Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa
File:                     61fa3b7e-9320-3d30-aea2-938b200f9f76.roa (raw, json)
Hash identifier:          WtaKGGBK545HxKU388aQYYmNUOsXAb2ahNycXgC5mTs=
Subject key identifier:   6B:D1:42:6D:7E:87:C8:23:CD:F2:D6:0E:6E:ED:65:36:16:8D:25:53
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F4328584DE9B07E5EA7EA14902CF13580
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     26914
IP address blocks:        2001:1898::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:7e:5e:a7:ea:14:90:2c:f1:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=5e1a6b18-0e08-43a8-8660-9e4067ee5653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:26:9b:5b:4d:df:3b:54:8d:84:3f:3e:82:
                    e7:a8:b2:dd:dc:75:92:d9:20:b7:81:f8:e6:66:a0:
                    1a:bb:df:35:6e:e5:23:52:21:e6:28:23:f3:1f:71:
                    ab:3e:34:e6:b0:5a:d4:0a:ff:45:c0:ef:38:e2:dc:
                    1e:86:79:3a:73:f4:42:f1:ed:4e:87:41:7b:5e:99:
                    fb:67:72:b7:74:14:c4:f0:b7:af:fc:90:44:f4:90:
                    6a:f4:dc:63:cc:f7:28:04:0a:41:67:e6:70:d7:b5:
                    02:bf:28:b0:63:8e:82:95:f0:12:14:62:b0:10:cb:
                    6a:02:9c:47:e9:bb:f8:3a:fb:11:6c:ef:de:21:7d:
                    33:56:ce:a4:bc:45:4f:05:13:00:63:33:12:c6:93:
                    d2:a5:b6:0c:bf:61:8a:21:c1:a7:54:eb:6e:2d:4d:
                    20:66:91:54:2f:c1:d2:6f:d1:8c:70:7c:0b:86:9d:
                    66:e8:6e:a4:72:0c:78:b0:82:7b:3e:3d:da:da:1c:
                    51:4f:3a:53:37:95:8d:37:83:c1:89:21:47:0b:6c:
                    24:1d:8f:6f:fa:ca:c7:6d:fb:4b:5e:71:e8:fa:d3:
                    c2:1e:c8:a3:56:02:4c:9b:86:04:5c:81:1b:d0:b0:
                    40:56:4b:fc:6c:72:1c:40:9e:4d:56:ef:c0:f7:84:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D1:42:6D:7E:87:C8:23:CD:F2:D6:0E:6E:ED:65:36:16:8D:25:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1898::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:71:80:7b:23:d4:12:7d:6a:ab:52:9b:fa:b9:9d:cc:de:55:
         40:d0:1a:d0:c4:66:b7:d4:11:55:4c:94:c0:54:44:36:e5:c3:
         ee:66:90:59:a9:9b:fb:e3:b6:68:f8:a2:29:08:29:cb:fe:31:
         8a:dd:c5:04:c3:cb:f1:45:ce:81:57:e2:65:f2:e8:30:d1:75:
         d6:1b:53:6b:60:c3:e3:72:1b:46:bf:4b:7e:9b:53:58:b9:5b:
         6d:38:1b:8e:05:23:be:65:e5:50:9a:e7:05:fd:90:8a:d6:84:
         4f:6f:5d:b0:7c:b8:18:c8:f5:34:a9:55:e7:9c:4e:27:5c:a2:
         cb:11:cf:ea:32:c6:f6:52:62:8d:4b:00:a7:ca:32:03:10:45:
         7c:35:21:57:99:20:81:b8:55:1e:5d:23:c5:a4:0a:8e:0b:98:
         77:42:2e:41:4c:e2:89:50:0a:62:32:9e:f4:eb:f8:b5:bd:d2:
         5c:04:fc:8b:ae:09:bf:33:72:06:01:ee:e7:de:f3:62:07:a3:
         b9:53:d7:08:6c:8d:41:7a:0e:4e:fc:3f:6e:c6:e6:a4:4f:3a:
         68:c5:6e:e2:6e:76:20:e8:78:d8:de:b2:78:b5:ab:c8:43:b0:
         2c:2d:f4:28:ff:8a:96:ff:a4:5f:9f:66:82:83:e9:ef:95:68:
         ed:01:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 18:32:39 2026 by rpki-client