Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb839974-0324-380e-b909-6e34df4566c5.roa
File:                     fb839974-0324-380e-b909-6e34df4566c5.roa (raw, json)
Hash identifier:          X6JjkOat/A2ZjSMkk/uo5hk9BIBS5h2pFcaqUx+BRuU=
Subject key identifier:   B4:FD:20:F3:F0:11:64:4E:E2:AB:36:D9:0A:DF:92:AF:52:FD:AF:10
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE1508DD0056B65EE83DC4120
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb839974-0324-380e-b909-6e34df4566c5.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1406:3e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:8d:d0:05:6b:65:ee:83:dc:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=42d3218f-564b-4f20-9005-be6b8d72d8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:9f:fa:7b:36:aa:5a:9a:f1:4b:2d:d2:04:
                    11:ce:c6:f0:6e:92:bb:37:aa:2f:a0:d2:29:8c:7b:
                    b1:8b:67:56:cf:b9:52:4a:d7:89:90:27:3c:aa:a6:
                    59:be:2d:13:b4:2c:50:8d:3c:47:9f:8a:e2:9c:a8:
                    ea:0d:01:b6:71:2e:67:d2:81:44:42:eb:7f:f0:ff:
                    6b:ae:4a:d7:f2:96:4f:ba:15:4f:a9:9b:12:38:17:
                    d9:e8:85:21:e2:3a:73:b4:7a:00:22:8f:0c:2b:1a:
                    09:67:f0:0f:b8:0d:fa:a4:f1:52:ae:c1:ef:ed:75:
                    37:2e:f2:bc:98:2f:dc:3b:5f:bb:3a:4d:9e:e1:92:
                    f0:5d:d3:99:9e:2d:08:de:04:ea:56:51:a5:dc:8f:
                    ee:bb:c7:33:66:2b:7f:cd:a0:3c:98:98:25:11:87:
                    0d:92:cd:43:9a:00:45:59:2c:c8:99:6d:5a:41:f9:
                    d3:3c:d0:49:7f:a2:69:35:56:3f:1c:6e:5a:78:0c:
                    47:fe:12:fb:99:7a:14:e6:cd:e2:e4:b3:8d:8d:98:
                    f1:cd:d8:39:10:e6:e8:4a:02:42:d0:43:65:98:17:
                    b4:55:ff:01:f6:f9:53:6f:4b:8d:02:aa:61:45:c1:
                    dc:e5:c6:d5:a3:2c:b6:3a:99:b5:21:b8:9e:b5:9c:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:20:F3:F0:11:64:4E:E2:AB:36:D9:0A:DF:92:AF:52:FD:AF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb839974-0324-380e-b909-6e34df4566c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:3e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:52:30:3f:ab:48:16:fb:c3:5e:c4:16:13:81:e9:50:db:22:
         8d:48:60:69:3d:02:49:39:75:b7:d0:f7:50:b3:29:03:6a:1f:
         37:30:fc:28:6b:07:9a:7d:a8:4f:83:6f:c9:7e:c1:b1:a1:7d:
         90:2e:d4:9d:d0:46:5e:79:42:4f:02:64:c7:cf:8d:c6:12:da:
         64:e6:db:61:e8:14:4c:e6:74:75:09:de:b7:67:cb:a8:96:48:
         a0:96:00:3b:21:cc:88:4f:94:bd:70:ca:fb:84:f7:38:57:3f:
         bc:45:0b:b0:1b:e4:c7:63:d5:9a:a8:65:2a:e7:bc:48:92:67:
         8b:63:a5:87:71:15:4d:f9:11:d8:ec:59:d3:b8:ee:cd:7f:6b:
         b6:e2:4b:5d:0c:1b:78:0b:21:32:21:c4:6a:c6:b8:ff:7a:86:
         c5:a0:c4:51:e9:4e:23:06:e7:18:08:7e:cc:1e:4c:0b:21:0a:
         6c:12:f3:62:82:68:6e:d3:7c:b8:61:b3:6c:ce:a9:5c:e6:c7:
         00:fb:da:63:5c:78:47:de:29:45:62:c3:2f:91:db:13:77:67:
         89:92:d7:13:e0:7f:80:9c:fb:b9:c7:e9:4e:1c:04:bb:97:a7:
         09:5c:e9:fb:44:aa:71:20:18:b5:85:d9:e1:a4:5e:75:e1:51:
         7c:c8:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:29:01 2026 by rpki-client