Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa
File:                     5d880a95-6ca5-3b0f-baeb-46602f238d82.roa (raw, json)
Hash identifier:          8SoNK91Ap4BAwaLGX4woy6s2+vryboKwgmwDQGDn6dU=
Subject key identifier:   3C:78:69:92:90:EF:E0:7A:30:0F:BA:E1:2C:A1:59:D8:5C:6C:6D:9C
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F4328584EC371C32D6DE8F900DBB91EE0
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     27553
IP address blocks:        2604:e000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c3:2d:6d:e8:f9:00:db:b9:1e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=7b253f1f-fec1-4d84-a61f-4dadc656633e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:45:2a:8e:13:4f:2d:0d:ba:ad:21:f4:be:
                    04:fc:92:4f:8f:cf:f9:5b:b7:cf:e5:57:35:59:93:
                    27:6f:14:9f:2c:22:e0:01:e2:53:54:bc:28:ba:0c:
                    e1:b4:83:9b:9b:87:f0:b2:ff:a7:1d:06:be:d8:68:
                    a3:47:92:b5:5c:4a:7b:9e:80:7b:47:3b:2d:a0:24:
                    4e:b6:a2:ce:96:05:b7:b7:15:d5:1a:f9:56:11:6b:
                    52:06:e3:83:ae:d3:c7:3f:d3:cd:d6:bb:b2:64:c1:
                    43:25:da:b9:ba:35:f7:21:57:a6:2f:59:d9:0b:63:
                    23:e1:58:77:7a:e7:9b:e6:89:8a:cf:38:73:ed:76:
                    65:b5:37:bc:f4:33:2e:3d:bd:f8:c2:20:f1:6e:c7:
                    ed:58:ec:23:30:82:e7:7e:b0:b2:26:40:21:7f:35:
                    26:79:96:84:e2:fc:50:55:44:d6:1a:45:61:31:db:
                    78:9b:36:c0:3b:3a:6f:6e:ef:6b:fb:fa:9a:2d:cc:
                    79:54:94:62:22:db:45:9e:13:29:3b:2e:bd:cf:3c:
                    8b:20:fc:f2:45:56:cf:ab:85:91:ee:e7:2d:8e:a5:
                    5c:96:96:f8:4f:52:03:3a:1d:f7:9a:ba:13:e4:e1:
                    a2:46:b6:0a:40:ef:db:3e:85:d5:0f:0f:14:3b:29:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:78:69:92:90:EF:E0:7A:30:0F:BA:E1:2C:A1:59:D8:5C:6C:6D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:87:b1:b5:f9:f8:32:b7:1a:33:35:e9:73:91:0f:f9:9e:00:
         64:ec:a2:09:3b:93:68:36:e6:5d:e7:c6:0b:a9:cc:0b:58:6f:
         63:18:37:08:2c:70:32:4b:0e:b1:7f:4f:56:82:65:18:96:06:
         50:5e:c1:c9:45:15:58:ea:7f:39:19:a8:09:27:df:8e:c7:60:
         d4:6e:5b:87:39:64:b1:f0:82:94:a0:ff:c9:29:35:00:28:7c:
         c9:d9:93:95:1b:8c:f3:c5:2d:b5:88:03:9d:fd:a1:6f:a1:d3:
         3f:23:a9:fd:52:a6:d0:5b:43:09:64:f9:20:d7:ee:c5:c5:99:
         09:41:48:08:a9:5b:9f:b4:97:c1:b9:55:b3:bf:79:fb:0f:ce:
         94:f1:0a:1b:de:af:c3:99:83:79:59:20:fe:ca:47:3b:4a:41:
         ec:51:46:e2:44:ab:10:cc:b5:8c:f2:4d:e0:5e:d1:fe:8e:68:
         92:c3:d5:27:a2:5e:5d:df:57:38:a6:ec:af:3f:c6:3f:03:fd:
         68:02:ed:b3:cc:0b:ca:b5:bd:f0:65:00:4e:52:86:76:e4:e3:
         31:72:e0:7c:27:19:75:cb:36:a9:40:74:ab:82:ee:cb:c2:1b:
         10:70:12:d7:4a:6b:bd:d9:ad:10:41:7a:14:85:78:c0:37:8f:
         bd:21:ac:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:23:44 2026 by rpki-client