Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08bc84cf-2340-3fac-b47e-8983712e6c26.roa
File:                     08bc84cf-2340-3fac-b47e-8983712e6c26.roa (raw, json)
Hash identifier:          /VCmBwGUoHOqPAiQnFP4QtmOOub2NfSuo90M+gyDJXY=
Subject key identifier:   C2:44:2A:0A:35:57:B9:1E:37:1B:D1:39:E0:0C:A1:0A:33:79:79:60
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A594BA5F5391F71348AB84
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08bc84cf-2340-3fac-b47e-8983712e6c26.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        2620:11a:c049::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:94:ba:5f:53:91:f7:13:48:ab:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=bb312c37-d18c-4afd-abd5-e51993da2f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:f8:ea:c4:11:c6:80:47:00:69:41:dd:f0:
                    1f:b2:e6:eb:aa:22:0b:1c:6a:8f:78:32:d0:0c:c5:
                    c6:95:2b:44:bd:95:97:08:ce:26:c9:b1:53:a1:46:
                    9f:2f:8a:c0:ee:7b:91:24:aa:54:c7:62:8e:34:5e:
                    ef:b4:13:84:8d:d9:5c:45:78:c7:37:a4:35:52:c8:
                    5f:05:dd:57:a0:ac:84:df:77:e9:3b:e1:fe:93:bc:
                    e9:66:0a:47:86:02:21:83:68:48:66:35:9c:d5:38:
                    76:62:a8:19:2e:60:ab:d1:5f:d2:5a:62:c1:e0:84:
                    a1:20:61:13:bb:e9:23:94:0c:af:77:5a:ec:4a:13:
                    e8:29:34:0d:49:d6:9f:51:6f:50:a0:b3:e0:87:01:
                    8f:48:64:a3:92:ca:b0:6a:7e:1c:2a:0b:b6:be:48:
                    b5:a8:34:d7:07:fe:cb:ad:ac:2c:73:34:e2:8b:0b:
                    60:2f:15:0f:2c:e7:e1:d5:02:00:4d:78:30:9b:b4:
                    3a:a9:8f:dc:47:3c:a9:68:6e:93:ff:7c:7e:cb:59:
                    f7:a8:76:ff:ab:7b:0d:77:e5:e7:54:2e:78:06:6a:
                    86:59:b6:8c:f4:08:84:36:78:f4:a8:57:72:89:cc:
                    18:87:50:2c:06:e3:e8:d4:13:4f:45:19:24:15:66:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:44:2A:0A:35:57:B9:1E:37:1B:D1:39:E0:0C:A1:0A:33:79:79:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08bc84cf-2340-3fac-b47e-8983712e6c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c049::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:0f:63:95:3d:40:1c:05:df:46:ca:88:13:44:4c:57:41:09:
         01:8c:9a:00:d0:e6:c6:cf:0c:62:3d:2a:2a:81:c1:98:5e:8a:
         39:04:49:23:bb:80:d4:5c:38:30:20:4a:3c:45:1a:76:15:91:
         da:f9:a1:d8:da:bf:c2:af:d8:86:84:52:08:2c:87:99:cb:91:
         11:c3:17:aa:a8:de:4a:c3:da:0c:92:25:76:ad:9a:a3:03:ed:
         e3:1b:06:f1:b4:6e:b9:2c:5c:d5:32:21:91:7f:5c:80:18:8c:
         87:48:9c:77:9c:f5:af:54:33:1c:f8:35:54:a9:bd:46:c2:db:
         2d:1a:ce:d8:96:ba:34:c2:25:83:1c:43:86:89:c7:89:0e:f3:
         42:bb:b1:57:01:3b:3f:c8:8f:00:8c:a0:88:05:9b:1c:10:3f:
         4b:ce:8b:20:64:d3:b3:38:ed:36:91:87:c3:ea:ce:47:e0:0c:
         b1:69:60:ae:91:d8:aa:88:e1:51:aa:dc:c6:c9:8e:05:71:30:
         91:68:ae:a9:6d:b0:3d:ec:be:6b:16:29:76:98:3a:76:c6:59:
         fa:cf:be:95:ef:cf:cb:e4:f9:ae:86:25:df:ea:e0:e5:aa:84:
         dd:bc:85:2d:80:20:18:21:41:22:4d:c1:a7:5c:ff:87:95:19:
         46:05:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:53:48 2026 by rpki-client