Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/20dcd17b-577f-3380-b133-8ad3ec984706.roa
File:                     20dcd17b-577f-3380-b133-8ad3ec984706.roa (raw, json)
Hash identifier:          TX0HmBBAyYT6Y6Utm0O4uw/NPX5yjOTC8A3d7NbANvs=
Subject key identifier:   74:11:D8:A2:AB:EA:83:6D:F0:5C:9D:C6:AB:C4:41:65:2C:83:96:0E
Certificate issuer:       /CN=b1341766-e680-439c-a8dc-fb35f8f84ed2
Certificate serial:       010D0C9F4328584EE96235491E9D8C14C1606780
Authority key identifier: 58:32:47:89:EB:BC:F9:31:B7:07:4D:E0:55:B4:EC:B4:DF:3D:08:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/20dcd17b-577f-3380-b133-8ad3ec984706.roa
Signing time:             Fri 21 Aug 2026 15:09:44 +0000
ROA not before:           Fri 21 Aug 2026 15:09:44 +0000
ROA not after:            Thu 19 Nov 2026 16:09:44 +0000
asID:                     53680
IP address blocks:        2604:22c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:62:35:49:1e:9d:8c:14:c1:60:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1341766-e680-439c-a8dc-fb35f8f84ed2
        Validity
            Not Before: Aug 21 15:09:44 2026 GMT
            Not After : Nov 19 16:09:44 2026 GMT
        Subject: CN=b98251a2-b18e-4a8e-b199-6965686f9a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:ed:32:3e:8e:f4:2b:fc:5a:4b:16:69:e6:
                    d1:a7:60:3d:be:d4:76:62:8f:b8:b9:d2:31:f1:62:
                    6c:20:63:97:47:a0:fb:0d:3a:fd:28:3e:c0:d5:28:
                    31:48:a3:93:63:84:ee:03:81:35:36:f6:d3:b6:49:
                    66:95:80:b9:61:c2:3e:f7:af:81:f8:41:1e:9f:47:
                    0c:42:e5:fc:3a:f8:80:9d:c5:45:8f:49:15:33:b0:
                    21:53:b4:c8:13:6b:25:f5:fb:d8:ec:56:e1:12:41:
                    a7:a4:a9:25:93:4d:08:dd:d8:0b:91:0e:bc:95:74:
                    04:d0:7b:3e:89:88:03:2d:94:8e:f3:e7:9f:95:67:
                    18:4d:07:f5:8c:36:ed:5d:92:8f:c4:ab:c0:14:48:
                    13:51:e2:b4:2c:60:64:3e:92:d0:a5:fc:bb:ac:34:
                    13:d5:8e:ad:46:4b:dc:4d:8b:d9:9d:85:c6:28:33:
                    a8:f9:68:4a:9d:8e:7c:27:f5:8a:5b:6a:64:fd:ad:
                    53:36:f3:f7:05:b3:78:2f:f3:bd:49:58:b4:85:2e:
                    b7:58:dc:73:7d:ac:e2:1e:12:b8:a1:03:fa:33:40:
                    51:2b:33:7b:b0:13:64:72:9f:84:f4:89:0d:27:61:
                    de:28:60:ef:6e:1b:d4:f9:b7:25:5e:4d:82:15:2e:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:11:D8:A2:AB:EA:83:6D:F0:5C:9D:C6:AB:C4:41:65:2C:83:96:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/20dcd17b-577f-3380-b133-8ad3ec984706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.crl

            X509v3 Authority Key Identifier:
                keyid:58:32:47:89:EB:BC:F9:31:B7:07:4D:E0:55:B4:EC:B4:DF:3D:08:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:22c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:df:40:fc:8d:47:ae:9a:45:bf:ce:73:06:3b:34:ca:3f:57:
         a4:a2:44:8a:e9:47:b8:b1:74:9c:14:5e:13:60:77:f0:b2:d7:
         25:88:10:9c:b8:32:db:24:0f:ee:5f:67:61:ba:81:50:60:f9:
         2f:1b:64:3c:2a:40:f3:39:57:1b:d1:f0:2e:70:49:58:b0:57:
         c0:0d:ad:18:d7:ae:f5:20:ef:a2:09:da:22:55:7c:95:5f:bd:
         24:21:cd:37:a9:62:b4:72:0e:1b:0a:b3:b2:22:e1:74:91:74:
         5c:8f:7d:19:c9:27:7a:70:a2:7e:ac:f1:ef:56:c0:bb:17:b1:
         c3:df:6e:17:f6:aa:1c:42:1b:00:37:f2:e8:1f:03:cb:7a:92:
         31:c5:9a:ab:7b:da:4a:8b:ac:12:ee:c5:04:17:6f:9f:c6:b1:
         78:d9:ae:17:7b:76:ad:1b:10:c3:a3:1d:d7:8a:f7:d9:47:64:
         f1:23:01:99:1a:6c:b8:b1:b9:9c:c4:2b:f4:75:df:7b:97:ef:
         ca:cd:36:0c:6d:26:b8:ac:01:c8:37:16:7d:f7:f8:d6:d8:2b:
         8d:50:f2:03:d3:38:b3:dd:0d:ef:87:e3:1a:57:bd:76:27:65:
         55:6f:02:0e:42:13:3f:26:be:7a:cb:fe:0f:a4:24:69:38:5b:
         9d:5a:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:14:58 2026 by rpki-client