Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa
File:                     41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa (raw, json)
Hash identifier:          JFRkUvbVHlJNcuBgDYPZHGcuvlzIJTnDlPgV5O9EsH0=
Subject key identifier:   FB:DE:59:96:0D:64:92:BE:E8:5C:A5:52:89:A8:F7:90:43:3B:2E:66
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584DDBBB0DCA0A2EBEFDB9072200
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     211977
IP address blocks:        2607:eb40:7777::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:0d:ca:0a:2e:be:fd:b9:07:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=a826dd9e-b784-4ebc-a4b8-e1cd4ddcd111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:3c:89:8d:19:a0:9b:23:87:a7:db:8d:b4:
                    57:a3:6f:a2:20:bb:ab:d3:a4:7e:7f:fc:cd:4d:fd:
                    39:12:d9:f0:0c:34:7e:70:98:49:5f:f2:af:4c:aa:
                    2f:45:66:1d:8c:e2:59:3e:f8:aa:a0:37:8f:d3:20:
                    45:a3:0e:b4:54:cc:20:60:f9:21:be:9b:55:e1:b0:
                    7c:4c:a2:8c:34:8f:a3:1c:58:64:e6:95:3f:32:3a:
                    4a:e6:1a:8a:75:f7:2e:4e:cc:05:c7:5c:85:a9:1f:
                    d1:6e:3d:ee:df:a6:5e:8c:92:78:a3:3e:41:23:5e:
                    bf:58:d7:18:6f:8e:4d:7b:89:fc:c5:ef:27:a7:e8:
                    da:67:71:96:d2:1f:7b:e6:37:32:07:db:6f:7f:33:
                    f2:45:4d:64:de:a0:39:07:4d:ad:2e:df:9b:1f:de:
                    6e:ae:9d:d3:4a:68:5a:41:a5:a1:51:69:4f:56:d1:
                    52:75:b4:93:78:ff:f9:3d:60:ad:f3:0c:a5:15:40:
                    fe:ef:ff:c2:79:d2:57:fd:b4:3b:e1:4d:a6:3b:0c:
                    36:01:f9:1e:0a:31:8d:76:67:43:83:37:ba:9e:3d:
                    2d:d6:ff:98:ac:04:3c:b5:fa:c5:9f:2f:7c:41:4f:
                    19:1b:b6:68:d0:9a:41:b0:3c:0c:31:7f:88:87:4b:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:59:96:0D:64:92:BE:E8:5C:A5:52:89:A8:F7:90:43:3B:2E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:7777::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:dd:86:8d:22:20:b9:86:84:e9:f0:c0:bb:02:0a:f7:f8:16:
         0c:16:4f:b0:a2:ae:05:65:e4:17:46:02:9b:9f:8b:51:29:ea:
         95:d4:fa:c8:32:52:7b:6e:0b:c8:32:99:7d:f3:e3:f2:1d:a2:
         a9:ff:cc:1d:b8:f8:9d:18:f1:41:cf:f9:4d:4d:9b:63:73:92:
         76:91:a8:31:a5:88:46:07:6e:db:83:38:16:99:00:a8:a5:01:
         75:d6:5f:9b:9d:a9:4f:c4:95:41:77:71:ae:71:41:c8:b0:9c:
         c6:9d:6d:af:24:f6:6b:9d:fa:ad:52:7d:15:9b:75:97:29:0f:
         ca:3e:d9:a5:a4:12:63:9d:12:9a:d7:59:6f:ac:3f:4a:a1:44:
         c3:36:74:06:ce:93:b3:83:7c:45:69:4d:14:27:5e:38:ed:77:
         20:94:f4:6b:3d:6e:a6:de:db:5c:63:25:a5:da:b0:e6:af:54:
         32:57:dd:be:b0:c6:68:25:3a:a3:e2:24:5d:ae:23:8c:e9:e5:
         25:b9:d1:3e:89:61:2b:f1:5f:6a:fb:5f:3f:67:4b:b2:1a:43:
         5b:5e:c7:93:d8:eb:3d:cb:90:c3:64:2b:e2:6a:38:26:2f:2b:
         f9:c4:0b:f5:1a:9b:d7:0d:4b:12:42:77:2d:7b:84:4e:1b:29:
         a7:00:77:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:06:09 2026 by rpki-client