Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/cbddcb23-1260-3ea5-b911-314c46eb7551.roa
File:                     cbddcb23-1260-3ea5-b911-314c46eb7551.roa (raw, json)
Hash identifier:          ImyDyaM0g28hXa0WnvBxDF037BEeKMdoY4OVL/nIBlE=
Subject key identifier:   8C:8D:39:0B:53:94:CC:5A:FC:3D:41:3D:8E:94:AE:0F:F3:82:8E:F0
Certificate issuer:       /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
Certificate serial:       010D0C9F4328584EA78808446CE31E56933B7280
Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/cbddcb23-1260-3ea5-b911-314c46eb7551.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21527
IP address blocks:        2607:f038::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:08:44:6c:e3:1e:56:93:3b:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bef90707-c691-446e-aef6-0a745115286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:19:d5:ea:db:d8:ae:59:cd:8c:5d:f6:08:
                    64:66:25:ac:c3:20:15:54:9d:82:d3:dd:ca:83:88:
                    08:77:56:40:81:a0:dd:09:93:17:96:44:a0:e7:48:
                    52:8e:fa:94:f3:90:8f:e8:d7:bd:f7:cc:54:65:9c:
                    90:92:ab:56:54:e6:bd:66:85:4d:82:53:28:04:3c:
                    33:5f:f1:fa:50:63:a4:01:9b:44:76:8b:ec:42:3f:
                    9e:3a:27:e3:7f:8f:10:4a:2b:0e:ab:e5:3c:1a:f2:
                    d0:28:3b:f2:f0:fe:6d:59:16:cb:ed:b5:da:a5:b2:
                    1c:56:57:9f:fa:7e:49:4f:8f:9b:98:79:b5:8f:67:
                    94:31:24:56:e5:d8:ac:d0:ce:f2:02:11:21:70:a4:
                    3f:c2:a6:37:0f:c5:40:b9:c3:14:4d:c7:f9:52:75:
                    86:19:98:0b:49:25:6a:7b:0b:05:d9:b9:9c:ec:2e:
                    e7:fb:72:7d:fc:2d:ef:a1:c0:41:56:aa:d0:9f:d7:
                    f6:8f:1a:c9:7a:7f:e2:bf:5b:c1:5f:c0:d4:55:c8:
                    d3:e2:4c:f7:44:2e:dc:5c:e5:cc:87:4c:9a:b1:af:
                    3b:da:3d:8e:ab:63:f2:73:7c:90:1d:80:86:2c:16:
                    eb:21:d1:52:f5:e7:2c:45:7f:27:94:05:16:d7:63:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:39:0B:53:94:CC:5A:FC:3D:41:3D:8E:94:AE:0F:F3:82:8E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/cbddcb23-1260-3ea5-b911-314c46eb7551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl

            X509v3 Authority Key Identifier:
                keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f038::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:2e:54:ae:2c:37:2f:60:a1:52:34:d2:07:28:6c:53:04:84:
         ce:81:72:ec:f7:fc:ed:16:7b:0b:6b:22:ec:fc:ea:71:6e:58:
         03:af:06:47:71:7b:04:da:b1:34:23:65:af:62:48:4c:63:8f:
         88:ed:b7:49:02:69:05:e7:64:71:29:e7:e1:ee:ce:28:3f:6f:
         ae:f0:97:99:21:40:5e:aa:05:e1:50:3e:81:11:49:de:93:d8:
         01:db:34:60:5c:cd:eb:b4:7e:39:3d:79:4f:d0:7f:bc:97:b3:
         e8:2c:4e:5f:a8:25:07:7f:32:3b:92:28:dd:1d:bf:cc:95:8b:
         0d:07:0f:f3:0c:b0:8e:5c:44:04:b9:9e:01:7b:30:2d:3e:f7:
         9a:9b:6d:9a:bb:66:a3:a2:c5:3a:b1:8f:0c:2b:7c:d1:ef:df:
         75:a6:68:76:3b:77:94:08:23:be:4d:df:1b:f6:c7:14:5c:c9:
         f4:44:fb:9f:0b:62:79:34:ad:1a:be:b0:d7:c7:39:db:61:79:
         30:38:ca:20:bc:61:55:fc:fe:84:67:f9:16:cd:bc:85:fe:49:
         a2:67:83:c2:9a:1c:d0:22:b0:50:e7:dd:42:00:ed:ca:65:09:
         63:ee:f7:49:4d:e1:92:e9:5a:d6:88:46:50:92:1d:96:5b:c2:
         54:ce:1d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:44 2026 by rpki-client