Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa
File:                     449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa (raw, json)
Hash identifier:          bRefTY4i3SKWJowkbdDWHowXfIyxcItGDVFyIuA1htk=
Subject key identifier:   3B:4E:E3:0D:58:6F:5C:13:91:4C:17:E8:0A:F2:99:7E:44:5A:D2:D8
Certificate issuer:       /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
Certificate serial:       010D0C9F4328584EA787D054D2F6568F4AA1E680
Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14041
IP address blocks:        2620:11f:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d0:54:d2:f6:56:8f:4a:a1:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cd17cc38-b901-413e-bde8-a1e816a57834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:72:98:95:1a:94:36:fe:1a:2c:20:0a:b8:
                    f6:32:8e:8a:b6:f1:c5:a6:2f:ee:03:0c:bb:b5:e4:
                    cf:bb:54:34:76:21:36:7d:25:41:f0:45:aa:d0:43:
                    5d:97:be:0e:d4:f3:0f:1e:82:e7:b8:bc:52:65:2f:
                    6c:4b:10:65:c9:9f:47:28:f4:bc:cb:74:ec:c3:ff:
                    b1:e4:43:fe:37:ab:df:73:89:38:5b:50:93:31:5c:
                    6a:8c:55:6c:d6:23:2f:b2:7a:5a:1e:7c:c4:e9:dc:
                    ba:65:50:61:b3:35:71:7b:a8:c6:99:46:86:6b:a3:
                    c4:40:05:2a:eb:e2:39:2b:1d:95:fb:19:c0:1c:fb:
                    5b:62:9c:4e:e7:a9:20:0a:d1:57:67:5a:98:9d:ba:
                    15:ab:fa:f6:ac:4d:22:17:9d:c3:25:fb:25:02:3a:
                    32:d8:d2:ab:89:e3:60:ca:ef:88:fb:99:39:7c:ee:
                    be:76:67:ed:12:38:98:55:4c:b3:f0:25:79:b1:43:
                    1d:dd:37:bf:31:28:f4:13:89:c4:c0:10:92:ba:f6:
                    28:dd:da:a1:ff:28:73:d8:a3:45:9f:00:05:0b:bf:
                    22:fd:84:f9:1f:70:b8:73:f1:9d:fc:38:9a:4b:40:
                    6e:a8:a3:51:e7:0f:9a:bd:8e:8a:a7:38:c3:49:bd:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4E:E3:0D:58:6F:5C:13:91:4C:17:E8:0A:F2:99:7E:44:5A:D2:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/449d62aa-147d-3cc1-b6d1-096ce2461a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl

            X509v3 Authority Key Identifier:
                keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2b:81:40:e7:6f:d3:7f:75:c9:35:31:e6:31:32:18:e6:16:
         ea:a7:0b:36:d2:59:a2:60:43:14:1a:be:87:50:de:4f:80:75:
         db:a2:60:15:66:d0:d8:9b:0e:e5:3a:9f:f7:cf:53:c8:ce:25:
         08:89:f2:12:ef:57:f6:36:8f:40:20:77:98:75:57:d6:b8:6a:
         fb:2c:3d:b6:ed:25:32:2f:1b:7e:8b:9b:90:8e:41:cf:dc:65:
         a3:c8:81:34:34:8d:76:24:79:83:b4:64:d4:80:62:98:ce:58:
         3d:91:75:5a:75:ad:0f:c2:21:34:76:92:d9:dd:d3:68:ae:e5:
         02:57:55:de:df:02:6b:f3:9b:85:a6:f1:46:ea:2b:f6:e8:b0:
         b8:e4:18:a6:b4:8c:9f:fc:1d:93:d1:4d:c7:1c:99:87:81:15:
         88:6f:44:c4:1a:fd:9b:cc:16:7a:92:96:ff:b9:99:e7:a8:20:
         4b:0b:3a:e8:74:d1:2d:07:42:2e:99:60:53:2b:85:18:9d:35:
         1a:8c:c7:70:b7:33:17:0e:79:76:79:90:c6:bd:b6:a9:fd:e2:
         35:2a:f0:74:9a:bf:61:f2:73:de:f5:90:77:65:7c:e9:05:f5:
         8e:3e:2c:b7:6e:c3:c0:1c:bf:ef:d8:11:47:ab:21:8d:c0:93:
         84:21:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:58:21 2026 by rpki-client