Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0f6c6bbc-abce-309c-a8de-1e4d6ce272bb.roa
File:                     0f6c6bbc-abce-309c-a8de-1e4d6ce272bb.roa (raw, json)
Hash identifier:          DFNDdDN9TpUhcoqn3cb1Tt9z7ZyZ+AYWGpGYD58f8uw=
Subject key identifier:   7D:0D:DC:2A:0B:0F:52:86:4C:7F:8F:3D:6B:93:7A:DC:D0:FB:72:0E
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584DF0AB3C0C0ACEBAE839A8FF80
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0f6c6bbc-abce-309c-a8de-1e4d6ce272bb.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     393689
IP address blocks:        2607:f220:41f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:3c:0c:0a:ce:ba:e8:39:a8:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=1687f75d-95fd-4669-8c0a-a142ddd7b6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:43:35:05:e0:3e:8b:10:ef:38:5f:74:e4:
                    82:b5:a6:b4:1e:17:a9:af:4a:68:d2:06:7f:a6:07:
                    59:6e:b5:db:d0:9a:4a:b8:b3:08:a2:b5:0f:a1:4c:
                    48:d2:e2:55:d4:4d:87:3f:69:e7:6a:92:37:38:06:
                    86:5d:f4:84:56:e2:ae:89:e0:f2:8a:14:dc:d2:03:
                    66:25:39:7f:88:12:51:4b:cb:ca:29:09:97:08:1f:
                    7b:58:0e:39:30:6f:07:82:70:ef:6f:c1:be:63:a8:
                    ea:04:4d:33:64:4d:2e:91:f0:9e:c6:f4:7b:04:bb:
                    f9:b9:6d:57:37:42:72:e6:ae:d1:e3:ea:89:20:81:
                    31:7b:19:6d:8e:1c:fd:2e:2a:55:c7:75:34:9a:51:
                    fa:32:13:81:66:f5:18:f4:82:40:4f:09:c3:68:f8:
                    7b:18:40:3c:d7:2b:c5:cd:f6:38:62:b9:e6:42:93:
                    20:98:38:fb:fd:ff:83:68:bc:cc:3c:25:d3:b7:42:
                    94:ff:bb:71:a0:0f:57:1f:a8:04:c4:7c:0d:e4:26:
                    b4:90:43:90:17:71:5b:0a:9c:ee:c2:f2:78:be:c4:
                    42:41:3a:e8:64:4b:6e:2c:1e:50:dc:54:2a:95:55:
                    45:6a:6f:5e:28:c8:4c:6d:67:4d:e4:18:f8:a6:83:
                    9b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0D:DC:2A:0B:0F:52:86:4C:7F:8F:3D:6B:93:7A:DC:D0:FB:72:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0f6c6bbc-abce-309c-a8de-1e4d6ce272bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f220:41f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:58:4e:8b:2e:93:7e:c7:4a:85:34:25:d6:81:82:7d:5d:fa:
         c2:f1:61:33:be:1e:2c:b0:6d:c9:b2:35:f0:35:57:b0:db:09:
         bf:2c:af:ec:95:96:34:5e:cc:f9:fa:54:d9:47:e1:bc:aa:3a:
         a8:87:68:ad:97:a9:43:4f:f2:a6:06:ea:b3:e5:1b:81:72:bb:
         f3:ae:fb:4c:34:ba:8e:a7:84:ea:43:98:0f:aa:76:1f:29:f8:
         49:c7:a5:6b:b4:aa:5e:03:10:61:3f:7f:7d:ef:8b:42:b2:43:
         07:8d:2b:20:81:9f:2f:4d:ec:05:7b:d7:6a:f7:a8:f8:31:10:
         4b:1b:a6:ef:0f:13:c7:fe:70:94:4f:de:0f:8f:68:49:ad:f3:
         4e:48:65:de:d0:d4:51:2f:f8:94:4a:20:a2:65:63:9b:a4:fb:
         d2:0a:94:d1:9a:2a:c9:fb:16:d6:a9:fb:3f:97:02:76:db:dd:
         fe:a9:7a:b5:03:a8:59:ec:cf:39:ce:c2:94:29:12:fc:fc:84:
         78:f9:e2:9d:8d:62:00:8a:96:82:ec:fd:88:86:2a:ea:2a:36:
         c8:a9:97:82:33:11:b5:c2:1f:a5:78:de:58:08:07:fe:7f:73:
         06:b2:01:f1:44:6c:09:bd:c3:ea:b4:f5:b5:ee:78:d6:f7:24:
         7a:27:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:16:17 2026 by rpki-client