Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa
File:                     5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa (raw, json)
Hash identifier:          cNl9k8qcADVDm3FOFo4H7madFjSWiZOVWurkA8c41s4=
Subject key identifier:   2E:58:EE:CA:4C:87:38:4C:45:0A:31:ED:19:2C:7D:E6:F3:33:84:E6
Certificate issuer:       /CN=e1ec92c2-2a27-47bb-a115-e1db2cee0fef
Certificate serial:       010D0C9F4328584D300A3658DBCD80ACEF9D4C00
Authority key identifier: 16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     32772
IP address blocks:        2604:16e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:36:58:db:cd:80:ac:ef:9d:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ec92c2-2a27-47bb-a115-e1db2cee0fef
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=c5deccb0-e574-4e92-bae8-fcfe647939ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:48:4c:6d:2f:b1:18:eb:4f:22:e0:c1:82:
                    d7:3d:e4:43:6f:2f:28:4f:4e:10:75:d5:8a:7b:e1:
                    43:68:ac:be:84:31:e1:11:4c:54:56:3d:ad:04:ac:
                    93:15:cc:98:43:7c:cc:9a:6e:fc:32:98:66:7d:e8:
                    c2:f2:ea:22:4c:45:80:10:c2:39:f1:db:90:e8:16:
                    e1:41:be:eb:2c:9c:b8:a9:27:b4:51:f1:a8:c1:da:
                    6a:51:c6:74:2e:17:13:d7:7b:ff:59:28:9c:2c:9f:
                    0b:9b:21:54:e8:d8:76:1d:9e:3b:c4:a7:d5:5a:f3:
                    00:ce:72:52:bc:07:d0:41:6b:59:61:6f:b4:0f:51:
                    a0:5c:6a:3a:79:c8:75:95:6e:9a:63:8d:19:22:4d:
                    7a:85:bb:6a:ac:74:74:b7:e2:6b:6f:95:68:69:1a:
                    1c:31:ac:12:c4:4d:de:bf:a1:32:05:82:1d:e3:65:
                    bd:1c:99:4c:0b:6a:eb:c1:c5:35:91:c9:1e:6f:ac:
                    ab:48:b8:8a:22:e3:a8:f4:2d:6a:6d:5f:47:0b:3b:
                    74:25:2a:ea:30:56:ed:7d:64:98:d9:4a:87:7b:86:
                    eb:94:75:46:81:8b:a1:65:4c:ef:7b:d9:cd:cd:99:
                    fd:86:17:57:ee:dc:92:de:3b:79:39:c3:36:af:62:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:58:EE:CA:4C:87:38:4C:45:0A:31:ED:19:2C:7D:E6:F3:33:84:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.crl

            X509v3 Authority Key Identifier:
                keyid:16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:16e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7c:1b:b9:ae:2d:6b:73:4c:75:30:46:4c:1b:8f:b6:bd:67:
         d7:14:27:c7:cd:7a:81:92:9e:c4:15:e3:cb:a0:28:11:a8:83:
         38:88:cc:22:3c:48:64:f4:17:c7:cc:f8:5a:b8:f3:d9:62:4f:
         62:a2:35:1d:cf:68:98:0c:c2:c1:ee:76:0a:06:e8:fa:15:06:
         25:bb:f2:ce:43:7a:94:80:88:bb:dc:c8:22:77:95:09:7b:ae:
         02:95:14:54:7f:44:ea:e0:8a:d6:c1:5d:7b:2e:e1:db:cc:d8:
         ae:96:b9:13:3a:9a:36:18:cf:f5:bb:6f:75:95:83:5f:3b:20:
         aa:d2:7d:b0:17:36:7a:1c:6e:e7:64:2a:26:57:43:81:86:0c:
         c5:7d:db:0d:36:a0:49:4e:aa:4b:8f:d0:b5:96:82:38:6c:25:
         53:41:1f:01:55:64:6e:f7:0a:8c:2a:d2:32:5d:fd:52:74:23:
         9b:7c:a4:29:00:78:08:87:05:e8:3b:c9:10:b8:ed:e7:35:64:
         17:90:01:d7:a8:20:58:af:a1:99:e1:ef:a0:0b:24:36:45:6c:
         f1:c8:7a:bb:39:48:6f:42:87:26:28:1b:b5:a6:e7:43:40:9f:
         d8:ac:c8:e1:40:a3:07:c2:a3:1c:68:7e:72:ea:64:65:04:90:
         86:bf:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:35 2026 by rpki-client