Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa
File:                     42f72087-4467-3691-8acf-0987d8d58f26.roa (raw, json)
Hash identifier:          H1o1W89LLFlAAxGZ1yAcTtz5MQ3p2UoFO3r4wxebWCU=
Subject key identifier:   07:F8:E6:F1:9E:5A:39:E7:84:B7:97:A3:92:54:0C:32:D9:9D:0E:E0
Certificate issuer:       /CN=e8a5a257-a121-41de-b0be-6ab191fc4486
Certificate serial:       010D0C9F4328584DE2B5F0B7899A88A986BC5400
Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     32709
IP address blocks:        2605:ea80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:f0:b7:89:9a:88:a9:86:bc:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=b3372829-7085-445e-b29f-e65a0fee157a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:88:c3:4e:38:96:31:02:16:be:ba:c5:f0:71:
                    cb:bb:4f:16:f8:34:db:97:bb:93:f5:87:94:69:9a:
                    90:f2:0a:cf:10:57:5f:de:81:de:5b:52:0e:dd:93:
                    77:c8:01:b2:1d:00:55:00:e6:11:1b:7c:7a:f2:6e:
                    4f:26:2d:b3:78:d2:4b:52:3c:c5:8b:87:4e:3c:25:
                    7d:42:47:0b:b6:6d:2e:6f:2e:7f:93:39:27:8e:6c:
                    bf:45:5a:af:64:10:f1:8c:cc:69:01:a4:0a:92:1d:
                    b3:38:05:8e:c6:14:f4:2c:40:c3:57:ac:45:8f:11:
                    e5:58:30:ff:51:04:56:9a:10:6f:ab:66:77:f2:4c:
                    2e:9e:f5:10:99:9c:5b:2e:ff:fa:73:e8:01:66:bb:
                    c5:b8:4b:ed:ea:dc:d1:e5:a7:b9:b8:5b:eb:44:53:
                    bd:f6:36:ec:e5:bf:da:ea:11:82:33:0c:16:fc:2b:
                    53:df:5e:1f:d8:65:90:e0:3b:90:8a:3c:50:21:43:
                    8f:9d:24:6c:e5:e5:e6:20:de:86:04:4d:79:f7:aa:
                    00:4b:4a:4f:b9:1c:43:9f:dc:c0:c5:9e:0a:13:1b:
                    45:ba:69:4a:4b:ec:e2:f0:72:4c:30:fe:6f:7a:83:
                    04:3b:06:38:51:3a:66:e0:ec:2b:03:2d:ad:0a:a7:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F8:E6:F1:9E:5A:39:E7:84:B7:97:A3:92:54:0C:32:D9:9D:0E:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl

            X509v3 Authority Key Identifier:
                keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ea80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:fb:1d:21:42:7a:8b:79:7e:d7:b4:18:04:6f:3a:63:fc:ed:
         88:d4:c3:b6:42:32:87:6b:b2:97:f9:41:42:0a:5d:66:8f:ed:
         89:96:0a:05:8e:ab:48:41:99:fe:c4:cb:04:e6:1a:48:35:a1:
         f4:cb:9b:36:62:40:12:33:58:89:f4:a7:4e:72:e3:a8:a8:95:
         50:64:9b:42:bf:2c:5d:67:5a:a9:12:5a:ab:2d:dd:80:e8:a1:
         7f:c7:74:b8:99:bd:5b:17:cd:17:18:82:41:35:8d:bf:af:5c:
         d1:c9:a6:ce:9a:de:53:fe:c1:20:db:6e:49:ea:ac:77:ff:94:
         7b:41:1e:ed:7d:16:c4:a4:7f:a0:58:f0:0d:4e:15:b3:b8:eb:
         d7:b7:23:e0:d1:d6:2e:11:88:54:4b:0c:b4:06:85:38:7c:f0:
         8f:19:32:48:6b:57:37:1c:93:54:19:b1:83:1b:ce:aa:ac:81:
         45:8a:7d:54:73:87:9a:ef:d1:df:9d:39:ad:6b:d5:c4:82:d7:
         28:38:f0:d8:97:17:bc:91:b9:10:cd:c0:b5:50:d6:dc:41:7c:
         2d:c5:2a:3e:1c:49:1f:2d:49:e1:73:ee:ea:ad:e8:de:05:de:
         89:27:a3:45:4e:d1:37:17:6f:f6:9f:dd:06:1c:fa:f9:0f:c6:
         4b:89:52:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 18:52:10 2026 by rpki-client