Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa
File:                     39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa (raw, json)
Hash identifier:          XpnfbUCIEN9xRzEvqcdZRXIMQA95Q896IIJeV3sVKSg=
Subject key identifier:   1C:15:D2:D5:E0:3D:49:2D:27:A8:11:63:80:17:60:CD:A9:75:E7:BB
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584E131982284568F590A29D1380
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     65020
IP address blocks:        2607:9bc0:1010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:82:28:45:68:f5:90:a2:9d:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=1a98e4b8-8d1b-423e-af4c-dafb4768dc0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:34:db:e3:3a:8f:76:67:c8:1d:3e:2a:93:
                    8a:d3:e6:63:ba:05:b9:04:aa:cb:43:be:e7:3d:75:
                    e3:7a:d1:78:9f:c9:38:cd:25:ef:cd:28:b7:ac:e5:
                    66:b0:1c:4d:54:c9:3c:b6:65:c5:20:8a:e6:43:a6:
                    c6:5c:bd:5b:c4:1c:18:24:0d:fe:97:45:f9:fc:bd:
                    77:ab:5f:c9:c4:73:4e:b2:25:82:8a:b6:93:c3:b2:
                    9f:96:43:e6:d9:3d:5e:d7:1e:ac:6f:6a:cb:54:25:
                    18:33:8a:06:ca:d8:28:2c:83:0c:8f:0a:09:4f:0b:
                    a1:bd:59:34:d1:82:c3:be:57:28:3b:67:0a:1b:9d:
                    0a:97:a7:83:6f:44:cb:49:38:a0:ee:bd:6a:0a:df:
                    c5:94:5a:1c:c6:82:25:ea:e0:c7:bd:07:49:ef:83:
                    f2:37:fb:67:5a:1e:c5:ab:32:bb:34:ed:a4:7b:b1:
                    3a:d0:4e:44:ee:ab:1c:aa:02:b4:f8:95:c6:16:b4:
                    77:b8:8d:a3:e3:c2:c9:27:56:08:2a:9b:04:04:41:
                    08:f9:22:ea:16:9a:33:94:4a:51:d9:53:90:6f:a6:
                    4d:90:5f:bf:87:46:7e:99:38:39:59:56:08:fe:90:
                    74:9c:4e:43:4c:a4:6a:fa:0e:51:ec:5a:90:53:7c:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:15:D2:D5:E0:3D:49:2D:27:A8:11:63:80:17:60:CD:A9:75:E7:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e4:08:85:8a:42:10:f8:ec:4a:fc:b2:80:c7:bb:cd:17:1f:
         58:64:65:c4:2c:ca:b8:15:b2:8b:b8:31:f1:fc:43:18:c2:92:
         f0:f4:66:7f:1a:ca:51:3b:df:ab:fe:be:6d:df:03:2a:d2:68:
         46:ec:b3:e8:c0:f9:4e:e0:5e:4d:b3:46:a0:1d:19:86:de:4f:
         a4:4a:7b:c3:e4:2d:8c:91:85:90:aa:fe:68:b2:8b:90:3b:38:
         9f:76:1f:d4:ce:0c:47:c7:42:a9:e9:41:23:df:a5:4b:7d:e1:
         58:c8:44:cf:d4:6a:9e:a9:fd:1a:4d:17:1a:a6:f6:92:a6:b0:
         33:50:e5:cd:16:25:2f:3f:0c:aa:ee:81:34:f0:d6:20:2b:70:
         c8:87:c5:6a:ad:fc:f6:09:a6:a3:95:4c:b7:cc:21:b0:a5:0f:
         33:a2:98:72:e9:ce:f8:e5:87:04:3f:f7:fe:bf:f8:cd:02:73:
         b5:68:b4:b4:ea:08:46:f9:34:f8:1b:c3:68:5e:dd:55:20:2f:
         43:7a:92:fd:1e:8c:d4:c0:92:94:19:1d:1a:db:6c:b7:47:6d:
         8a:1b:18:ad:49:34:50:02:32:7c:73:bf:c6:27:73:2b:5c:8d:
         5e:f3:49:9a:91:00:37:13:9f:6e:d7:21:93:d7:4b:85:ad:64:
         7b:af:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 07:12:19 2026 by rpki-client