Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e1f0d48-d84a-3e4a-8a12-12ffe4898f3b.roa
File:                     0e1f0d48-d84a-3e4a-8a12-12ffe4898f3b.roa (raw, json)
Hash identifier:          DKl52sCnhd836Lqnl1f9NPd/eOErZlGSG+++lNhRERQ=
Subject key identifier:   FD:82:4E:33:14:C6:72:6B:66:66:5C:06:DF:2E:CE:DF:FB:40:A7:60
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5AFB3078A5B1184602B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e1f0d48-d84a-3e4a-8a12-12ffe4898f3b.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1405:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:af:b3:07:8a:5b:11:84:60:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=abed40f7-9d2f-4d1d-a366-ff8c353944de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:46:11:0b:22:88:b1:d1:67:9e:d8:b1:ce:
                    f4:44:d7:8a:13:13:64:ef:31:77:19:53:0d:ab:6d:
                    1e:5a:f8:89:81:e6:11:54:3c:94:0f:50:b0:26:a8:
                    fb:27:96:4a:e7:31:9a:4e:b1:e3:76:99:54:81:b0:
                    5c:68:86:15:66:31:54:71:d7:3e:ac:13:56:d8:18:
                    9a:cf:65:e8:af:af:79:2b:9d:97:ba:a1:73:ef:87:
                    82:cb:78:4f:67:8c:ff:85:e5:47:02:7a:59:97:1c:
                    e6:03:9f:4b:59:66:e0:b9:c1:09:78:d0:c4:e9:1f:
                    fd:09:9b:4c:e1:c2:0e:3f:14:d0:2a:6d:89:22:ea:
                    b0:76:ab:e7:30:83:ec:93:1c:76:71:d9:f3:f8:89:
                    f8:39:3d:83:b6:1c:dd:a5:40:14:40:b3:7a:d3:3b:
                    62:10:a7:ea:cf:15:cf:45:ef:33:76:62:6c:e0:21:
                    7c:67:dd:ca:af:ae:e4:20:e4:5b:0d:b6:3d:8b:85:
                    c9:70:1e:84:67:bc:19:61:3c:8f:00:c4:49:e6:cd:
                    09:db:9f:78:e2:29:71:bd:8c:75:79:da:34:1f:55:
                    c7:3b:cc:91:28:16:70:84:0e:7a:d2:7e:2b:11:d9:
                    11:84:fe:cb:f2:4b:0a:02:01:aa:30:ba:c6:49:97:
                    01:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:82:4E:33:14:C6:72:6B:66:66:5C:06:DF:2E:CE:DF:FB:40:A7:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e1f0d48-d84a-3e4a-8a12-12ffe4898f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:55:4e:7c:a9:8d:99:e4:2d:2e:82:70:54:47:44:b0:ff:19:
         83:c9:54:47:dd:c5:b8:f6:6a:e8:c9:10:8e:1e:bf:b7:38:64:
         58:d0:d3:7b:f0:c9:bc:b2:3a:ce:c6:28:63:e9:f2:f6:75:25:
         ff:97:ae:0b:ab:85:2a:b4:eb:2b:45:3e:c3:24:05:3f:63:e1:
         99:b5:94:f5:ff:4a:b7:f3:72:e1:30:57:92:2e:72:63:95:b9:
         b7:27:1b:b6:ad:15:b1:55:f1:26:d5:69:f7:4e:45:00:26:3b:
         b2:9d:1b:6f:39:53:1a:5a:c1:88:38:50:0a:a6:bd:50:bc:05:
         80:c6:e2:0c:4d:02:ec:c0:ad:c0:b7:e1:5e:ff:05:89:c7:27:
         e0:07:73:04:a5:9a:08:19:78:98:20:84:1f:90:0e:1f:88:50:
         28:99:db:0e:5e:73:c6:20:8c:ce:42:53:b3:eb:12:2a:38:4a:
         4e:ae:10:ef:54:ed:f6:02:ff:8c:2a:82:f4:2e:29:b6:c1:25:
         ef:0c:83:0a:9b:85:83:6e:c5:b6:1a:af:f7:20:46:e7:99:0a:
         00:46:33:5a:f5:5c:9d:f1:5e:8d:33:c8:8d:64:ac:6d:a2:da:
         04:a7:ce:ff:7d:9e:6a:1d:01:3f:5c:6f:fb:8d:3e:a2:00:a3:
         74:37:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:26 2026 by rpki-client