Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa
File:                     09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa (raw, json)
Hash identifier:          gg/rKHw8VniO/vfiEk3YjoeZp1+yofmgGufP4JoiwlY=
Subject key identifier:   26:BB:20:CB:8B:71:89:5E:ED:19:8D:01:9A:88:A6:B6:A3:C3:D6:A2
Certificate issuer:       /CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
Certificate serial:       010D0C9F4328584DEF45D95E0578AA1597E780C0
Authority key identifier: 6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     399078
IP address blocks:        2606:42c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:d9:5e:05:78:aa:15:97:e7:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=e72f59a6-75e5-4545-89dd-f1f4ec44d51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:4c:de:fa:db:10:23:bd:81:63:c3:12:ba:
                    ae:a9:be:c2:5c:aa:1c:8d:73:47:ad:98:6a:fc:58:
                    02:77:68:17:25:9f:83:6f:b5:41:26:a3:84:de:26:
                    7c:1c:9e:2a:12:2b:b6:eb:19:62:7c:de:62:f8:e9:
                    c7:fe:50:da:b3:a4:fc:d1:45:9b:c8:5e:5a:d9:2b:
                    91:6d:3c:78:70:7e:ec:de:c0:f6:c6:7b:69:e6:22:
                    d5:e0:4d:1c:cf:40:f6:42:4d:f5:e9:16:26:0d:91:
                    7a:2f:0f:34:af:2f:00:ed:12:fd:53:64:01:75:1f:
                    c4:dd:fd:6c:36:e4:8c:b1:66:7c:a3:ac:a3:54:7d:
                    75:43:5b:fe:41:b9:34:d3:ab:38:d0:01:a0:7f:59:
                    c3:46:95:c5:15:fe:8d:4c:a3:76:91:19:7c:6f:8d:
                    ad:95:06:e5:b5:b6:46:ad:24:61:bf:3d:74:10:0f:
                    3f:fa:17:bb:a2:0c:a0:fb:bf:1f:ad:cc:50:1f:a7:
                    dd:9e:fd:e1:ae:a3:0c:57:59:71:51:ca:37:ac:4f:
                    a4:bc:5c:5b:bc:dc:b6:bd:6a:99:8e:38:08:e3:58:
                    8b:2c:92:2c:59:71:32:15:5c:7b:57:fc:44:46:cc:
                    9f:52:af:47:a8:4c:6b:e6:3f:e1:9e:86:d4:ac:d3:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BB:20:CB:8B:71:89:5E:ED:19:8D:01:9A:88:A6:B6:A3:C3:D6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl

            X509v3 Authority Key Identifier:
                keyid:6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:42c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:5d:4c:ce:c9:b2:fc:6b:b9:a1:ba:2d:3b:db:28:3b:76:
         15:cb:5c:37:de:3d:fb:aa:a7:3e:e0:18:d8:40:84:30:e6:9c:
         51:37:e2:62:00:3f:54:07:11:39:87:17:9b:8a:fb:cd:35:98:
         4e:02:75:1d:99:15:4e:48:6a:66:d7:1e:04:fd:2c:54:f7:89:
         90:5e:93:c0:5b:2a:84:c4:25:ce:19:e8:d1:3c:01:32:e9:03:
         34:88:e0:a4:82:0c:1e:85:58:89:13:24:d6:f8:da:31:e3:81:
         7c:ab:1a:51:cb:88:ff:64:14:97:a6:bc:ca:0c:ac:e9:57:ae:
         33:e9:79:38:66:51:80:b0:48:f8:48:ea:89:d7:2d:a4:38:d7:
         b2:22:96:98:0b:ca:dc:ce:11:c3:f0:db:3a:d7:dd:71:b6:2a:
         fd:e1:23:e7:20:03:1f:b6:0e:f1:17:40:52:77:7c:c5:dc:a2:
         c3:92:d8:66:6c:bf:40:a7:2f:02:0e:79:18:af:3a:9f:1c:dc:
         9d:87:da:24:1e:37:1c:21:35:e6:85:7c:76:52:92:ca:1d:fd:
         67:9a:4f:55:da:f7:66:4b:c6:20:fb:f9:1d:37:df:ea:bd:f1:
         05:73:88:3d:d6:56:f4:58:bf:7c:31:c8:52:56:c5:ae:a9:06:
         8c:16:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:17:51 2026 by rpki-client