Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/cac81a67-312e-33f8-966d-322161e7bd8e.roa
File:                     cac81a67-312e-33f8-966d-322161e7bd8e.roa (raw, json)
Hash identifier:          yA4IElHbWqQeXBICxFEY0YJfjehiqssCmRxfyDiw2Y0=
Subject key identifier:   27:C2:AF:49:9A:91:A4:03:F7:28:FA:72:A1:82:6D:43:A4:6E:1C:78
Certificate issuer:       /CN=841d3ce8-d29f-40af-b883-2f114aee4d29
Certificate serial:       010D0C9F4328584DE2B5D7F0FBCF8FA1537B9780
Authority key identifier: DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/cac81a67-312e-33f8-966d-322161e7bd8e.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     33197
IP address blocks:        2607:e100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:d7:f0:fb:cf:8f:a1:53:7b:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841d3ce8-d29f-40af-b883-2f114aee4d29
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=21e93530-d014-4799-be69-7c84bad4f841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:24:c8:0b:ee:c1:93:bd:42:ba:cf:5b:62:
                    38:0f:d8:03:bd:c7:81:9c:65:fe:f8:12:45:53:66:
                    4e:be:c6:b4:da:ed:17:1a:47:3c:b2:bd:7d:5c:6f:
                    70:82:66:f1:b3:c5:0b:e2:97:a7:c6:5f:d5:e8:23:
                    e3:9b:e3:66:29:b4:30:95:ed:6e:b0:19:ec:73:a0:
                    01:b1:92:2d:ae:08:c9:fd:99:c4:1b:10:01:50:08:
                    07:b2:d4:b4:92:d6:5e:57:6a:4e:3f:73:fd:de:ea:
                    0f:ea:7b:92:22:8e:18:83:28:d1:f6:02:29:bd:ac:
                    74:f7:55:11:e7:98:e9:45:51:eb:26:5f:f7:c1:b6:
                    bc:62:96:9c:69:23:36:0d:71:4d:1b:27:b4:ae:fc:
                    6b:59:53:58:13:ed:63:80:6b:22:57:c9:64:13:dc:
                    5e:bb:1a:ac:66:61:53:3a:4a:f3:0b:36:ca:29:10:
                    4a:f1:c8:40:78:40:3d:5b:87:45:0f:d9:01:57:c3:
                    2c:d1:bb:4a:71:d1:70:96:d9:79:47:a8:42:00:f5:
                    fa:d1:20:0c:14:30:e1:2f:16:b6:f6:25:f7:6f:10:
                    2f:22:98:4d:36:29:b3:6a:f0:52:34:57:4b:09:68:
                    04:36:3d:fb:19:cf:c5:40:af:20:b8:f4:48:12:37:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C2:AF:49:9A:91:A4:03:F7:28:FA:72:A1:82:6D:43:A4:6E:1C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/cac81a67-312e-33f8-966d-322161e7bd8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl

            X509v3 Authority Key Identifier:
                keyid:DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:fd:e4:59:71:a3:fa:58:a5:7e:da:f5:0e:37:c6:41:3a:
         92:c2:77:75:bc:4f:31:8b:a2:16:29:95:28:18:06:58:b7:2e:
         db:5b:28:02:42:99:b9:88:1b:a1:6a:52:90:0c:4e:62:df:b4:
         2d:18:00:88:83:45:67:84:3f:f1:b5:af:59:b0:bf:04:f1:48:
         f9:23:94:ec:f1:1f:79:ce:10:74:1e:85:5d:bc:f2:9f:cd:ed:
         ef:b3:8d:5e:3c:ef:74:c3:eb:0b:d4:a2:8c:a1:b2:73:4e:9a:
         4a:15:b6:da:0c:c2:46:aa:89:05:ba:b3:7b:02:3f:da:4c:22:
         b2:4a:c5:ea:17:ea:95:ab:3c:5d:23:92:d8:58:2d:23:b3:f9:
         38:ba:cb:6d:ad:0b:3b:3f:83:48:de:06:cd:de:ee:57:64:54:
         f2:32:89:aa:03:ee:0d:1d:fe:0f:34:81:dc:39:b0:17:54:c2:
         76:d8:7b:e0:02:f6:31:18:78:9f:9c:e8:bf:78:b6:a0:4a:a8:
         d6:6b:74:91:67:31:be:57:d8:7d:66:d6:ee:1e:de:be:c0:cc:
         cc:c1:da:9c:53:15:e0:77:a0:51:31:27:f3:84:63:73:06:df:
         1f:1d:19:21:c5:bf:db:c0:6f:60:44:69:f1:bf:8c:29:e5:7a:
         31:4e:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:29:06 2026 by rpki-client