Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f3af929a-e159-397a-bd25-ba1d31de60ea.roa
File:                     f3af929a-e159-397a-bd25-ba1d31de60ea.roa (raw, json)
Hash identifier:          Phem4AHjHaWSMK2b2XRxODzdm9ZU5EPKBAcJJevFSio=
Subject key identifier:   1E:A3:09:33:D2:B1:05:27:68:6B:DA:7B:FE:71:FE:F9:B0:B4:77:9B
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584DE9B0803D544FDCD1ECE55C80
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f3af929a-e159-397a-bd25-ba1d31de60ea.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        2620:1b2:8b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:80:3d:54:4f:dc:d1:ec:e5:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=fa2978c6-d7b3-458f-a63e-f67ab917ceb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:b6:56:46:26:53:db:24:79:60:71:4b:ea:
                    88:0f:90:be:e7:3f:47:e3:13:ff:45:32:05:f7:29:
                    a6:47:41:a9:88:6f:21:b7:93:0e:d8:a0:18:ae:3e:
                    c0:6c:e1:8c:54:73:b5:a1:8a:35:58:6a:7f:01:bd:
                    bf:10:21:37:73:83:95:2b:fd:a8:0f:71:b6:e4:0f:
                    9a:5d:a1:da:34:00:f7:f7:f4:be:ee:f3:b2:e0:bf:
                    d2:4d:b2:97:c2:41:a9:55:c0:2b:07:48:cb:55:dc:
                    26:0a:78:29:e2:9f:a6:21:a7:30:8f:19:fe:c8:86:
                    57:3b:77:64:10:83:0d:8b:6e:79:38:f1:39:8b:cc:
                    10:13:71:39:6a:47:92:b1:38:3f:be:44:f0:32:28:
                    55:bd:ff:26:aa:6b:84:5b:44:60:7b:99:25:3e:32:
                    c0:44:18:e6:18:10:4b:0e:05:37:10:6f:f7:4b:0c:
                    57:0c:c8:50:4a:ad:db:d2:01:c7:0a:77:26:12:30:
                    5c:13:b3:f2:38:30:7d:45:30:e5:9f:21:c7:b8:77:
                    1d:06:c2:5b:06:c9:ad:68:47:30:16:41:b8:19:c0:
                    f6:7d:a1:ab:8d:c2:bf:e4:08:80:30:66:f8:ac:0a:
                    ae:60:b6:ac:79:c2:bd:b2:23:e2:28:ab:d4:a5:37:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A3:09:33:D2:B1:05:27:68:6B:DA:7B:FE:71:FE:F9:B0:B4:77:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f3af929a-e159-397a-bd25-ba1d31de60ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:8b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:66:2c:ac:c5:36:f0:0a:33:38:56:f5:7f:31:3f:d2:0e:fe:
         65:f2:1e:03:0e:33:50:14:f6:f9:93:90:43:24:20:26:70:90:
         6f:e7:f8:a2:89:f0:89:da:92:52:4d:55:f2:1e:4c:f0:22:76:
         e3:79:27:85:66:0f:f3:15:7c:49:2d:e9:e9:4f:8c:69:aa:98:
         0e:50:47:82:f5:af:0d:db:ac:42:70:4a:fb:d7:eb:17:98:3f:
         03:76:4b:38:00:d0:0d:42:12:d0:a4:4a:fb:11:4a:fa:07:de:
         ee:5d:d5:db:1e:b6:0e:f2:fd:47:db:46:a2:15:fc:c5:8f:c4:
         c1:4b:ac:88:75:8f:3e:bf:20:ea:56:ad:bb:bc:59:82:a5:81:
         40:f7:99:a8:3d:53:58:d8:10:a1:a7:b3:b4:bc:fe:76:3d:8f:
         ab:f3:2c:f4:b5:09:6f:3a:f3:e3:59:55:00:b0:3d:0e:5d:c5:
         84:fe:01:7e:11:cd:5e:70:ac:43:c9:50:2e:c0:a3:e6:38:c2:
         46:3f:82:c0:ab:6e:7c:7b:6a:d1:fe:09:94:42:30:c4:ab:53:
         70:59:f1:57:ae:92:e1:5d:f9:ec:57:54:5e:74:50:cd:fc:4f:
         5c:d4:94:78:67:d7:4e:25:89:b7:84:08:d6:24:57:9b:b3:f7:
         59:be:36:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:37:40 2026 by rpki-client