Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0a92faa-4c74-37fe-b70d-0b3ec5ac3650.roa
File:                     e0a92faa-4c74-37fe-b70d-0b3ec5ac3650.roa (raw, json)
Hash identifier:          7n/JOUNSP64u5TXJf+MLVuYmxYtPMN7ijthdSDA6U9s=
Subject key identifier:   33:F8:F7:B3:94:DA:09:FA:51:33:A2:0E:CC:59:50:B9:44:B9:14:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE9B08B8264F5CC3D98950400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0a92faa-4c74-37fe-b70d-0b3ec5ac3650.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1488:6280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:8b:82:64:f5:cc:3d:98:95:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=ea1557b6-39b8-4408-93cc-6ed849eaba68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:3e:22:70:5a:a3:d1:6c:96:2f:bc:22:ff:
                    f9:43:56:c1:f0:ab:0f:fd:98:03:7d:ba:4a:0c:76:
                    2e:f7:3d:46:6f:91:22:9e:ad:78:4b:b6:a0:cd:0f:
                    bb:24:fd:a7:7e:16:e4:7a:57:6f:0c:2e:f9:3d:e0:
                    88:75:56:18:40:39:50:b3:ba:23:e0:db:4e:12:3c:
                    a3:7f:ca:45:26:c9:7c:e6:a1:19:d7:e3:d1:f9:ac:
                    8f:91:78:54:b9:b3:4a:bb:a3:dc:34:b8:71:bf:ed:
                    27:2d:22:ac:93:e9:ae:f7:aa:7f:3b:5c:1d:d3:b9:
                    52:5a:6b:24:0b:26:93:b6:80:61:56:0d:d5:b0:21:
                    a1:fc:91:45:c3:a4:eb:b1:ab:d6:19:d7:aa:bb:53:
                    69:dc:c1:86:8c:0c:f2:f0:b4:32:a3:48:43:2e:f4:
                    09:71:44:a9:0a:d3:90:ee:dd:04:b3:99:01:93:d2:
                    06:fd:df:b4:0e:64:79:f4:28:69:b5:0f:d0:1d:5c:
                    9c:b7:fb:bb:db:94:5c:ce:44:6a:39:8f:cf:2b:c2:
                    03:85:72:19:c4:47:79:4c:f5:ab:ea:88:7a:67:08:
                    49:1c:59:6e:32:58:42:e4:fa:6a:83:ee:44:81:b3:
                    60:d2:87:11:2d:45:d0:db:a8:dd:b2:bf:fa:eb:12:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F8:F7:B3:94:DA:09:FA:51:33:A2:0E:CC:59:50:B9:44:B9:14:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0a92faa-4c74-37fe-b70d-0b3ec5ac3650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6280::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:79:46:ae:4f:05:ba:1b:0e:8a:87:4e:ef:11:cb:2b:c2:
         33:15:81:4b:64:5c:d5:dd:c9:c4:ea:f9:96:70:33:b2:e7:70:
         31:0a:34:5f:8d:f5:68:7a:12:16:cd:c9:7d:5a:3a:31:44:0f:
         ce:87:dd:55:2b:a5:49:8a:3f:23:9d:d8:3c:dd:a4:3b:90:a6:
         ba:9c:79:71:35:17:90:70:95:fd:20:7e:0d:10:38:1c:94:64:
         47:81:05:e4:3f:be:cb:cd:42:be:bc:c3:3a:be:c5:b0:0b:54:
         2a:21:85:c5:43:58:e7:10:fd:a2:00:54:60:b1:ce:32:a5:9a:
         76:c8:6b:8d:0b:1e:9f:ce:40:36:26:29:63:1e:cb:20:16:1c:
         0e:99:88:6b:dd:81:d8:a9:8f:12:44:4f:8e:79:04:e0:23:82:
         19:69:ec:9e:71:be:03:f8:fb:46:e1:3f:76:39:95:5d:20:68:
         ea:03:3f:10:31:a8:3b:d7:ab:c5:b5:95:4f:f9:e8:65:47:e4:
         d0:07:1c:a7:aa:e7:ac:03:1c:ff:16:e0:66:a5:3e:ce:8a:40:
         6c:42:8a:d6:7c:62:1b:df:dc:cf:9a:d0:1a:3c:60:e6:2f:47:
         c2:4c:00:02:16:f2:e7:da:37:ee:6a:3d:fd:b0:d7:01:6a:55:
         ce:82:2b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:54:25 2026 by rpki-client