Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa
File:                     f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa (raw, json)
Hash identifier:          zshW2ZaLyN8s4YiCC21iGkdJQFo81ZWLwO+tx3pF6vg=
Subject key identifier:   22:5D:A0:58:A6:EF:F1:A6:87:E4:81:D7:AC:0F:65:DD:6F:7E:49:9F
Certificate issuer:       /CN=c17eacde-68de-455f-97dc-4d67847c03ff
Certificate serial:       010D0C9F4328584E296F10500194C6777E36F4C0
Authority key identifier: 34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     21577
IP address blocks:        2604:d580::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:10:50:01:94:c6:77:7e:36:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c17eacde-68de-455f-97dc-4d67847c03ff
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=cb5426a4-8017-4daa-866f-e280f484ad95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:0e:37:31:03:cf:77:df:95:b0:63:0c:3b:
                    9c:d0:de:b7:d3:9a:34:f6:24:67:4b:ec:3c:cf:c8:
                    56:9d:db:67:95:75:96:05:a2:ec:96:6f:2b:ee:52:
                    d5:89:47:7a:01:a1:46:4b:17:45:68:75:ed:8f:cf:
                    a8:d6:5c:08:fa:07:97:a7:38:77:75:4e:58:4c:3c:
                    a8:71:34:f1:36:b3:fe:a7:c7:c6:28:fb:9e:56:d5:
                    7e:a0:24:5b:d3:59:75:d4:3e:66:9c:17:d1:63:90:
                    42:7e:2d:27:ed:9d:d9:49:30:28:df:1b:f0:59:17:
                    1b:b2:4a:61:ec:2b:ad:f8:45:29:59:e7:69:a3:1c:
                    98:05:77:13:91:e4:43:45:1a:8a:47:a2:3f:88:b0:
                    18:41:65:ae:07:bd:81:7f:c3:30:ff:26:d7:42:78:
                    32:50:47:f3:63:6f:8f:27:56:00:53:a5:ca:12:63:
                    8f:61:22:c6:21:66:1b:6c:14:70:08:48:51:16:bb:
                    9f:ec:63:5d:fd:40:ac:51:bf:04:a3:52:4e:23:59:
                    b7:3d:cf:84:22:9f:de:d1:72:43:ee:6b:b1:50:e5:
                    85:c6:3e:06:aa:d2:ff:59:0a:58:9e:91:a8:f8:73:
                    a5:ee:75:a7:3a:05:07:dd:c7:61:d3:97:12:e2:4b:
                    07:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5D:A0:58:A6:EF:F1:A6:87:E4:81:D7:AC:0F:65:DD:6F:7E:49:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl

            X509v3 Authority Key Identifier:
                keyid:34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ce:4e:23:6a:ff:69:05:94:23:ac:22:35:8a:b7:fb:01:3c:
         3e:a1:f8:8d:9d:65:3a:53:5e:c2:ad:dd:cb:c5:48:2a:b4:14:
         40:26:ec:ea:3b:5d:b9:2d:7f:a3:42:eb:54:ae:02:98:8f:00:
         8f:25:47:54:a4:12:be:5d:7b:52:3f:48:17:ea:48:b3:6c:cf:
         66:a0:a8:5d:81:cd:cd:23:41:a0:8d:ba:4c:e2:c9:c6:fc:3a:
         e3:b1:c2:82:a3:99:ca:59:8a:72:8e:31:45:b0:6c:37:18:32:
         60:84:cf:d7:6c:72:56:5b:36:1f:06:2e:e2:cc:c4:4c:f8:a7:
         fb:10:eb:af:b0:8d:6d:e2:7e:0f:7b:da:84:d0:53:23:f2:9f:
         48:2f:29:87:d7:2f:9c:83:54:1f:4d:fd:8d:2a:93:e6:bd:07:
         ab:03:0a:a3:3e:3b:18:4b:a8:ee:c6:3e:c3:55:ef:52:6f:6f:
         bb:90:f1:48:8b:f3:b7:2a:7a:99:2b:a3:d6:f2:1a:8a:77:26:
         89:e4:fa:4d:3d:67:1b:7e:35:d0:12:27:d6:4d:db:fa:77:f8:
         a5:74:2e:01:28:d4:0e:d4:bb:36:f6:79:7c:70:1a:9c:c0:ef:
         71:f4:00:22:d6:ef:42:51:3f:77:fd:2d:2c:4a:5e:fa:af:f7:
         a4:ae:17:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:15:41 2026 by rpki-client