Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9a53137-810d-3ccc-b93d-cbca8dc717ee.roa
File:                     f9a53137-810d-3ccc-b93d-cbca8dc717ee.roa (raw, json)
Hash identifier:          mEcQrKyGOqpnbSair7mpsarcaZDuFzsNk4L1z8CTZAw=
Subject key identifier:   E3:22:94:B9:E1:61:7C:2D:2E:A2:5E:98:8A:09:B5:2E:69:DF:47:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3E5F244EED356955A0245080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9a53137-810d-3ccc-b93d-cbca8dc717ee.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     35994
IP address blocks:        2001:4878:21e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:24:4e:ed:35:69:55:a0:24:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=0acf915a-f1de-4895-ad1d-9f2822c4d9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ef:32:44:d3:09:c1:af:8b:9f:00:3e:cb:8b:
                    83:b7:43:6c:ed:02:75:86:6f:3e:79:8a:d1:23:79:
                    f0:06:49:c3:23:c2:fc:07:9d:c1:66:ef:cb:5d:63:
                    1f:ee:a6:d4:f0:7f:7b:67:be:d7:54:1e:e5:53:f5:
                    62:2c:8e:3d:88:4e:4f:1c:d7:ed:8c:46:2b:11:fe:
                    66:31:88:09:fe:01:43:9e:23:24:5f:57:ea:5b:4e:
                    09:93:b0:81:e1:e9:3a:59:a6:6e:73:b3:47:96:bd:
                    89:82:78:93:f4:f3:b6:7a:a6:a7:0b:48:26:2c:07:
                    2d:15:1d:0d:9b:36:b9:9a:6c:cf:a8:f1:2d:09:ec:
                    de:7c:c6:1c:f3:4d:48:16:90:43:cb:74:0f:b3:88:
                    40:b3:fa:ac:dc:69:4e:74:14:df:e7:ff:e8:d8:96:
                    d0:2e:9b:1f:97:84:3f:9b:fe:c2:7f:13:54:f6:73:
                    4a:85:05:2a:6e:2a:5a:66:20:0a:c5:1c:27:16:1e:
                    f7:26:48:9c:f1:a0:22:8e:ee:0f:a6:d4:bf:35:11:
                    27:32:20:e8:82:dc:1e:9e:5b:70:60:5a:6d:8e:56:
                    5b:57:34:c7:20:8c:4c:0a:e1:e1:5a:77:17:1a:df:
                    7f:06:0f:6b:61:bf:98:b7:07:af:75:49:63:c6:84:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:22:94:B9:E1:61:7C:2D:2E:A2:5E:98:8A:09:B5:2E:69:DF:47:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9a53137-810d-3ccc-b93d-cbca8dc717ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:21e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:17:58:a9:92:09:aa:4a:bf:19:dc:ec:a3:22:10:04:45:d8:
         ed:73:e2:33:35:e7:1d:8d:a3:aa:32:07:c2:3a:ec:aa:d2:19:
         3a:d2:63:a4:f8:0e:74:2e:8f:b7:2d:67:39:ee:65:d9:36:17:
         8c:f4:9e:8b:f3:43:8f:8f:dc:2c:a2:c0:0f:4f:2d:00:ee:08:
         ba:f5:0d:49:e3:7a:4a:3f:19:88:89:15:c5:db:d7:06:1b:a8:
         9c:c7:7d:a3:e6:11:c8:d3:d6:ca:5d:ca:97:ed:5e:1b:84:91:
         81:76:ea:da:8f:dd:eb:ee:81:15:12:45:e5:67:a5:d4:e9:1d:
         d7:09:b7:72:43:93:41:79:43:09:30:0d:c3:02:27:1e:02:05:
         8c:95:72:0f:08:99:3d:2d:37:37:87:c7:ba:0e:5c:c8:d3:5a:
         c3:5f:33:b2:e3:40:eb:b3:2e:f7:6a:6a:ab:27:8a:84:d1:f8:
         4b:a6:aa:e7:e2:4e:2c:d4:51:ad:67:de:cd:c9:2d:83:a1:d8:
         2a:4d:a2:7a:2c:fd:e1:fe:a0:e9:8a:b8:00:26:0b:cb:80:f8:
         da:a5:b8:93:34:d7:8b:82:a6:63:09:ec:46:74:3e:a7:09:4c:
         ef:82:c1:cd:59:86:3d:3d:c7:d4:9b:64:9a:95:a0:ec:71:38:
         8a:08:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:44:04 2026 by rpki-client