Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/6dbf50c9-3cc8-3ebd-9e8a-dd8384f7d61c.roa
File:                     6dbf50c9-3cc8-3ebd-9e8a-dd8384f7d61c.roa (raw, json)
Hash identifier:          9S0/GEQwDGT4HjkuUymPVNux3z/upbcv5zVy7mDxk0E=
Subject key identifier:   48:9B:21:79:7C:0C:76:48:FD:51:76:58:0B:81:3C:C2:6D:D9:9B:2E
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584D60E508D3905B66F93B21FF80
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/6dbf50c9-3cc8-3ebd-9e8a-dd8384f7d61c.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     26863
IP address blocks:        2605:4540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:08:d3:90:5b:66:f9:3b:21:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=2fd57652-dcd9-4a63-90bd-0fa45597e71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:59:06:ff:33:8b:d9:7b:56:a0:e2:94:f0:3c:
                    63:6d:98:74:a6:fc:de:03:4a:84:56:21:ed:58:b5:
                    c4:65:9f:07:2f:3f:76:2d:bc:e8:00:19:86:eb:26:
                    59:a3:cc:7e:44:dc:80:89:45:e6:84:fd:25:10:66:
                    5a:1e:1d:c4:5e:1b:39:7d:84:c6:b8:70:99:c0:8c:
                    17:ab:60:6a:1f:ad:70:c3:27:7f:73:a9:7d:f1:a7:
                    f2:57:68:fb:cb:c4:8b:7d:e8:15:e6:e0:ce:4a:41:
                    dd:1c:cf:f4:59:36:04:78:40:58:43:8f:b0:c7:42:
                    98:0f:09:08:7f:b5:35:ed:34:3d:ea:80:ff:bf:b3:
                    ee:88:18:0c:b6:29:fd:3f:cc:9d:35:79:3b:47:60:
                    c9:7c:11:f3:78:14:74:66:77:f9:72:90:30:63:64:
                    d9:a0:46:ba:ce:54:33:90:68:ac:32:c5:72:3e:03:
                    d1:fb:5a:52:ee:12:3b:89:65:97:b4:7b:f2:ea:72:
                    4b:8a:ab:ed:42:f9:86:a0:82:bb:ae:28:74:26:dd:
                    b2:f9:2a:02:f3:c6:5a:85:12:d8:6a:29:10:96:f5:
                    eb:77:d4:5c:cf:0d:3e:bc:d7:db:94:0e:97:df:27:
                    3f:8f:34:72:a9:58:9a:3c:6b:27:f7:ab:8e:f5:b8:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9B:21:79:7C:0C:76:48:FD:51:76:58:0B:81:3C:C2:6D:D9:9B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/6dbf50c9-3cc8-3ebd-9e8a-dd8384f7d61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:82:cb:c5:8d:4c:6b:c1:a2:f8:dd:48:2d:19:f4:b4:98:52:
         04:31:d3:76:45:67:b7:f0:5a:a4:4a:e1:76:d6:6e:12:64:e8:
         f3:8f:bb:28:5c:e9:ab:e7:6e:94:ca:93:ea:f2:e5:ae:37:52:
         38:a4:b7:0b:91:c2:40:4a:71:a7:91:e5:aa:01:5e:56:9a:f4:
         6f:17:c4:ee:63:88:d3:bf:4d:d0:bd:32:a9:66:95:33:63:7d:
         39:2e:3a:cc:df:0a:f6:05:10:4e:df:91:1d:74:1e:2d:3f:ed:
         39:ba:d8:e6:e0:61:f4:32:93:fb:eb:aa:5f:db:98:df:6e:ac:
         16:96:c0:d2:a2:c2:c6:b7:5b:89:af:f3:89:35:de:5f:09:93:
         80:b3:af:f5:85:78:fb:39:6d:d5:16:3c:f9:fa:47:93:48:a3:
         3f:98:54:5f:50:89:a4:bf:b9:ce:a0:d8:30:84:01:8f:78:80:
         8f:66:a5:6b:67:21:e4:f3:00:ad:99:fd:05:7a:0a:57:34:56:
         85:61:3f:10:c5:e4:41:ed:e3:88:c7:eb:94:82:8b:e4:66:47:
         cd:94:1e:3a:21:2f:8e:e1:43:e0:47:5e:04:b4:e6:87:39:dd:
         7f:39:a0:90:64:01:a9:97:96:2f:f7:36:c2:8d:9f:c5:0c:62:
         53:12:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:32:12 2026 by rpki-client