Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b963cfff-2b37-32ea-a36a-9d23d77965fd.roa
File:                     b963cfff-2b37-32ea-a36a-9d23d77965fd.roa (raw, json)
Hash identifier:          mm0CmirRYooH00ghxnApIR5yDsMVMjVSgW3ILev3W8k=
Subject key identifier:   ED:AB:B2:14:3A:C6:D6:C4:DB:02:DE:39:27:AC:6E:48:10:0E:A6:B6
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E059C547BFB94762FF5E45C80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b963cfff-2b37-32ea-a36a-9d23d77965fd.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        2620:120:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:54:7b:fb:94:76:2f:f5:e4:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f785ff62-ece9-45fe-8927-99c4fd9dd7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bb:a9:00:2d:9f:39:ac:ff:00:b2:fb:b1:ee:
                    d4:43:75:ca:a5:23:bf:64:e6:12:ab:c8:75:1a:8c:
                    8b:62:d5:04:bb:5c:a4:38:30:48:85:02:db:32:fe:
                    3a:d0:56:7a:2f:dc:f9:1b:9c:82:c9:41:31:e0:0b:
                    71:06:71:48:e5:3d:8d:c8:d0:f1:82:a4:8d:fe:f6:
                    f4:9c:1f:c4:82:60:a7:fe:a6:a9:1e:99:23:79:56:
                    e9:21:5b:ae:9f:6e:ce:fb:61:2e:d4:b4:57:dd:f6:
                    9c:21:4b:29:82:e7:27:70:58:13:46:40:84:a8:58:
                    16:26:de:db:b7:78:b2:80:4b:1f:3b:9a:c6:58:cc:
                    e6:dd:5d:a7:95:d3:2c:10:fa:68:c9:07:9e:d4:bb:
                    37:1f:22:fc:66:1d:63:f1:f2:2c:22:a1:25:3a:8f:
                    18:ca:91:00:cb:50:36:4f:cb:d9:34:b3:11:f4:33:
                    3b:d2:bb:23:21:13:0d:63:b7:47:41:59:32:ac:05:
                    fb:1c:fb:0d:88:25:65:3d:1e:5a:eb:b0:23:70:32:
                    be:19:2d:70:f8:b3:f8:3f:dd:cf:12:f6:2d:5b:69:
                    90:e0:27:3f:cd:51:d0:92:b3:e8:92:60:33:08:a8:
                    f1:b9:d8:e1:bc:1d:d7:9f:0c:96:94:fa:e4:3b:ff:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AB:B2:14:3A:C6:D6:C4:DB:02:DE:39:27:AC:6E:48:10:0E:A6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b963cfff-2b37-32ea-a36a-9d23d77965fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:120:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:5b:87:fa:df:c2:e2:e8:f8:6d:01:11:00:04:42:78:19:fc:
         32:db:25:55:dd:02:c0:9e:2d:cd:ce:37:b8:55:89:a6:e2:d7:
         16:df:8c:77:e2:93:3c:72:d6:76:53:6d:a6:7d:74:c2:33:f7:
         b0:38:4d:09:f3:66:65:3e:ed:ff:20:a3:51:fb:96:d1:c2:f3:
         64:63:06:ae:6f:f2:b6:6b:52:59:e9:71:bc:2e:9b:8c:db:60:
         10:c4:1f:36:5c:b0:9a:fa:f1:5a:07:25:f4:9f:d3:c8:33:8d:
         8d:88:76:a1:d8:6b:33:45:7f:96:7e:44:a5:a1:a4:df:d3:35:
         41:7f:00:e4:0f:4f:e7:83:93:0f:60:a8:6e:55:a8:92:21:3c:
         73:80:d7:0b:9c:6a:7a:30:58:1c:cb:70:e7:75:2d:a2:09:40:
         3f:51:dc:3c:f5:c7:b7:78:4a:43:bf:59:89:2d:79:2f:0b:be:
         06:60:2b:14:d8:27:e2:3b:55:37:53:4b:99:0e:2a:4e:a7:ef:
         86:c9:8a:f1:70:77:3d:a8:e0:94:fb:97:80:2a:83:d7:ba:ae:
         a3:64:b8:55:0a:5e:6b:15:f3:94:cc:29:0a:80:83:61:fc:4c:
         d8:8b:1c:f1:81:5b:b4:02:d1:54:9e:ab:cd:f6:09:d9:9b:44:
         d8:49:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:24 2026 by rpki-client