Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3e7926ea-f50a-3705-993d-faaa5120b1bd.roa
File:                     3e7926ea-f50a-3705-993d-faaa5120b1bd.roa (raw, json)
Hash identifier:          koViEbYuGBAiHu+kCHRrpHIxyH275g2id5JB0NpoOgE=
Subject key identifier:   56:98:D2:E9:2A:DF:6F:BC:56:E3:6D:02:63:9F:16:F5:98:64:0D:8A
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59548F60454212485E940
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3e7926ea-f50a-3705-993d-faaa5120b1bd.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        2620:11a:c018::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:95:48:f6:04:54:21:24:85:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=9f7c8ab5-c485-4f33-a8a8-8340f5d580ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:9e:3c:69:d0:db:80:4b:a3:63:56:85:2c:
                    f5:a4:31:06:25:09:af:30:23:00:6b:8a:e8:db:07:
                    7f:88:9d:5c:8a:1d:1c:f3:36:4d:98:73:bd:f8:12:
                    63:75:fb:39:33:ad:c9:0e:b1:6a:eb:c4:58:33:3b:
                    9a:a0:9b:90:40:ce:0c:59:6e:20:c9:d8:22:71:af:
                    ce:48:48:49:29:ae:71:33:b7:8a:42:ed:b3:ea:a7:
                    17:c2:42:e1:4e:f8:96:92:16:fa:53:c8:3e:af:e6:
                    8e:fb:7a:b8:df:f3:98:84:50:27:82:37:b2:aa:f5:
                    da:53:61:99:5f:8d:66:ce:1a:90:1c:1f:fb:33:e3:
                    a5:87:15:b5:7e:b1:b1:cb:41:5e:ed:7d:f9:f6:ca:
                    7a:db:d7:63:67:3f:08:fc:69:89:01:6a:b8:29:5d:
                    ed:b7:bf:fe:05:b4:b3:89:4f:ce:8c:1c:41:7d:59:
                    df:1a:ee:93:bf:69:4a:0d:97:af:07:24:08:95:bc:
                    32:47:1b:d9:f3:a9:18:f8:01:4d:ff:56:82:69:7f:
                    62:ee:e7:07:c4:91:c5:d2:b8:30:60:21:92:d6:6f:
                    0a:7b:30:60:f2:3b:6c:39:b6:f3:95:e7:d9:b3:3d:
                    f5:4a:0e:28:8e:bf:4b:1d:b9:27:41:f3:fe:f2:44:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:98:D2:E9:2A:DF:6F:BC:56:E3:6D:02:63:9F:16:F5:98:64:0D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3e7926ea-f50a-3705-993d-faaa5120b1bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c018::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:77:aa:ea:70:78:2d:a3:24:fe:52:83:65:1d:32:bf:4c:66:
         3b:ff:ae:e0:78:a8:c9:b2:98:13:11:ff:88:9f:e5:13:d2:ce:
         9b:38:6f:7c:73:66:2d:ef:3d:65:aa:f6:b2:c0:07:38:56:4d:
         c1:d7:23:9e:ac:3d:2f:c1:cd:9e:b7:6d:df:90:c1:0a:97:a3:
         33:9b:35:c6:a7:8f:21:cd:2b:ad:71:1f:8e:e7:f2:6f:7b:20:
         60:c8:0a:1a:7b:22:88:23:ba:8d:ad:a2:c7:4c:c6:30:96:6d:
         df:5d:cd:d4:5c:b1:22:c0:b0:53:2d:b3:8a:21:32:f2:82:89:
         a9:65:97:b7:74:5c:9b:f4:33:6d:82:00:d9:f3:3b:b4:65:a2:
         0c:50:0c:71:39:9c:dc:93:3a:c9:92:56:91:15:36:b0:ae:79:
         5b:71:2c:41:b0:1a:a2:c8:6a:fc:33:f9:34:97:ec:34:4d:e4:
         0a:d4:b1:0d:91:25:b4:25:e8:94:7b:43:95:9d:e7:60:52:64:
         d4:50:75:04:08:d9:f3:7c:7d:54:9e:91:4c:4f:2d:b2:9c:61:
         7e:f0:93:cd:66:14:42:1a:48:53:c2:98:15:31:18:f2:6d:bf:
         73:69:af:f9:0a:25:5c:2f:3b:33:59:7e:be:8b:25:b9:e5:09:
         77:e8:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:56:19 2026 by rpki-client