Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/04e98726-cb6c-3fc0-8257-de52674690ff.roa
File:                     04e98726-cb6c-3fc0-8257-de52674690ff.roa (raw, json)
Hash identifier:          wQZ8WWXGyjk7ecjUtnakCsTzlLZswsmpP/saxQDVBoc=
Subject key identifier:   79:33:FF:60:CE:5C:79:35:5D:96:E4:3F:2D:76:DF:F6:AD:10:2A:1D
Certificate issuer:       /CN=f0c5c989-838a-4504-9ec3-d2a149457243
Certificate serial:       010D0C9F4328584E5084972E20A9F8FD97C22260
Authority key identifier: AB:26:F7:63:55:B3:02:0B:3B:78:5D:A4:CA:BC:A3:AD:5A:00:19:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/04e98726-cb6c-3fc0-8257-de52674690ff.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     0
IP address blocks:        2604:5e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:97:2e:20:a9:f8:fd:97:c2:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c5c989-838a-4504-9ec3-d2a149457243
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=c9133116-dd71-47de-acad-016744366762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:8f:fa:35:8e:89:1a:08:e6:83:47:a2:c3:
                    4f:b0:df:0b:bc:4d:6d:d1:7d:25:da:c9:b5:e0:f2:
                    53:a6:79:41:40:a6:59:3b:fe:aa:5d:4f:dc:3f:19:
                    6d:8b:f5:f1:76:ae:71:50:d0:cf:b9:58:fb:9f:29:
                    d7:52:fc:bd:40:97:ac:0b:19:76:41:bc:21:10:46:
                    e6:94:ee:fd:79:e4:2b:4f:60:18:3e:a4:54:a6:08:
                    a9:98:35:a7:c0:b9:44:89:b1:5f:aa:bc:5f:99:98:
                    21:59:62:f9:7d:89:9b:23:14:a1:e5:ae:5d:3c:5d:
                    8f:2f:ad:ff:d7:38:ee:03:ac:89:ef:9c:b9:1d:89:
                    52:d9:41:6b:22:01:44:5a:65:48:a4:ed:7d:a9:06:
                    2b:01:d3:d8:5c:dc:eb:05:51:06:88:58:cd:ad:66:
                    96:57:9f:f0:e1:e9:f7:48:9c:d3:e4:d0:81:27:0b:
                    57:51:88:36:58:0a:3a:05:93:47:85:3d:ac:9b:93:
                    dc:5c:18:fa:df:97:fe:fa:e3:3e:7f:8a:bd:bc:9f:
                    ed:d4:33:30:ca:3a:2e:51:34:a3:8f:29:7e:e9:10:
                    72:34:c3:1c:8f:b0:ac:d0:55:75:47:03:27:fc:61:
                    13:81:7a:49:ea:0f:cc:fe:23:8b:bb:dd:86:96:57:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:33:FF:60:CE:5C:79:35:5D:96:E4:3F:2D:76:DF:F6:AD:10:2A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/04e98726-cb6c-3fc0-8257-de52674690ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.crl

            X509v3 Authority Key Identifier:
                keyid:AB:26:F7:63:55:B3:02:0B:3B:78:5D:A4:CA:BC:A3:AD:5A:00:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:66:84:1a:82:ab:0d:cc:6e:df:59:5d:f9:b0:32:86:44:1e:
         a2:8d:61:68:be:b3:27:b3:13:e2:21:5e:4f:a5:77:f3:0e:8b:
         ed:ae:01:57:f8:06:bd:cf:4e:d8:ac:92:67:af:68:3b:d3:af:
         9b:57:74:2a:59:91:f2:8f:4a:58:00:28:5a:99:3a:ee:bd:30:
         ae:93:03:aa:2c:53:e3:f2:30:ae:ec:16:a9:54:27:05:0e:24:
         53:d4:6c:2b:57:b4:f3:8a:2e:54:c1:ee:db:28:52:a4:81:0a:
         f6:f8:59:c3:da:c0:80:b0:72:68:31:55:9c:44:62:ac:ed:1c:
         60:a8:21:b5:da:ce:3f:36:e7:f0:ee:89:3c:5c:aa:8c:3e:13:
         17:fc:2d:fb:5f:8d:8e:47:20:91:84:b8:e2:5c:16:e3:48:9e:
         e9:fb:53:db:4c:f5:c0:06:76:48:b4:77:30:a4:03:7f:34:9f:
         0f:89:41:4f:9d:0b:80:e1:c1:e5:80:32:02:79:bc:59:ee:b4:
         24:fd:c0:c4:d0:06:eb:5e:ee:9c:1a:38:59:a2:43:82:80:f0:
         99:58:5d:b7:4a:fa:e2:93:61:22:ed:e0:2a:12:d7:26:b5:0a:
         fb:57:8f:35:76:2c:91:a4:4a:bd:ad:c1:fe:18:c5:89:7b:d6:
         6b:05:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:48:37 2026 by rpki-client