Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa
File:                     f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa (raw, json)
Hash identifier:          qzGt24HUm3zBvb1l4L/9RIQ0mS7oBjjjEPX9WUtUgKQ=
Subject key identifier:   51:08:FF:F2:AF:3E:70:38:CE:F5:35:03:55:27:11:B5:AE:5C:F9:28
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584E35FF1F09FB74FA0F54787BA0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     398549
IP address blocks:        2605:dd40:5005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1f:09:fb:74:fa:0f:54:78:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=a5a0d768-ee0f-4962-8ece-0192a5931441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:98:78:74:20:0a:fb:b8:90:6a:83:4f:fd:
                    6b:9f:d7:b9:e4:76:99:79:11:85:74:b4:62:85:ad:
                    f5:2a:2f:43:4f:56:e4:d8:70:ba:77:fa:05:13:43:
                    46:b1:d8:bc:68:1b:a2:30:e0:46:9b:a8:cb:f5:89:
                    0d:93:36:81:05:ca:bf:0f:e7:b8:dd:68:b2:d1:7f:
                    59:95:96:c1:15:e1:e5:e1:00:82:5f:fa:89:68:68:
                    dd:59:24:0b:b7:41:c7:a7:0d:c0:cd:6c:8a:e1:d7:
                    1d:f9:dd:6c:8e:67:f8:8b:40:01:9f:62:3f:0a:0f:
                    ec:d4:e2:29:5a:6d:5c:c8:9f:a5:3e:1e:c5:48:09:
                    6d:19:ea:7b:e5:fe:d2:39:16:46:b4:35:0e:57:98:
                    2b:fc:24:2b:4e:ff:d2:d0:f6:45:b0:5f:35:9a:bf:
                    45:58:5c:26:bc:be:1b:20:f5:1c:fc:41:7f:60:e0:
                    2f:72:76:6f:ef:78:95:d2:df:61:30:d0:df:39:4c:
                    6d:23:ad:7c:0d:9e:61:cd:39:27:01:c2:f7:11:98:
                    cf:30:84:57:7b:90:bc:bd:a7:cc:b6:37:d0:66:64:
                    ff:ab:f1:0c:56:e6:98:05:95:20:0a:1c:4f:11:42:
                    36:f9:a3:97:c7:c3:ba:f1:e6:7a:71:bd:36:6e:9b:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:08:FF:F2:AF:3E:70:38:CE:F5:35:03:55:27:11:B5:AE:5C:F9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:5005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bd:37:c0:1a:c1:f7:b5:ec:f5:f3:33:15:de:a1:5d:04:0c:
         e8:e6:cf:e7:16:d4:84:76:87:89:2f:f5:bd:1d:b3:47:f9:d1:
         48:92:7c:f7:f6:fb:5a:a7:5c:53:e5:1e:46:b4:18:ac:9e:d7:
         be:b9:9d:ba:3f:71:d5:aa:6f:6e:57:ff:2d:9c:25:1b:44:4d:
         a0:01:78:48:08:c7:fe:da:d1:0c:0d:22:3c:9b:73:f8:51:e1:
         4f:34:3d:f7:bf:fb:07:10:3a:eb:44:06:ec:42:19:f3:09:ba:
         8d:98:5e:40:5a:05:1a:50:2e:be:5d:9c:03:57:a6:0b:b5:20:
         68:20:ee:de:49:cc:28:97:c5:77:bd:91:22:57:a2:48:68:55:
         7e:a7:df:53:27:08:93:2c:d0:82:46:ff:8c:3c:32:03:f6:7a:
         54:ec:c1:60:26:e4:16:35:e5:fd:ce:60:53:dc:0f:38:25:f2:
         6e:bd:8d:c5:5a:a8:54:de:42:94:16:3b:64:fb:84:3c:a2:67:
         f6:99:21:5d:61:fb:77:72:aa:1f:09:42:9f:12:85:57:22:a9:
         cd:8d:ec:e8:0b:c5:ea:76:7a:ba:88:a1:97:10:25:a6:0a:1d:
         bc:21:fc:8d:3f:d7:0a:41:bf:73:c9:8f:d0:42:2f:0a:f2:d3:
         86:70:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 23:09:22 2026 by rpki-client