Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c2d4b2-5234-389f-932e-1d18d706e177.roa
File:                     60c2d4b2-5234-389f-932e-1d18d706e177.roa (raw, json)
Hash identifier:          J0RCI6TxESBkChON2Htj5kO8dz3Q2C3uoRFxDRBR3GY=
Subject key identifier:   0C:AA:FE:2F:7F:6C:47:BD:1E:4D:5B:E3:39:D8:AB:5C:11:20:93:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78C8F537442FFD607FB8480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c2d4b2-5234-389f-932e-1d18d706e177.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7725
IP address blocks:        2603:300d::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8c:8f:53:74:42:ff:d6:07:fb:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c04691bc-6ce2-4897-8810-828e30e66d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:9c:fc:3d:96:80:1d:18:49:f2:0c:0a:8b:
                    9b:30:0b:b2:66:81:5b:e0:6e:61:f5:a6:a3:1d:20:
                    2c:e7:a0:9b:5c:f1:a6:cd:92:d3:04:05:a0:08:a4:
                    cb:68:cd:d4:8c:66:6b:26:59:26:a4:25:5c:11:33:
                    a1:88:9f:1e:bb:7d:53:9c:e6:a5:2c:1c:98:f0:f4:
                    08:11:f7:97:45:9f:96:e7:11:e1:7a:4b:3b:43:da:
                    74:b9:e5:39:cc:25:0b:6d:33:e3:4c:a3:ee:32:46:
                    34:07:de:27:13:d5:77:4c:e2:7f:4b:b7:3b:7d:76:
                    7e:1a:c1:8c:14:fc:6b:22:1a:51:37:fb:fe:d5:58:
                    48:51:ad:d1:51:2f:3a:be:4d:5a:ba:cd:ff:e2:d9:
                    fc:a5:6d:31:dd:e0:80:98:ca:ad:ce:c3:fa:71:55:
                    fc:63:51:f8:b8:07:4b:8d:54:73:2d:e1:b8:61:99:
                    df:b3:e2:2f:81:1a:11:57:5a:16:38:09:7b:0a:d5:
                    bf:53:9b:71:44:d9:ef:ca:71:c7:81:85:3d:6d:d1:
                    03:0e:12:11:df:ff:c5:41:de:36:61:24:66:45:7c:
                    a4:59:00:f7:ec:dc:ca:c8:68:ee:5b:10:5a:16:2b:
                    b0:82:80:df:74:dd:89:70:01:48:58:bc:88:b8:c5:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AA:FE:2F:7F:6C:47:BD:1E:4D:5B:E3:39:D8:AB:5C:11:20:93:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c2d4b2-5234-389f-932e-1d18d706e177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:6c:4b:78:4c:3a:bb:3b:fd:51:80:27:d0:d3:48:94:30:
         ee:f8:ad:ca:b0:b0:11:1b:70:0c:94:d1:9c:bf:ce:bd:f6:ff:
         a9:ee:97:75:01:af:a1:ed:8c:19:55:8d:41:e5:bd:de:ac:b7:
         8e:b6:39:1b:4a:24:7c:83:61:8b:cc:af:ea:8d:69:77:8c:4b:
         6f:92:1b:03:8e:be:6e:8c:ee:11:d1:63:5e:00:8b:ee:a7:b1:
         09:67:58:29:b3:b7:cf:da:ca:95:24:35:42:a8:11:22:21:b1:
         06:37:f8:44:b4:69:a1:15:a0:34:cb:04:29:b5:93:45:dd:7f:
         e8:c7:a3:1d:e7:09:bb:e4:b5:52:00:66:cf:4d:fe:86:40:aa:
         3e:6f:e2:9c:7b:f2:91:4c:f1:4e:f7:2f:33:1a:20:40:a4:21:
         48:45:04:90:40:75:09:e9:5c:aa:2b:fa:89:b4:fb:1c:3e:07:
         65:17:25:4d:0a:60:36:1e:95:7d:da:4a:48:99:05:9c:01:ba:
         ca:ba:ca:36:5d:8c:7e:df:20:f0:f7:60:a6:ab:e7:dc:76:a0:
         75:19:72:21:02:82:d1:31:fc:90:e6:ea:f7:6c:37:0d:78:24:
         2d:f6:2e:07:3f:2c:a0:10:cb:0d:47:dc:32:48:33:5b:75:1c:
         12:64:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:10:19 2026 by rpki-client