Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95ffac5d-9865-3e69-abca-ad2f72b1a4c2.roa
File:                     95ffac5d-9865-3e69-abca-ad2f72b1a4c2.roa (raw, json)
Hash identifier:          d78PBW4sX11x614DqxA9ynPfkyGS4uQeA/HjCLDHI1g=
Subject key identifier:   3F:33:AC:5D:73:5A:F3:84:02:F3:D4:0A:7A:09:C0:83:DC:8F:21:7C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DE5807FA94381F5852FF5A400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95ffac5d-9865-3e69-abca-ad2f72b1a4c2.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        2606:54c3::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:7f:a9:43:81:f5:85:2f:f5:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=672e4ec6-a159-4343-a772-c9d9172db54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:cc:73:7f:40:d2:8b:2d:02:c4:37:5a:0c:
                    c9:79:8e:89:8e:26:a9:aa:75:83:75:1b:ac:28:02:
                    82:e2:da:79:99:49:93:7d:da:f0:77:70:aa:dc:34:
                    8f:39:ac:eb:4f:a9:fd:37:63:98:a6:4d:c7:78:ec:
                    a1:e9:f6:31:27:43:e8:44:e4:cd:0f:26:53:43:cf:
                    f4:11:dd:d9:e6:20:56:bd:fb:9e:c8:2a:82:69:2c:
                    c5:ba:e5:be:65:3f:3b:ed:8b:b5:85:52:00:2f:9f:
                    c8:97:60:89:07:11:9c:bf:ec:1f:c7:34:4c:6e:68:
                    ff:ca:61:e1:f9:f3:b6:ed:df:62:03:2f:09:56:0a:
                    2a:48:7d:7a:ac:a4:c9:08:8b:b7:17:85:97:c9:d6:
                    93:0b:34:27:ac:d9:cf:16:0f:52:5b:2b:b3:87:c5:
                    9f:7c:c2:5e:50:7f:af:ab:3b:1b:a0:7c:3f:a4:b0:
                    09:f6:5d:bb:9c:79:43:9b:1e:0f:89:ca:f7:b8:14:
                    3d:82:3a:d4:d5:19:a0:00:6b:da:72:f4:ab:04:ed:
                    f1:21:f3:c6:c4:4d:18:7d:44:e9:30:c4:21:02:e3:
                    d8:1b:7d:8f:60:c7:ae:89:90:e6:7a:25:50:d2:72:
                    62:8a:73:67:17:82:d3:d9:d8:7e:02:f5:df:af:2a:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:33:AC:5D:73:5A:F3:84:02:F3:D4:0A:7A:09:C0:83:DC:8F:21:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95ffac5d-9865-3e69-abca-ad2f72b1a4c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c3::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:58:1e:ef:c5:13:37:fa:33:09:e2:ec:af:ff:dd:4c:38:f0:
         b0:86:26:6f:ad:df:74:36:f0:2a:56:30:8d:be:52:6c:90:ef:
         7e:cb:57:58:ea:dc:d4:29:58:6d:95:60:e4:2f:a8:26:f4:ae:
         5d:71:80:99:22:b7:a7:80:57:68:4a:8a:b5:4e:e7:96:a0:74:
         d9:8e:71:07:22:28:25:cd:3c:d0:84:04:b4:87:f0:c4:ff:ad:
         e1:8f:31:3d:e1:dc:64:b6:6f:b3:d9:9c:46:6e:a6:47:67:79:
         cf:d9:3d:39:f3:a2:73:1d:d6:0a:58:fe:b4:4b:3d:cb:2a:dc:
         a5:91:93:d5:c6:1e:f0:bc:1b:72:26:04:6d:a1:20:00:81:dc:
         93:84:8c:60:2e:bc:2d:1d:cb:30:89:cb:b8:83:a8:f2:71:df:
         4b:89:e0:df:dc:4d:e2:15:87:c6:c1:31:2e:00:8f:42:28:07:
         8f:60:9f:54:39:91:f8:e4:09:fe:ca:00:19:04:21:1e:81:9b:
         54:d1:5b:c1:06:be:96:6f:9b:66:ff:55:82:22:10:58:2f:7e:
         90:9f:eb:65:08:73:99:ae:5e:a9:de:c4:9a:bc:e7:67:5a:5e:
         d7:ed:95:a1:1e:c2:c7:10:65:f8:5f:cd:92:aa:1e:d8:f2:8d:
         b8:56:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:44:22 2026 by rpki-client