Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa
File:                     3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa (raw, json)
Hash identifier:          Nco6D0HW26ONrOhsoMjjmcvtf0R+9NhRTl/gpFjYZcU=
Subject key identifier:   2C:DA:AA:52:4F:ED:75:DD:99:7B:10:1F:C4:30:58:4F:82:CD:80:D8
Certificate issuer:       /CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8
Certificate serial:       010D0C9F4328584DE150A2E3950C5C03A7C6AE00
Authority key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     63061
IP address blocks:        2620:b7:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:a2:e3:95:0c:5c:03:a7:c6:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=ffc3e411-e3ab-446d-bd12-67fde919a621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:85:fa:96:6f:d9:c6:b4:6c:9f:34:c6:3c:f4:
                    5e:a4:9c:d2:74:63:7b:1d:9a:44:b5:54:8e:80:78:
                    8f:4f:ce:72:40:f4:77:b5:d6:1c:84:ba:b1:dd:55:
                    61:32:0a:58:6b:3f:df:4c:91:bc:db:53:8e:c3:8f:
                    d6:8f:00:e5:2a:86:b4:64:a5:b6:a5:cc:ad:29:0e:
                    c0:bc:94:32:f0:f1:c6:f3:b9:54:83:20:df:c9:f8:
                    c9:81:44:0f:10:16:60:b8:cc:67:a6:fc:39:21:03:
                    27:5b:df:cd:aa:f1:b6:bd:dc:ef:46:0d:a5:eb:81:
                    b2:7f:93:dd:fa:ca:42:bc:0e:91:26:91:de:54:31:
                    b7:af:88:6c:a9:af:bc:40:aa:41:25:c7:21:71:e1:
                    c5:6e:a1:7c:59:82:1c:65:dd:40:77:c9:2a:fa:d3:
                    79:ab:c3:95:18:b8:c9:d4:aa:66:6d:49:8b:1c:7e:
                    1d:7e:e9:99:f1:6d:ac:f7:2a:07:c9:eb:c7:96:a7:
                    5a:8e:e6:3b:a8:8c:c4:37:e4:12:7b:1f:29:10:07:
                    ef:2e:4a:75:1a:aa:88:7b:46:f4:4c:c4:02:dc:18:
                    6e:5c:5a:af:ae:88:bf:4a:63:b5:3a:80:e8:93:c1:
                    d5:59:c2:5f:ba:ed:12:76:0d:ec:0a:f2:15:32:ae:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DA:AA:52:4F:ED:75:DD:99:7B:10:1F:C4:30:58:4F:82:CD:80:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl

            X509v3 Authority Key Identifier:
                keyid:AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b7:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5a:18:17:51:fc:da:d5:86:27:e0:02:16:ad:47:b6:d9:1a:
         94:18:28:7b:19:f8:b5:6f:09:81:76:02:aa:0e:61:fb:54:44:
         80:2f:43:b1:d9:e9:e8:d8:58:d2:30:d8:94:1d:23:06:ac:26:
         05:06:89:13:d2:25:64:48:97:41:79:6d:39:c7:83:56:f4:cb:
         8b:15:40:c9:17:a4:8a:60:d6:95:d4:fd:30:8a:b8:91:61:ef:
         40:d6:2c:33:9d:56:ab:97:e6:ae:d5:59:6b:8e:a9:13:21:f1:
         5b:11:f5:e4:9c:11:a4:f2:7d:c2:82:1f:93:b8:25:35:65:f5:
         66:74:7c:80:6a:a3:08:ed:e6:43:92:a1:19:8b:9e:8c:3c:a3:
         8b:c1:43:29:16:0d:38:80:88:ff:2f:b2:03:72:df:c7:a2:c2:
         70:bf:08:ba:a5:ab:6e:7b:70:b4:ed:94:ba:93:b7:51:9c:8d:
         11:66:32:70:01:d3:c4:1b:9b:c1:85:07:5f:59:4f:97:b8:7c:
         5e:a1:c7:4c:50:a1:2b:e8:c8:a1:65:52:d2:07:66:89:47:d5:
         08:0f:07:d8:8f:c8:58:58:cc:31:27:66:67:53:1e:9f:0b:9d:
         75:d3:24:cd:85:83:62:d1:e5:8e:e2:9b:1f:58:65:8d:e4:d1:
         6f:45:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:36:33 2026 by rpki-client