Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/e2842c98-5d52-3814-87ba-39dd9613c7d5.roa
File:                     e2842c98-5d52-3814-87ba-39dd9613c7d5.roa (raw, json)
Hash identifier:          iFEVH6TnoTuZKad8NgdjoxKbOSZXh5QDaTP7QN4vR0A=
Subject key identifier:   D0:CE:58:13:3C:0D:32:AA:EF:EF:39:E1:26:F8:42:B4:9A:BB:0E:EA
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584EDDF7375F9EA7C5AB4F8BF551
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/e2842c98-5d52-3814-87ba-39dd9613c7d5.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     20454
IP address blocks:        2607:6003:2301::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:37:5f:9e:a7:c5:ab:4f:8b:f5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=78e752be-a640-4b5d-b19f-fdb59afef137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:a5:a0:e7:3a:09:b6:86:f9:63:45:53:58:
                    87:81:49:5e:95:57:18:81:bf:a2:2d:fa:1e:25:95:
                    9b:42:8a:86:b7:36:76:6c:4e:9f:45:f4:2b:3b:20:
                    84:93:75:61:39:cf:b9:0a:00:d6:ae:cd:f5:76:2f:
                    d2:df:bf:78:00:14:64:78:49:c6:a6:46:1a:58:65:
                    be:de:13:33:ef:23:a0:eb:66:eb:cd:48:e9:07:14:
                    69:94:0e:13:e6:28:cf:98:f9:87:ff:d8:13:bb:7a:
                    a9:c9:00:6a:aa:80:d6:89:59:38:d8:e7:ee:c9:f4:
                    74:5f:18:c6:49:dd:68:a1:d7:68:b4:da:eb:07:b6:
                    4f:4b:22:59:30:6e:dd:f9:37:ac:57:a1:dd:33:0e:
                    d7:f2:6e:78:4d:bd:da:e9:a1:18:a0:5f:b4:70:39:
                    ba:bb:78:6f:b8:87:03:10:1d:dd:36:10:6d:5c:d0:
                    af:c3:92:e0:b6:20:58:e8:ef:16:ed:23:12:fe:86:
                    ea:6d:6a:18:d8:37:f8:0d:67:42:c3:78:cc:23:e3:
                    cc:f0:f2:23:5f:ef:46:da:cf:02:5a:70:bf:e7:df:
                    28:89:57:b0:31:17:bd:36:c4:cc:74:33:fd:80:62:
                    61:74:c9:8a:95:bc:41:9b:ff:a2:38:ae:e6:f4:03:
                    83:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CE:58:13:3C:0D:32:AA:EF:EF:39:E1:26:F8:42:B4:9A:BB:0E:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/e2842c98-5d52-3814-87ba-39dd9613c7d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6003:2301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:37:be:bd:da:e5:7a:a4:b9:14:f6:3c:15:02:71:b0:95:ac:
         45:99:8b:68:38:76:e8:86:2c:ff:d7:ee:0f:53:4b:a8:4b:13:
         45:20:81:e1:c8:18:e8:71:59:c8:34:3a:a8:c1:d5:ec:79:b0:
         ab:e5:32:85:61:23:1a:bb:a8:ba:f8:62:76:aa:4a:23:61:d2:
         3d:7a:65:b1:be:ec:54:62:73:78:1b:67:62:9b:7d:8e:40:c8:
         6c:80:af:f9:2c:a0:bf:aa:de:0e:cd:50:4c:e3:8b:97:ef:a6:
         ed:2f:95:6e:51:19:09:3d:90:58:b4:19:c0:63:97:2c:0c:ac:
         38:26:3d:ed:39:c7:dd:5d:05:f8:50:d9:aa:2f:fd:49:0b:2e:
         c5:5d:b0:46:4e:c0:ae:b1:dc:51:af:a1:17:20:48:0a:0b:7a:
         38:0d:6c:5b:3d:ea:64:12:21:6d:95:90:42:e0:6e:4d:68:fa:
         28:84:46:bd:c8:89:09:10:25:81:dc:73:da:04:5a:6c:0e:16:
         2b:16:60:c9:2f:b1:9a:56:93:fd:ea:07:b7:57:9b:50:64:96:
         d2:92:0b:4c:2f:96:cc:9a:96:ae:a6:74:69:89:31:b7:b4:55:
         9d:70:36:db:75:35:2d:72:6d:1f:63:01:1b:de:f9:65:04:f7:
         aa:42:9b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:59:12 2026 by rpki-client