Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76/ac17eb23-286e-35cd-9467-306b13f2d21f.roa
File:                     ac17eb23-286e-35cd-9467-306b13f2d21f.roa (raw, json)
Hash identifier:          FBp/AFh5YK5I8RDEMhH0eZxs/L3bnaaKiHjDrGLLkIo=
Subject key identifier:   AE:E5:38:71:9F:9F:32:6C:AC:E3:8A:99:0C:DF:FA:E1:49:37:DF:D5
Certificate issuer:       /CN=6c1a6120-a591-4dbe-830b-9b263e868b76
Certificate serial:       010D0C9F4328584D6AAAA9C1E3C760E2A4DACB00
Authority key identifier: 9A:E6:46:8D:4D:7A:74:D5:8F:91:EE:E7:2F:42:64:77:71:4E:37:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76/ac17eb23-286e-35cd-9467-306b13f2d21f.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     20452
IP address blocks:        2620:0:3b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76/6c1a6120-a591-4dbe-830b-9b263e868b76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76/6c1a6120-a591-4dbe-830b-9b263e868b76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:a9:c1:e3:c7:60:e2:a4:da:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1a6120-a591-4dbe-830b-9b263e868b76
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=a2e260bd-e998-40d3-9462-870f41c1609e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:b2:51:85:c0:ed:d2:f0:58:14:b1:53:fc:
                    b4:b2:22:ae:28:5b:cb:ba:e8:61:65:52:39:c7:6d:
                    de:26:89:38:d3:80:90:73:46:76:88:09:21:58:7d:
                    03:b3:1a:2c:1d:30:ea:66:f5:b8:2f:57:a6:39:90:
                    43:81:72:6e:5e:7d:0c:16:6b:8f:84:cd:4d:f9:47:
                    8a:79:be:2a:08:e1:1a:89:c4:10:eb:ed:64:3c:02:
                    4a:55:f5:f1:fb:61:b7:b2:97:56:4b:1f:26:50:5f:
                    d2:90:0b:b8:c0:61:bc:93:1c:fe:e6:99:7d:95:b3:
                    e9:17:08:4f:96:62:ba:1a:1e:73:77:de:4a:33:31:
                    b0:f8:2c:38:2a:66:3a:d1:59:d8:7f:1d:70:15:5f:
                    e8:4d:b0:f1:aa:d2:76:99:5a:ed:83:7e:b6:49:98:
                    43:fe:1e:b0:40:25:29:a0:25:26:ec:9f:a2:e3:72:
                    46:33:e6:a3:cb:52:ea:e2:a6:5f:70:7a:23:e7:d6:
                    1c:cd:a4:c3:43:cd:e9:68:1e:58:49:24:65:d5:86:
                    63:ea:be:cb:81:77:f2:ce:83:66:73:e6:ab:cf:fc:
                    f1:ec:b6:4c:d9:13:f6:9f:4b:6b:26:61:08:62:6c:
                    92:0d:d6:36:4e:20:e9:02:96:fb:ba:e9:62:01:9e:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E5:38:71:9F:9F:32:6C:AC:E3:8A:99:0C:DF:FA:E1:49:37:DF:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76/ac17eb23-286e-35cd-9467-306b13f2d21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76/6c1a6120-a591-4dbe-830b-9b263e868b76.crl

            X509v3 Authority Key Identifier:
                keyid:9A:E6:46:8D:4D:7A:74:D5:8F:91:EE:E7:2F:42:64:77:71:4E:37:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:3b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:92:43:a1:cd:7d:e7:e1:e5:a0:b0:3c:d8:4a:02:8b:ac:
         7c:76:69:bf:22:29:b8:52:b9:33:c5:57:ff:59:de:e7:02:00:
         e6:39:67:7f:4b:40:59:c9:d5:0d:4a:6e:f6:79:5f:f6:db:eb:
         08:74:d6:a0:08:a0:15:28:13:a4:ad:da:83:be:12:cb:c7:6f:
         28:f3:1b:76:73:cf:bf:0d:df:a4:76:c7:72:66:e0:05:76:d1:
         ea:c0:91:0b:c7:0b:b8:05:00:6b:3b:3a:f2:55:3b:35:b7:44:
         c7:7d:99:34:c7:9e:e9:ba:16:ae:63:df:65:9f:c0:5b:72:58:
         03:11:51:ce:4e:a4:5c:93:fe:15:d5:02:94:6c:a5:33:37:bf:
         71:ea:28:2a:60:08:22:27:9c:0b:10:50:ec:03:f8:ed:71:17:
         4b:64:2a:05:55:4d:b1:85:dc:8a:90:07:c0:d2:89:63:fa:c5:
         5e:88:b9:cc:64:5c:be:85:e9:28:81:fe:11:85:70:d0:2b:18:
         0a:3e:dc:c4:70:ae:b3:8a:db:bf:14:fd:f2:c9:89:0f:d5:10:
         98:c1:90:66:89:93:88:7d:0f:61:f9:45:c4:df:43:3a:77:15:
         a8:a4:33:b4:e6:d8:7f:6f:73:2f:11:cd:61:24:db:b6:f4:fe:
         c6:eb:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:52:32 2026 by rpki-client