Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa
File:                     a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa (raw, json)
Hash identifier:          I0y5rtgs2HOIl3xtNLtUZMbyrZFPBP9BZiDdw+UBHqs=
Subject key identifier:   E7:66:24:D1:E1:3D:1D:B2:EE:71:F8:A0:76:56:AB:DF:B6:37:33:52
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE1508CC323800147D64B6520
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1402:1c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:8c:c3:23:80:01:47:d6:4b:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=20dea950-57b6-497e-8503-5d05ccb5dd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:99:d8:8e:f4:1e:e2:c3:38:99:2a:79:79:
                    6f:4f:f3:7e:bb:e9:1b:b0:a7:a0:f2:40:22:6a:3c:
                    df:5d:fb:1c:76:6b:86:b7:30:e1:de:9d:7f:6a:c8:
                    95:1f:2a:aa:e9:46:71:94:00:01:c7:12:43:3a:b2:
                    88:7b:8c:c0:bd:ce:10:a7:1c:f1:75:47:68:cf:48:
                    8f:0a:61:a1:c4:c4:b8:cb:e8:9d:9a:be:c1:1e:b3:
                    26:fa:2b:14:ef:60:9f:22:28:41:19:76:d7:55:1f:
                    a1:a9:c2:ff:1d:d1:74:07:a1:7b:cf:62:95:4a:ec:
                    9e:f6:af:9a:99:7e:dd:be:50:9a:6e:91:1d:56:3c:
                    45:3c:44:1a:a0:bd:9f:2d:53:a3:4e:52:1e:7c:40:
                    c2:f6:20:77:13:1a:2c:1e:eb:24:a5:a5:ce:48:9a:
                    be:bf:c5:e3:b4:57:bb:8b:f7:72:90:6a:77:b4:b6:
                    b4:b8:9d:6f:64:f3:0d:03:3a:1c:f5:67:c2:93:e7:
                    29:a4:dd:df:a2:d2:09:ed:22:ee:4e:d7:42:56:cd:
                    fe:dd:82:74:4f:5f:de:c2:58:1d:05:33:c5:3b:4b:
                    c4:07:63:d1:08:2a:b4:44:cb:0e:f8:9c:86:f6:90:
                    96:7e:f0:02:e9:34:ca:f7:a6:8e:4c:cf:71:7f:26:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:66:24:D1:E1:3D:1D:B2:EE:71:F8:A0:76:56:AB:DF:B6:37:33:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3910774-06d8-3cc4-b3c4-976fa93bf63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:1c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:29:60:a9:d8:3e:69:83:9e:a7:98:6c:de:c2:cd:eb:4f:
         b7:c7:44:69:7b:70:16:62:de:de:b3:63:66:bd:00:a3:cc:e4:
         38:ae:02:78:27:3a:04:33:20:30:6f:d2:87:92:54:32:64:22:
         4b:c1:35:25:e9:1b:8a:df:5f:73:51:4d:63:38:dc:50:e2:4e:
         6c:49:6a:e5:bd:95:cd:80:c8:5d:a1:a1:a0:91:eb:57:c0:95:
         03:94:29:c4:7f:be:3c:1e:03:2f:4d:78:6c:ba:6f:d3:8a:4d:
         79:55:54:91:95:76:83:2a:82:d9:84:3f:69:a2:4c:5b:c7:2d:
         68:14:3f:8b:82:23:54:1e:fa:30:07:ce:ee:7c:76:c0:29:60:
         e2:20:b7:7f:93:cb:97:2d:80:b3:1d:e4:07:c8:a5:a1:22:fa:
         98:6b:46:1f:19:69:c8:72:2d:06:db:da:d5:77:7e:e9:56:a6:
         de:21:9b:e3:0c:31:ec:0b:19:45:1f:09:b0:94:b8:e3:e3:75:
         67:9c:11:d0:09:77:9d:db:9c:e5:0f:81:02:cd:a0:3c:20:d1:
         d1:e3:3f:0c:f1:75:16:7c:e9:96:cf:aa:11:b6:21:b3:a6:ff:
         68:3a:48:c0:86:42:95:de:f6:78:b2:2a:ab:bd:c4:27:14:ea:
         ad:6a:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:54:14 2026 by rpki-client