Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/252abf47-6efa-3e1b-ae6f-7b8afc5adf80.roa
File:                     252abf47-6efa-3e1b-ae6f-7b8afc5adf80.roa (raw, json)
Hash identifier:          pl6VFk+Kg3O841DRdQVFWsAPKPUGoHyc6XrVzZimENc=
Subject key identifier:   A6:0D:14:5B:8D:CC:F9:29:1B:C0:12:86:B4:C4:2F:28:4A:CC:75:EC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DE84B5A4DFD73ACAFE96AF3C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/252abf47-6efa-3e1b-ae6f-7b8afc5adf80.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     13335
IP address blocks:        2606:4700:402b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5a:4d:fd:73:ac:af:e9:6a:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=af7ecc35-582d-493d-b9c1-fb78f3f146c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:86:90:14:0a:01:c8:9c:ab:4e:22:96:68:45:
                    15:dc:5e:79:89:c7:62:93:98:1b:aa:ad:77:da:eb:
                    e2:ca:b7:a0:d7:7e:23:af:1a:e4:0c:cd:ca:dd:d1:
                    ad:66:8e:b8:fe:ac:93:43:2d:0b:01:61:5e:70:db:
                    a2:ce:0e:e3:8c:d3:70:4a:f2:df:85:20:dc:27:fb:
                    80:24:02:94:22:3b:81:36:d7:21:c5:97:3f:e3:b7:
                    62:36:15:f1:bf:22:77:97:2d:5e:1c:0e:e1:a5:86:
                    94:3f:93:cc:83:3b:86:a2:99:be:8b:12:fe:76:97:
                    77:f0:76:6a:12:ae:2e:3c:f0:3a:92:1e:35:bc:62:
                    f4:88:35:f2:91:a6:2b:3b:88:ef:91:3e:f0:6d:36:
                    b2:cd:d5:45:6c:cc:ce:02:03:22:3d:f6:53:fe:9d:
                    fc:b2:19:7c:5e:52:e8:50:82:07:71:4a:cd:44:03:
                    7d:66:d6:ad:ed:54:aa:55:e3:0e:bf:ea:ae:d6:39:
                    ba:fb:11:3b:40:c5:e3:56:80:03:6c:3c:ab:56:85:
                    bf:9c:ad:0c:94:ff:cd:36:14:11:9b:02:b8:99:22:
                    ec:cc:f6:c1:ec:d9:ae:fb:84:c2:28:4b:52:1b:49:
                    c2:23:b8:38:e8:d1:6f:d4:26:a9:9a:e2:4c:0d:b5:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0D:14:5B:8D:CC:F9:29:1B:C0:12:86:B4:C4:2F:28:4A:CC:75:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/252abf47-6efa-3e1b-ae6f-7b8afc5adf80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:402b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c5:40:14:2b:4a:ec:a3:49:6c:11:cf:78:28:bc:91:c7:53:
         68:c1:e4:36:6f:ed:7c:bc:79:ef:f0:41:e2:c6:bf:dc:6f:ae:
         a0:2c:47:c0:41:ca:74:f9:b8:53:3d:00:13:eb:fd:64:ef:f7:
         8b:96:06:a7:33:e4:7a:05:8c:e2:01:6f:ae:4d:25:66:aa:76:
         ec:0d:e6:e2:e6:4a:a7:c0:fc:02:7f:58:9c:85:d8:13:5d:c8:
         51:ff:50:d6:8a:4d:ae:18:25:fb:25:f3:34:2a:ca:b7:ca:33:
         9e:a1:3e:ff:27:de:67:77:81:76:91:a9:41:bd:6e:1f:c4:6b:
         13:49:68:c0:01:d9:da:1f:d3:29:a9:8f:f4:e4:f0:07:20:83:
         fa:17:0e:32:bd:16:c3:d4:6a:30:f9:1a:b7:24:ad:ff:de:9c:
         56:00:4d:7f:e3:fa:62:ea:c8:13:90:5b:6f:aa:3f:68:55:bd:
         f0:06:3c:ff:48:67:8d:15:a0:0a:a0:0e:01:4d:98:e7:8a:79:
         d9:f0:5a:85:45:e6:fd:84:1d:76:31:5b:59:61:10:ab:02:06:
         d0:a8:b2:c1:4e:3d:e7:7e:44:c4:ff:66:2d:d8:19:e2:f2:de:
         35:53:cf:5a:7f:5d:09:01:40:b3:8e:0a:ca:fa:3e:ac:3c:ab:
         06:fd:84:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:37:11 2026 by rpki-client