Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa
File:                     87ccbfe3-8659-3f36-ad24-7412da6698c2.roa (raw, json)
Hash identifier:          vqvB+pbO3Zi+fla78NCsQrj512Im5cbOQ24Vc0Tr8Zs=
Subject key identifier:   1F:6B:DC:B1:DB:5F:8B:4A:38:5A:81:EF:B4:20:AE:9A:DE:00:5C:08
Certificate issuer:       /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
Certificate serial:       010D0C9F4328584DE1507333FCF06A96C09ADEC0
Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     10866
IP address blocks:        2620:0:5300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:73:33:fc:f0:6a:96:c0:9a:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=151dc19d-b5de-4a69-92b5-75e03c8455e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:79:54:ed:c8:a6:df:f3:1f:78:04:6a:60:
                    5d:e3:45:bf:13:74:f8:c9:b2:5a:9a:ee:1e:34:f6:
                    2a:e4:3a:77:e7:7b:91:58:95:9e:8f:ce:cc:34:ae:
                    63:16:28:86:ac:c8:8d:08:9b:ad:5b:c7:ca:5e:62:
                    a9:bb:cc:49:80:64:34:d9:5f:7d:37:07:b8:c2:72:
                    96:65:1e:e3:5d:b4:35:1b:52:37:2e:aa:1c:39:01:
                    d4:81:2d:3c:f7:3b:ba:90:32:77:2f:c6:5b:8d:2f:
                    a7:34:8d:b5:fb:72:47:47:80:79:75:1c:f3:8f:c1:
                    4f:dc:c8:3b:81:ce:f6:fc:bf:35:dc:24:5b:15:3c:
                    da:00:5a:b0:a8:5a:3b:e1:4f:5b:56:a9:74:68:05:
                    6d:66:5c:bb:28:ba:46:7b:e8:4c:37:2a:61:83:1c:
                    57:5c:22:0b:38:82:25:46:6e:dc:5b:85:76:3b:e8:
                    25:aa:d2:72:ee:d8:a6:c3:e6:fa:b6:b4:2f:87:f3:
                    0d:29:b7:1d:4e:e9:a1:42:df:17:d8:56:25:8d:57:
                    d5:e4:fc:29:76:ec:8d:26:5b:f1:c0:5a:73:c4:79:
                    cd:da:4d:d4:ef:5d:70:30:1e:2b:f6:92:31:94:79:
                    1d:df:ce:27:f6:50:47:59:82:d0:95:0a:84:fd:66:
                    e3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:DC:B1:DB:5F:8B:4A:38:5A:81:EF:B4:20:AE:9A:DE:00:5C:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl

            X509v3 Authority Key Identifier:
                keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:90:20:16:7a:2f:b7:b5:81:8b:a5:b4:fd:6e:98:60:4c:
         79:c0:2c:82:bf:88:ea:69:d5:95:36:ae:32:44:03:04:be:cb:
         b1:07:f8:ba:cc:50:06:4a:92:d6:60:c9:db:06:7b:44:1d:9c:
         7f:1e:3a:d6:37:08:c4:c3:03:3e:73:64:e7:ee:cd:a6:c5:e8:
         83:79:38:53:6c:e2:99:91:0a:af:1d:2d:34:94:e7:e3:a2:ec:
         42:b1:81:f2:2b:f4:e9:20:14:8e:e9:96:08:b0:db:dc:65:99:
         5f:cb:c3:1e:b7:33:72:8d:dd:92:7c:af:f8:fd:e4:67:6d:40:
         e1:7a:c3:6d:90:24:79:f1:94:46:1c:de:81:15:a9:4f:77:d7:
         9a:5f:82:87:35:e7:1b:ae:37:dd:dc:35:99:43:33:e4:e6:1f:
         46:6b:b2:d3:93:f6:b2:01:ed:cc:5d:8d:e7:4a:69:66:14:38:
         35:11:fd:b6:92:7f:82:42:80:14:e2:e5:f8:da:d6:db:12:cf:
         29:52:9d:2d:69:67:1b:d4:ea:81:79:ef:47:29:da:81:58:66:
         b0:a9:77:3a:4f:fe:88:7c:5b:cf:f0:e1:60:9c:bc:e2:32:d0:
         9d:4b:85:09:ec:2d:46:ad:95:68:19:1a:a8:41:79:a3:fe:25:
         d8:41:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 23:24:35 2026 by rpki-client