:
         ea:a0:ff:31:cd:f4:c7:b7:61:32:95:76:a3:41:f8:6f:ef:17:
         82:e7:28:88:76:c0:fb:58:8b:de:db:92:af:cf:50:7e:f2:f7:
         41:14:b2:a1:57:34:8e:57:9d:da:2b:76:9b:ea:5f:53:ba:73:
         15:36:67:bb:47:c4:f4:b3:da:ab:2a:27:6e:53:2c:d0:d4:df:
         38:bb:ea:9d:31:86:e7:b1:95:fa:c0:b2:7d:10:3a:1c:0d:36:
         6d:d2:d7:26:87:e8:90:c3:07:91:c9:1a:03:60:b7:c2:b5:04:
         aa:9e:71:8a:f3:25:9f:10:76:d5:df:24:b0:49:d9:88:f2:49:
         50:ce:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:21 2026 by rpki-client