Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ed94464-6ffc-349f-ba5d-b3e058101d1f.roa
File:                     4ed94464-6ffc-349f-ba5d-b3e058101d1f.roa (raw, json)
Hash identifier:          1YnM1SBfC8YXgct9LWl1USiCD/PPFV/3wOAen0oT4Cg=
Subject key identifier:   48:1E:12:01:2A:B5:40:11:53:EE:39:C7:CD:5D:4D:DB:8A:7B:87:91
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD625BDC824DD19C3815551A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ed94464-6ffc-349f-ba5d-b3e058101d1f.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:140b:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:bd:c8:24:dd:19:c3:81:55:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=8c3778a9-46ab-4f1e-bde5-147f0e130f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:62:c3:be:36:7e:7d:70:3b:0d:1c:ad:84:
                    9b:c0:59:02:7e:49:ad:2a:64:c9:43:e2:d8:18:a6:
                    ab:ed:d2:b8:48:93:1a:d0:ea:92:2b:96:0c:9e:00:
                    11:b7:da:57:55:a8:c4:2d:42:66:2f:de:75:c4:5a:
                    63:33:66:c4:a7:5e:8f:39:af:a8:40:48:81:d3:a9:
                    74:33:4d:7c:d3:97:9b:df:9b:21:9f:09:fb:a4:60:
                    b7:be:65:a7:15:8b:a3:f7:d1:62:9c:72:25:0a:d9:
                    12:a1:f9:6a:16:14:1e:e9:1e:42:da:bc:a7:9f:8f:
                    f8:6a:cc:12:fc:58:07:bb:63:25:2c:87:18:f7:43:
                    dc:a2:d6:33:b5:47:fe:5c:41:e9:23:d7:88:5b:ed:
                    aa:70:3a:31:59:51:8f:6f:57:e8:e7:ba:68:18:f6:
                    47:62:cb:3f:25:9d:0e:33:68:46:64:bf:4f:2f:46:
                    74:75:f8:1d:79:4a:de:d9:86:a7:2c:68:15:03:79:
                    2d:9f:cd:9f:37:fd:13:f5:f2:62:4c:73:06:c0:9f:
                    bb:c7:b8:86:41:c0:e7:05:bf:20:2d:91:b2:e7:74:
                    9e:9e:ed:e2:e8:c4:80:e5:ef:23:b7:70:3c:ab:ad:
                    39:72:a6:94:fc:73:5d:8b:1a:b9:41:c9:7a:2d:56:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1E:12:01:2A:B5:40:11:53:EE:39:C7:CD:5D:4D:DB:8A:7B:87:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ed94464-6ffc-349f-ba5d-b3e058101d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:3a:21:63:2b:c0:14:24:29:70:9d:36:7b:7c:5a:65:7b:09:
         a5:7f:76:3c:36:e1:ac:e1:17:00:06:6c:5b:58:9b:8b:39:52:
         98:cf:09:46:14:24:92:ab:8c:46:c1:c7:5d:79:08:8e:15:d0:
         4a:0d:52:ef:d6:71:11:e5:47:0a:05:01:eb:de:c0:68:c1:ea:
         2a:6b:db:08:9e:e4:9c:4e:62:9e:ea:ed:6e:1c:8d:ac:d6:76:
         cf:14:de:9f:5a:f2:6f:70:6f:a7:73:72:86:d8:e8:c8:73:3a:
         91:ae:27:90:77:ab:6d:23:14:d9:55:6b:6f:14:71:13:1c:ec:
         69:f9:8b:a8:2c:11:59:96:fc:7a:bc:f9:d8:a5:00:8b:30:38:
         b9:29:f3:f4:3a:15:bc:bd:ca:3e:70:89:7c:a1:cc:59:51:fc:
         26:47:c4:66:e0:bd:db:21:f6:cb:fd:8d:19:64:a1:81:70:99:
         36:6a:16:7e:52:f9:bc:b0:90:69:f8:9e:d9:59:10:f2:60:36:
         24:48:e7:63:e8:12:ee:87:0e:dd:94:16:b6:f2:f5:f0:ac:0a:
         78:17:b2:39:52:b5:20:2b:dd:f8:be:a9:b1:9a:a3:da:40:22:
         71:55:34:b4:e4:94:76:b5:e9:ae:94:16:82:35:ba:90:5a:c1:
         70:ac:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:43:20 2026 by rpki-client