Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa
File:                     165f5246-1b48-3ea5-943a-619c03146706.roa (raw, json)
Hash identifier:          W88g73UpUPZxCiu354rBo8BauKv/2j8PwQ0x1Ge/eHY=
Subject key identifier:   FB:B4:77:7E:CD:FB:37:24:C4:69:28:52:D8:F8:5A:3B:F4:28:9A:CF
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584E1319802F08A159E520D1BC00
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     65012
IP address blocks:        2607:9bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:80:2f:08:a1:59:e5:20:d1:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=c99066c9-eced-41ca-82b7-4e1c34d563cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:40:38:7f:5c:2e:a8:3a:09:02:a1:40:3f:
                    1e:95:45:b1:21:70:74:ee:3c:56:29:16:bf:c2:6b:
                    8a:ce:1a:d2:3d:d5:1c:6f:bb:53:60:6b:a5:a9:c9:
                    44:d8:1c:8a:a1:06:cf:0c:68:b8:09:68:11:15:d7:
                    d2:93:98:c9:b6:18:17:40:7e:d7:eb:46:2c:39:58:
                    6b:e2:f6:16:fd:4e:3e:39:1e:95:a2:e6:f9:39:81:
                    8e:f9:ba:f8:3d:94:ec:27:8a:50:85:c3:02:bf:8b:
                    ff:6c:05:f3:3c:07:e4:75:55:07:d7:67:2a:01:ff:
                    83:bf:27:dd:9a:65:c9:15:7c:43:20:02:9e:53:66:
                    ca:9e:87:a2:87:5e:d5:94:50:68:41:49:de:ff:7e:
                    4e:99:5c:c5:b1:57:3e:1c:43:0b:5b:c5:cf:6f:67:
                    f8:08:32:c8:5a:6f:e6:66:e7:be:38:0e:91:a8:f6:
                    a5:44:f9:20:6a:e5:80:0a:6c:de:cb:c8:23:d3:7a:
                    52:8c:2b:c9:9d:95:3f:c4:b7:8a:ef:65:b8:b0:8f:
                    51:99:43:56:fe:81:f9:9b:93:95:00:f0:9c:c1:bc:
                    8f:02:26:d3:ff:40:8f:bf:69:7c:fe:95:fc:48:c7:
                    c9:b7:db:86:f4:16:f5:69:53:6a:fc:2d:b6:2b:b6:
                    57:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:77:7E:CD:FB:37:24:C4:69:28:52:D8:F8:5A:3B:F4:28:9A:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:b4:52:69:1f:51:79:84:07:cb:95:c5:96:8b:a5:f3:2f:
         ba:82:91:9c:53:99:65:4d:14:60:da:5f:4f:26:52:79:2f:9b:
         fd:57:74:56:94:87:02:7f:cf:57:b7:7d:e7:f5:db:af:48:b9:
         15:23:0f:82:ca:7b:6f:f8:b0:fe:4b:f8:4a:db:e8:dd:12:be:
         f3:69:36:19:c2:25:9a:54:25:15:6b:7f:e5:d5:f3:b7:c7:77:
         15:53:d9:66:bc:35:65:68:e0:9e:dc:da:85:29:1f:0e:10:b0:
         7f:2d:f1:62:61:2b:4d:a6:de:0c:d1:61:22:3c:92:e3:d9:a5:
         dc:ed:76:57:5f:c8:d5:f8:42:cf:03:99:7f:ad:52:08:ed:21:
         27:cf:ac:55:9a:ca:62:20:ef:96:10:3b:1c:b3:e2:b9:ac:17:
         d1:a3:d4:e9:a9:63:70:fc:7c:5e:57:24:09:22:50:07:d0:3a:
         61:a8:9e:07:21:d8:3d:98:11:44:3a:68:30:cd:e1:f0:1d:c0:
         d1:9f:8e:2f:fa:78:46:36:02:99:f6:ec:32:b5:e6:69:aa:02:
         51:81:06:f3:81:b8:41:f9:4b:87:6a:a5:d2:2b:32:27:fe:65:
         96:a8:c3:3b:4f:6e:3c:7a:53:f1:89:fd:30:20:ac:bd:8e:76:
         6e:f2:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 04:21:40 2026 by rpki-client