Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa
File:                     e8f13100-d644-3a83-b082-19ac1aaf66a9.roa (raw, json)
Hash identifier:          +JDaHEKRPzz8M9/2/4bkjxC7/hqJprabyqtkCw1MCPk=
Subject key identifier:   25:5F:BC:D4:82:F2:BF:71:33:EE:B6:C6:E4:54:BB:10:8F:30:68:84
Certificate issuer:       /CN=25b98849-0471-48f0-9db6-e4f6b59aa178
Certificate serial:       010D0C9F4328584EA7948AA7C2CFDC4C69FF0E80
Authority key identifier: B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40081
IP address blocks:        2602:f948::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:8a:a7:c2:cf:dc:4c:69:ff:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25b98849-0471-48f0-9db6-e4f6b59aa178
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7ceb2cba-c210-4899-a0ea-e2c1ec16e72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:a7:53:38:53:97:be:1b:63:d1:79:0b:c6:
                    32:c3:6f:30:79:4d:c6:5e:5d:fb:d9:84:0b:e7:fa:
                    59:a1:70:01:6a:bc:cd:6d:37:13:20:6c:37:78:ba:
                    ca:bc:aa:37:89:f1:e5:4a:81:40:43:93:0b:4c:da:
                    1d:71:d3:d9:af:b0:17:c2:a1:9f:c7:5d:b7:38:35:
                    48:63:96:56:e2:d5:07:4a:8d:33:2a:6c:ad:ec:28:
                    5e:bf:eb:22:2b:20:10:b7:48:78:15:e3:f6:d4:d4:
                    47:80:8e:2d:48:95:1c:35:2d:eb:63:47:2a:5e:ad:
                    7d:ea:7c:e0:c4:16:79:6d:7e:a7:b6:25:e8:d1:bc:
                    ef:7a:a2:72:b9:fe:9e:a1:1b:5f:9e:e6:cf:89:8d:
                    54:3e:b1:e2:64:0f:8e:51:82:af:ef:ac:e2:30:f6:
                    f6:46:08:bf:f0:7a:29:99:97:66:d2:09:29:68:fe:
                    a5:38:a3:c1:37:48:99:eb:dd:1b:2c:35:30:76:50:
                    98:47:e3:e0:a5:a4:1d:07:e3:5d:6b:60:c9:01:86:
                    be:06:cc:a8:4f:e2:12:3c:9e:27:01:72:f4:78:bb:
                    88:1f:18:2d:cb:e2:83:17:10:3b:3a:a4:ad:3f:9a:
                    9d:e4:3c:ae:28:51:f9:62:de:50:e6:46:c6:c6:62:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:BC:D4:82:F2:BF:71:33:EE:B6:C6:E4:54:BB:10:8F:30:68:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl

            X509v3 Authority Key Identifier:
                keyid:B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f948::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b2:ad:d7:63:d1:e0:5d:23:c0:92:bc:35:92:f4:b7:6a:8f:
         8f:c3:55:12:30:9f:4c:fe:89:e9:23:5c:79:7f:aa:11:1d:3e:
         16:8d:23:b7:c0:a3:f2:f4:28:3f:f8:ad:b8:fd:fe:21:51:8e:
         71:bd:f8:5c:17:f4:aa:e7:d9:00:78:48:8f:54:91:ae:c9:fb:
         3a:dc:f7:0a:10:83:6a:d3:f3:55:e1:7a:2b:9a:4d:56:1d:6c:
         b6:2a:e3:35:02:78:76:3f:0c:87:d4:37:b6:8d:5c:af:e1:f7:
         9a:5c:4e:91:4f:08:d3:f8:11:3c:ae:b7:4c:ca:18:b7:96:27:
         ae:fe:4f:33:67:bc:38:8f:5f:42:c5:d4:cb:36:1a:f2:24:d8:
         f1:ac:93:8c:71:b9:dc:51:65:99:55:24:79:46:c8:07:97:1a:
         e8:8e:ab:41:2a:0d:f5:ea:bc:b1:a3:37:22:b5:07:21:58:b7:
         2e:df:c1:3d:a3:59:06:1c:29:36:e7:9f:d2:fa:a2:d5:ef:bb:
         30:95:ad:47:61:de:44:20:78:b0:2a:58:aa:d3:8e:01:2e:05:
         95:7b:75:9b:59:57:9a:84:8d:69:a9:ed:de:a2:b2:8d:a8:8e:
         a6:36:dd:f8:3c:36:79:f0:fb:ae:40:6d:f1:92:a9:73:cc:77:
         c5:ef:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:10 2026 by rpki-client