Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa
File:                     ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa (raw, json)
Hash identifier:          0xY+2R+gpldlqq7NIUHNF/L25b8buMdpv+chc+kWHjo=
Subject key identifier:   D1:DA:89:32:CB:65:54:AD:6D:56:A7:01:AD:8C:80:A7:11:CF:BE:70
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584E66DA0A9C94572AE26F614B80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     14061
IP address blocks:        2604:a880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0a:9c:94:57:2a:e2:6f:61:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=44a84859-9b70-4664-8538-88baf68d42fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:ad:31:c1:e3:fc:1e:b8:50:07:b6:ff:cc:
                    b1:cd:6c:c3:20:7f:15:92:ac:cc:df:2b:aa:d1:37:
                    8d:89:b0:51:c3:c3:e1:d2:94:ad:1a:74:32:60:5d:
                    d6:f9:36:c5:bf:20:58:c5:0a:97:30:75:96:f8:e6:
                    9f:46:8d:4f:3f:26:ad:b5:5f:35:f6:bc:55:38:2e:
                    0f:41:04:be:fe:d7:3a:60:ed:8c:e4:f3:3c:8e:14:
                    39:fa:9d:cd:21:b3:8c:b1:c8:f1:fc:f0:4a:19:2f:
                    b3:f2:77:6c:38:f8:84:53:43:ee:81:29:cb:3f:e0:
                    48:e3:08:20:b5:bd:ee:09:b8:3a:23:22:be:ee:bb:
                    77:f7:6a:44:5f:10:db:22:5a:75:ba:5d:82:38:30:
                    68:8c:d6:e6:ac:36:ff:b5:c4:fa:ce:09:72:df:c8:
                    f1:04:4d:f9:dd:c5:f7:00:48:4f:48:85:fc:4a:0b:
                    ed:13:f1:5c:52:cc:00:19:94:10:5f:10:2d:7d:76:
                    3c:8b:c4:41:62:3d:85:ed:56:d8:d2:51:b2:be:bd:
                    6e:7b:7c:aa:c7:07:3c:67:3d:b8:69:1a:4c:c2:d4:
                    e8:9e:7a:be:6c:f0:57:27:6c:4d:b2:12:5e:90:14:
                    08:04:fa:0c:f9:94:58:7f:66:4f:48:c5:72:b1:f1:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DA:89:32:CB:65:54:AD:6D:56:A7:01:AD:8C:80:A7:11:CF:BE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:67:03:cf:1f:0c:f0:17:d1:b2:22:d3:7c:d0:c6:35:cf:e3:
         3b:dd:e2:04:33:da:43:e6:f4:0b:9f:d7:bf:29:45:91:26:34:
         f5:ac:b2:e6:5d:a7:03:30:45:83:23:6e:de:d3:99:23:c2:13:
         0d:06:74:eb:cf:9a:27:2b:8e:29:39:8e:33:7b:da:60:85:0b:
         86:c3:79:39:87:37:eb:18:a8:85:a4:dd:f2:a4:de:e9:5c:d9:
         c7:bd:87:0d:05:02:27:85:d5:66:29:22:de:00:54:2b:ee:44:
         b9:76:62:d8:43:52:09:f0:6f:bb:25:e0:6b:1c:72:ce:fd:64:
         00:e6:2a:4b:a0:b1:fa:a7:3a:54:3f:69:a6:45:3f:e9:71:82:
         ab:12:e6:30:8b:02:f8:24:8b:00:da:b4:35:31:ca:33:14:4c:
         e4:29:f1:26:2b:dc:5a:a7:f5:19:f9:8b:aa:26:47:08:2f:72:
         26:3b:10:21:82:4f:61:64:ef:69:9f:89:cb:7f:69:50:11:de:
         b2:49:83:91:e7:91:ee:2d:4e:d2:13:1d:0c:8a:79:dc:af:bd:
         99:81:48:a1:0a:00:53:0e:d1:b8:92:80:d2:f0:50:b7:e6:d7:
         92:26:34:c1:fc:0f:87:32:e9:7c:e0:47:8b:c5:7d:44:bb:a9:
         02:3b:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:16:14 2026 by rpki-client