Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/353633ec-62d2-3249-a2df-1cda625ec9e9.roa
File:                     353633ec-62d2-3249-a2df-1cda625ec9e9.roa (raw, json)
Hash identifier:          opJ+lRcrzW1mTHh1CutCRn0jyXbcawqKv8gkKPgXSS4=
Subject key identifier:   A2:F1:B5:54:9F:C0:65:8A:A9:C9:2B:37:41:3F:EE:20:5B:0E:70:2B
Certificate issuer:       /CN=e9687864-e283-4f19-98f3-a437efb373e8
Certificate serial:       010D0C9F4328584DE1509B44043DCE7913A3AB80
Authority key identifier: 0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/353633ec-62d2-3249-a2df-1cda625ec9e9.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     22772
IP address blocks:        2605:8e00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:9b:44:04:3d:ce:79:13:a3:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9687864-e283-4f19-98f3-a437efb373e8
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=ada41268-32b6-42a2-b119-1f98d3387934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:e3:53:7d:f9:5d:c4:16:f4:f0:6e:23:80:
                    4f:a5:3f:c3:e2:6c:d1:c0:f3:db:28:0c:fc:c0:f7:
                    76:bb:76:78:1a:ce:ae:f6:66:cc:bd:a2:78:e4:6a:
                    a3:e8:86:33:85:9f:d0:9b:5b:81:57:98:6e:87:99:
                    6d:7b:3e:25:e8:01:eb:de:c0:b6:e5:dc:ed:80:e4:
                    94:35:ef:db:b8:89:80:60:cc:5d:58:f9:be:c5:50:
                    11:5d:ee:2f:f2:e1:74:32:a5:bf:76:2d:07:53:e4:
                    21:0a:97:40:ba:02:3f:20:d8:cc:04:01:cd:77:78:
                    1e:98:b8:94:27:e8:1e:64:ea:8f:c9:df:e6:ae:08:
                    12:54:ad:39:65:9a:cb:11:4e:ce:28:c0:8f:32:6a:
                    22:21:1f:4a:c9:b3:a9:af:47:b5:6b:6d:6e:f6:ff:
                    25:34:a7:a7:5a:bf:c6:08:b0:fa:bb:02:9f:d7:8f:
                    2f:6d:ff:47:c1:c7:b6:11:57:65:94:b0:c0:f4:e4:
                    9f:44:c5:05:5d:e8:fc:3e:d2:c4:94:10:41:d5:bc:
                    8d:67:b1:ee:e9:56:9e:98:f6:37:be:b3:f9:67:1e:
                    3d:3d:85:29:73:5e:ae:d6:86:39:94:1c:43:9f:0d:
                    0b:6f:23:bd:82:09:0a:ec:42:a0:19:3d:35:b4:04:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F1:B5:54:9F:C0:65:8A:A9:C9:2B:37:41:3F:EE:20:5B:0E:70:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/353633ec-62d2-3249-a2df-1cda625ec9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl

            X509v3 Authority Key Identifier:
                keyid:0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:55:73:22:24:0b:07:f7:d9:bb:cb:24:ef:8b:04:69:ce:62:
         20:df:d3:83:51:7c:a1:52:e6:d3:fa:15:09:0f:9e:9f:25:51:
         b4:db:74:20:7a:89:fb:9f:04:6e:0e:ab:f3:9f:e3:c8:cf:e8:
         cd:a4:35:81:9a:84:cf:fe:d4:36:20:e4:5b:39:44:73:51:de:
         25:74:ba:a4:3e:d2:d4:ab:a8:3f:d5:01:9a:ff:fc:06:b8:a2:
         49:47:d0:f1:d2:b3:57:75:73:1c:12:9c:0b:ee:f0:35:15:8c:
         9d:32:f1:d2:8e:38:36:d7:50:f8:c0:45:a7:ef:06:26:3f:b1:
         7d:d6:37:18:3f:4b:a0:0b:6c:24:54:43:97:93:95:03:50:8c:
         c4:2e:dc:48:55:23:aa:68:77:47:8d:eb:eb:dc:e8:a5:81:3b:
         0e:9c:e5:5d:04:fa:66:e6:cd:86:ef:6a:48:10:5a:9a:50:cc:
         33:69:dc:fc:55:cf:c3:53:62:f5:9a:c2:0e:c7:f7:2a:d6:22:
         30:cf:18:84:0a:5e:88:0f:66:ff:16:d7:37:a8:de:ec:b8:74:
         02:eb:79:99:2f:df:f5:49:7c:f0:e3:92:8b:02:72:e4:d2:33:
         2c:59:5e:fb:33:1f:eb:29:4b:6b:67:17:30:96:0c:e7:46:4c:
         c5:14:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 05:43:58 2026 by rpki-client