Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/a3255030-dc74-3c6b-8133-50694b091239.roa
File:                     a3255030-dc74-3c6b-8133-50694b091239.roa (raw, json)
Hash identifier:          kG1DxAXwvIMztNVMZC1CZzYOUOyvxYFtcQqzoWGV+Ho=
Subject key identifier:   51:41:64:44:70:2F:DF:92:84:26:65:36:BF:9F:70:D2:45:2D:F6:FB
Certificate issuer:       /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Certificate serial:       010D0C9F4328584E428F24E8E9F2B5AA4F7C4690
Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/a3255030-dc74-3c6b-8133-50694b091239.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     54944
IP address blocks:        2606:7740:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:24:e8:e9:f2:b5:aa:4f:7c:46:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=545eefd3-7a8f-425e-8c64-e067f08c749d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:43:87:f2:f9:0f:b8:f8:57:ad:96:2e:01:
                    41:ec:21:e1:d0:a6:b9:f0:a8:76:0f:89:6b:0a:e1:
                    84:31:06:b4:73:7a:81:4c:59:54:cd:d1:f4:78:29:
                    83:66:39:c7:d4:01:1f:13:f3:a2:1f:97:a4:73:3b:
                    2b:28:2d:eb:f6:35:c6:a6:d1:92:58:17:c4:0d:4c:
                    03:8b:bb:5f:8f:95:aa:91:12:0a:a0:12:11:1a:55:
                    ae:87:61:3b:60:f8:d5:c8:84:74:a3:be:3a:05:b3:
                    e3:b8:fc:74:66:33:eb:38:fb:5e:fb:55:d7:0b:19:
                    f5:e3:e4:b2:01:12:4f:83:da:46:ef:ad:28:68:5d:
                    a2:e9:57:39:67:1b:ed:0f:c0:9c:3c:8b:50:34:6f:
                    ac:c8:6b:67:d6:e0:21:08:5d:b6:1a:8e:ba:5c:14:
                    d0:a7:05:3b:39:2f:89:aa:6d:41:d7:da:10:65:5d:
                    5d:48:d8:73:8f:59:98:5e:f1:b2:74:cd:57:88:fd:
                    73:c6:a6:40:32:61:80:07:b5:67:d3:54:71:7f:a0:
                    ae:9d:29:e2:f4:af:06:c9:3a:a2:fd:f3:56:04:71:
                    67:58:48:b0:13:48:d9:39:e2:85:d9:8f:80:f2:45:
                    fb:de:77:24:63:e6:fc:f8:3c:9c:9c:fd:2c:ca:5d:
                    37:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:64:44:70:2F:DF:92:84:26:65:36:BF:9F:70:D2:45:2D:F6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/a3255030-dc74-3c6b-8133-50694b091239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl

            X509v3 Authority Key Identifier:
                keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7740:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b1:c7:d8:4a:02:94:b7:b4:d2:df:9e:7b:49:b1:0c:8d:88:
         f5:2c:18:f9:0d:a1:00:2f:56:18:22:97:ee:66:c3:58:0d:5a:
         ea:67:f5:92:ef:12:d2:96:c0:20:f4:4c:b6:ae:8a:4e:b9:a2:
         df:11:5a:88:63:c1:57:ac:72:f5:2d:a0:86:0e:87:92:c5:61:
         ae:0e:77:d7:a1:1b:ee:28:ef:3b:9f:68:99:c5:7b:fe:89:d8:
         f1:ba:32:ef:34:d7:7b:61:bf:71:66:12:31:38:58:ee:e7:75:
         79:87:6b:7a:f1:3d:aa:19:d7:53:35:32:8f:67:be:62:a3:8f:
         58:ca:e7:3a:26:07:f1:6e:dc:7b:67:dc:64:69:dc:d5:41:78:
         9c:c6:e9:1b:d5:23:52:19:0c:8f:29:a1:7f:23:48:fb:c0:78:
         0d:cc:29:9f:9e:c9:fc:24:00:ce:19:3f:9c:4c:b5:fa:f5:4a:
         f1:0a:fd:a8:f2:45:9e:6d:a5:f1:de:3d:e0:12:86:b9:a6:cf:
         97:93:27:d5:0d:e9:fe:48:85:1b:c9:07:11:ad:75:f9:d1:a8:
         b6:1c:3c:5f:99:81:4b:4d:76:83:18:7f:07:fb:9d:14:4a:91:
         8a:dc:63:07:30:42:d9:a2:74:c7:18:5b:c2:be:09:7a:ac:5a:
         68:14:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:38:02 2026 by rpki-client