Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e40ad7d-8cd5-3d4b-8cba-7844a5fe9230.roa
File:                     2e40ad7d-8cd5-3d4b-8cba-7844a5fe9230.roa (raw, json)
Hash identifier:          GGzrzBonkBstoIUgYK1gSdM50zOPYOYxa72ol5wz+CQ=
Subject key identifier:   4B:DB:BF:B3:5F:C7:10:33:9C:68:AB:2B:91:71:20:9C:54:7D:81:42
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE9B0B65320BC2C636631D000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e40ad7d-8cd5-3d4b-8cba-7844a5fe9230.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1488:8041::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:b6:53:20:bc:2c:63:66:31:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=b49eed71-33c7-415d-bc7c-4978e6e07e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:3f:fd:bc:3d:ec:25:d8:9a:a0:e4:e4:fe:
                    3e:ae:f0:0d:51:dc:f3:df:01:2a:ad:11:fe:cb:2e:
                    f9:12:98:ea:69:86:c1:9d:34:21:74:57:c8:c8:6d:
                    8b:8e:77:ba:f1:93:99:84:1f:ab:6a:a8:79:c1:cc:
                    ba:25:0b:8b:ff:9c:8e:f8:d7:2f:ac:66:7a:ac:d1:
                    4b:85:c6:c5:be:07:74:58:7e:37:42:f6:53:47:5d:
                    21:32:b2:af:46:78:3a:6a:8c:c9:b1:10:d9:92:ee:
                    09:97:ab:54:11:9f:be:56:d9:ca:93:21:ce:50:22:
                    56:44:a6:c6:f3:31:38:2d:29:8c:15:7f:e9:03:45:
                    d3:4f:1e:16:52:cd:3a:b4:99:24:7f:fd:4e:71:21:
                    cf:3b:e2:70:77:15:9f:f7:b9:a1:ba:15:7f:58:15:
                    36:54:b2:24:70:f8:bb:9e:78:80:d7:c3:0c:cf:a8:
                    89:69:2f:2f:bf:09:c9:af:be:8c:f7:f0:ad:37:e0:
                    f5:6e:a5:ef:ab:5e:aa:9a:c1:10:16:94:71:4d:27:
                    a0:db:d0:77:25:84:76:56:f5:3c:74:cd:b1:64:a0:
                    b8:44:f1:ee:18:4c:ae:0e:50:d1:70:ff:28:ec:dd:
                    b3:0c:6e:d5:83:3a:1d:74:c9:03:f4:35:f5:92:18:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:BF:B3:5F:C7:10:33:9C:68:AB:2B:91:71:20:9C:54:7D:81:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e40ad7d-8cd5-3d4b-8cba-7844a5fe9230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:8041::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:51:95:d1:a8:4a:af:96:88:4b:5d:4c:2e:00:fd:ef:7b:54:
         fc:c3:23:2c:e0:a3:47:12:3c:c2:10:82:19:a1:74:03:c5:8a:
         c9:d4:5c:a4:c7:38:7d:15:b4:02:35:1c:af:1a:c1:76:59:02:
         63:43:d7:38:5c:55:bf:37:cb:70:20:6f:e4:d6:bd:b9:98:39:
         ea:ce:f1:c2:31:9f:86:b2:da:7f:e0:ee:6c:df:ea:50:df:a6:
         aa:37:58:62:fc:5c:a8:69:f1:d6:df:aa:ec:c6:28:11:8a:33:
         82:06:e9:33:ec:8a:b4:be:c2:20:e4:90:4f:22:80:de:a0:ba:
         59:38:6a:de:88:97:54:7a:f1:27:9b:84:2c:12:5d:21:e4:cb:
         74:f0:a0:1c:29:a0:57:40:b2:12:58:ea:d5:83:4d:70:11:0a:
         91:34:2d:19:18:2e:b0:b9:d2:4a:da:75:30:55:4a:ce:e5:db:
         5c:bb:2a:9e:bb:f0:cd:24:8d:d4:35:c3:5c:5c:75:88:72:7a:
         d1:a1:ef:4c:52:9a:bd:8b:3d:a0:6e:ad:c4:87:50:a4:e2:cb:
         f3:e2:20:78:6f:4d:c3:e7:d9:c5:c9:49:1d:13:b8:16:43:11:
         0b:63:e8:c9:e2:ab:1c:39:4c:86:c8:da:28:76:5c:ee:5e:04:
         39:ee:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:40:30 2026 by rpki-client