Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/379150f7-5e15-4850-abf1-475ac18d44b7/e55878de-64a9-32ea-b6d9-e9b38066eabc.roa
File:                     e55878de-64a9-32ea-b6d9-e9b38066eabc.roa (raw, json)
Hash identifier:          0fAa4qNdKj2/qf4LHFZRmK2gxWY8cQhT9miSCcE1r8Y=
Subject key identifier:   E2:6E:77:89:81:E4:19:2B:81:0C:3C:D4:B7:4A:3C:3E:CD:10:7C:B3
Certificate issuer:       /CN=379150f7-5e15-4850-abf1-475ac18d44b7
Certificate serial:       010D0C9F4328584E380AC3DAA0875800DFBF1980
Authority key identifier: 98:24:F8:97:0D:8C:F3:2D:FF:C6:A4:42:71:70:17:51:D6:F3:E8:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/379150f7-5e15-4850-abf1-475ac18d44b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/379150f7-5e15-4850-abf1-475ac18d44b7/e55878de-64a9-32ea-b6d9-e9b38066eabc.roa
Signing time:             Fri 19 Jun 2026 02:35:28 +0000
ROA not before:           Fri 19 Jun 2026 02:35:28 +0000
ROA not after:            Thu 17 Sep 2026 02:35:28 +0000
asID:                     393327
IP address blocks:        2604:6840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/379150f7-5e15-4850-abf1-475ac18d44b7/379150f7-5e15-4850-abf1-475ac18d44b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/379150f7-5e15-4850-abf1-475ac18d44b7/379150f7-5e15-4850-abf1-475ac18d44b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/379150f7-5e15-4850-abf1-475ac18d44b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:0a:c3:da:a0:87:58:00:df:bf:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379150f7-5e15-4850-abf1-475ac18d44b7
        Validity
            Not Before: Jun 19 02:35:28 2026 GMT
            Not After : Sep 17 02:35:28 2026 GMT
        Subject: CN=fa8f3b0a-a185-4b0d-a8ff-a41b995e0d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:e1:5e:5a:d8:1e:7b:8f:76:8a:0c:10:9f:
                    8a:0c:d2:3d:70:6e:28:6f:71:00:a9:a5:4b:c3:ec:
                    f4:d5:6b:fc:be:54:d5:8f:1f:e2:90:b0:76:56:5d:
                    b5:0c:f2:ea:fc:a0:22:8b:5c:bc:38:df:37:1a:e3:
                    e3:59:11:e0:13:25:d4:b1:5f:87:c4:48:ef:ca:b6:
                    1d:e4:1c:66:b6:c1:70:af:68:a8:7d:e2:5c:1f:34:
                    15:14:0c:7b:02:dd:60:b7:a6:f9:11:e2:2c:31:e3:
                    19:c7:62:bc:39:58:39:4d:76:4b:be:f7:99:10:1c:
                    8e:75:a0:9d:6f:b7:cf:75:96:c3:45:22:ae:7c:1b:
                    5c:1a:eb:31:44:99:99:b6:57:ac:bc:5f:38:bd:12:
                    a7:7b:fe:d9:fa:75:23:11:c4:bc:d8:08:ae:45:e9:
                    2b:76:9d:47:76:18:64:b5:8a:dc:c2:08:92:de:1a:
                    6c:bb:03:65:83:9d:ce:e2:96:42:10:4a:6e:64:8f:
                    98:8b:df:e7:25:70:3d:cb:ca:b4:c5:c6:e8:50:9d:
                    82:c3:1a:16:29:1d:94:ce:d0:6c:31:6e:8d:bd:6e:
                    20:58:ed:1a:84:65:f2:91:03:d4:f2:ec:9a:0b:42:
                    4d:e7:e6:a6:f6:c1:6d:ec:bf:a1:3a:0f:58:14:6a:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6E:77:89:81:E4:19:2B:81:0C:3C:D4:B7:4A:3C:3E:CD:10:7C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/379150f7-5e15-4850-abf1-475ac18d44b7/e55878de-64a9-32ea-b6d9-e9b38066eabc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/379150f7-5e15-4850-abf1-475ac18d44b7/379150f7-5e15-4850-abf1-475ac18d44b7.crl

            X509v3 Authority Key Identifier:
                keyid:98:24:F8:97:0D:8C:F3:2D:FF:C6:A4:42:71:70:17:51:D6:F3:E8:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/379150f7-5e15-4850-abf1-475ac18d44b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:2c:b3:07:cf:07:23:b2:03:c8:53:21:3c:e8:72:01:09:
         15:18:53:fc:b3:a2:ac:a5:1a:f5:36:31:6d:a8:96:79:95:81:
         e9:84:f5:05:78:59:f1:9e:e2:d6:d9:3b:c3:70:89:36:29:17:
         27:91:bf:3e:7f:9a:e0:fd:6c:44:09:11:d5:3d:cb:cc:07:e4:
         e8:b2:aa:e7:9e:7a:7e:0c:68:2a:95:05:dd:66:65:39:18:15:
         a1:0c:30:d4:be:47:a1:9e:f0:17:e3:6d:04:6c:88:db:b7:7e:
         0e:64:dd:21:ce:ec:ab:13:2a:3d:9c:3a:0a:34:03:87:cf:4f:
         1b:54:ac:39:7c:51:9e:10:04:61:a0:c0:dd:ad:cb:f9:f6:cc:
         79:bc:4e:b5:d6:6d:76:56:a2:48:ee:b0:56:ee:49:b5:a1:49:
         97:bf:96:af:cc:cf:4d:17:98:cd:1b:1f:79:c4:db:2c:1a:b7:
         0e:1e:75:c8:0c:2c:a0:d3:40:49:5b:b2:2d:3a:09:ad:b3:34:
         9e:f1:f8:51:b1:63:d8:b6:05:0c:35:80:d4:1d:24:ea:a6:66:
         79:b4:81:00:02:fe:19:8e:55:8a:54:20:2e:15:ec:26:68:7e:
         b9:44:de:61:38:51:63:4d:3d:41:21:88:47:c5:b2:94:2c:64:
         b6:28:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:53 2026 by rpki-client