Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/5061d313-c69a-3714-9bd0-3dded9d8894c.roa
File:                     5061d313-c69a-3714-9bd0-3dded9d8894c.roa (raw, json)
Hash identifier:          DzqxecA1ISU3E53H+dNOz+bISLjAeEwRfCZ/JgiR3xg=
Subject key identifier:   7D:72:59:ED:6B:07:DB:F3:05:0D:F1:AA:84:D6:C9:E0:E6:67:1E:66
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584D91C0202193F807A681F0E3C0
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/5061d313-c69a-3714-9bd0-3dded9d8894c.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     396982
IP address blocks:        2620:127:f00a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:20:21:93:f8:07:a6:81:f0:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=c3006632-9b5b-481d-9e7a-52c76ce03d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:77:53:e6:d6:85:91:09:62:ff:4a:2b:fe:
                    5a:37:fc:db:2f:d0:8f:56:ca:d8:03:86:9f:e8:dc:
                    38:f1:75:64:29:e4:5b:fb:8d:a9:e4:0c:52:2f:6a:
                    22:fe:59:4e:91:c9:37:07:4a:b1:05:0c:8b:f3:d4:
                    99:15:ca:1c:d5:d6:6e:6c:a7:6d:e8:f4:ab:16:bc:
                    d1:36:58:6a:ff:f0:67:74:b7:ce:48:17:8b:84:45:
                    7b:d2:a5:96:55:d1:67:2d:7c:51:80:0e:6e:35:97:
                    b5:39:9f:0c:0f:84:27:8c:c2:4d:1e:0d:69:f0:c6:
                    6d:46:91:c9:3e:ad:fc:24:0c:6c:dd:80:b2:67:91:
                    12:03:f2:41:09:e6:8e:26:15:20:7d:1d:43:0c:01:
                    70:a8:5a:80:30:d5:19:da:68:7c:8f:20:b7:84:1d:
                    77:be:20:67:1b:ba:d9:70:96:5e:db:e1:a5:8f:ac:
                    b6:02:4e:7a:49:56:19:95:84:f1:3b:dd:b1:1e:67:
                    1f:a0:4d:14:ca:47:4f:78:77:55:eb:2e:0a:48:b0:
                    42:c5:ab:1a:0f:aa:29:76:d8:3d:0c:90:61:33:84:
                    ea:d4:2c:96:c7:cc:2e:13:42:d1:32:61:3b:19:96:
                    63:6f:52:dd:26:68:93:ea:cb:2f:b3:12:45:fb:20:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:72:59:ED:6B:07:DB:F3:05:0D:F1:AA:84:D6:C9:E0:E6:67:1E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/5061d313-c69a-3714-9bd0-3dded9d8894c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:127:f00a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:f2:92:09:1e:b3:b4:a2:28:06:63:d5:7e:51:56:b0:59:
         99:b6:0b:ab:40:10:8e:06:82:9a:82:3d:f1:07:1f:8c:dc:46:
         0d:b1:5a:0e:4d:18:c8:c5:c7:ae:2e:32:52:4e:f3:c2:a7:92:
         93:9c:8b:77:20:5c:23:17:77:ef:76:8b:8a:af:51:f3:1e:84:
         53:62:7b:54:5a:c7:90:5d:7b:93:62:96:4e:52:fd:7d:13:8e:
         77:bc:41:86:5b:0c:28:11:3f:bc:b4:93:12:a6:3c:66:14:87:
         04:22:b0:f6:89:34:b9:62:eb:92:cf:32:9d:88:e1:5f:ce:23:
         31:f6:a4:18:83:f4:fd:6b:f0:db:8e:5e:ce:89:a5:d7:32:0a:
         eb:3a:b4:73:22:58:4c:b1:c9:0c:45:a0:d0:0f:e2:74:69:75:
         26:02:04:49:7d:74:44:a4:e9:6a:3a:83:13:05:97:ac:8e:5f:
         e2:53:a2:1e:0d:e6:ff:a8:5d:12:b5:75:31:ec:40:97:98:df:
         ca:17:a7:86:69:b4:70:ca:8d:9e:fd:56:68:4a:38:60:c1:49:
         98:68:03:cf:26:5c:15:d4:7e:6c:09:ad:52:bd:7b:d2:a0:2a:
         c8:8c:88:e1:6b:06:4e:ea:8f:04:74:64:c0:4f:37:1d:58:33:
         bb:a5:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:50:03 2026 by rpki-client