Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
File:                     e645c012-c626-34db-bc9b-1cc63aba011f.roa (raw, json)
Hash identifier:          wvzxHjD1LIXpX3rQ5a5g59k2+5nhRh4Hn3PPuZxljYk=
Subject key identifier:   D5:D4:F9:86:20:52:95:D9:99:4A:23:F9:1F:F2:0B:F9:CA:AE:8E:FE
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584EA7879D99AB6BE5FF67CDF928
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16532
IP address blocks:        2605:2a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9d:99:ab:6b:e5:ff:67:cd:f9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bd21174b-1677-4389-aae2-9d47cef7e350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e0:08:52:47:0f:c4:7c:f1:a9:08:c4:f0:50:
                    a5:64:62:c7:23:89:e6:f9:16:03:11:bc:26:23:20:
                    90:b6:69:6e:03:aa:00:70:f2:c5:cf:4f:58:3b:cb:
                    6b:59:19:3a:1c:58:19:8e:c5:ec:9f:c1:c9:23:0e:
                    1c:68:d3:73:dc:7d:86:c2:b3:04:d0:ae:70:fc:c8:
                    ed:a6:dc:1a:7a:d8:4d:98:0c:0b:32:11:39:0e:a9:
                    91:be:fe:82:53:07:d3:a1:66:b6:87:f6:96:26:f2:
                    06:13:66:87:a7:b1:a2:25:c9:08:cc:2d:36:7c:ca:
                    82:30:b4:36:5d:87:1b:4f:bf:62:01:c7:99:1a:ac:
                    d6:69:a4:a2:6d:7d:c2:43:15:45:33:2c:70:09:a4:
                    a4:df:67:b9:fa:36:fd:41:90:06:af:64:79:d8:c9:
                    09:c7:5c:a0:b1:26:05:b3:b3:2c:c0:b4:8e:23:74:
                    c2:bc:1a:5e:84:02:ad:11:ba:c5:bc:f3:e9:15:c4:
                    5f:5c:e5:56:bc:a3:14:bd:1e:71:16:3e:47:68:4d:
                    b2:e2:5c:2a:26:b3:a3:70:44:0f:ff:4b:6e:8a:82:
                    5b:97:54:cf:9d:2a:4f:0a:31:fa:b0:77:2a:33:e7:
                    78:53:cc:d4:a8:9e:6d:3e:11:f4:07:c7:b0:6d:62:
                    00:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D4:F9:86:20:52:95:D9:99:4A:23:F9:1F:F2:0B:F9:CA:AE:8E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:04:09:fb:58:66:7e:91:6a:55:18:81:96:1e:b4:cb:cf:6f:
         6e:dc:8d:47:18:2f:31:3d:8d:fa:d6:f5:de:d8:21:4b:f4:fe:
         43:b3:38:db:fb:2f:bb:c2:03:fe:72:92:c2:0a:87:86:e4:cd:
         d2:eb:77:b2:2f:be:43:fe:5c:1b:1c:ee:65:68:c3:cf:59:d8:
         ff:e5:39:3e:55:46:fc:95:4a:64:ba:09:7a:a1:e1:bd:81:a9:
         f5:4e:44:56:e8:d3:cf:2e:c2:ea:7f:d5:05:4c:c2:c2:ca:ff:
         6c:d9:fe:92:8a:71:b1:1b:b8:a3:82:dc:c2:95:95:6b:33:c9:
         5d:39:f2:f5:31:2a:ce:84:cf:fc:8d:51:4d:38:3a:dc:19:bd:
         ce:c0:30:09:60:ee:7c:18:3d:9f:4e:6c:ff:51:46:fd:51:a8:
         ef:6c:ba:9a:68:00:51:e7:bd:46:b3:f7:d5:f6:49:f0:0a:c1:
         27:a9:d6:a7:d0:7c:24:b1:61:af:62:5e:5b:9f:61:f7:51:60:
         97:c3:48:ed:6c:70:d2:92:27:06:37:83:eb:59:67:fc:8e:e3:
         85:a5:9c:f2:a7:b8:9e:af:1a:e4:99:85:eb:78:d3:62:ca:f6:
         57:c5:83:e1:61:e7:2f:d9:96:1b:71:77:d1:ed:8b:ae:ae:bb:
         53:ad:b2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:15:58 2026 by rpki-client