Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
File:                     af56c26b-429b-351b-b947-c8b53bdd868c.roa (raw, json)
Hash identifier:          uKdgdLQfct3y+Vb5L512oogcmthgHGDF2vBzKBUE+gg=
Subject key identifier:   33:94:EA:F5:3F:96:A2:4C:03:0D:E0:C7:55:ED:F8:7C:72:10:4D:CC
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F4328584E9BE51384EF6DC4FC11B531C0
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     33039
IP address blocks:        2602:f95c:ca2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:13:84:ef:6d:c4:fc:11:b5:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=eb31ad62-0b47-4e6a-970d-aca65ed781de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ee:37:90:e2:98:e4:69:f0:43:e7:93:06:17:
                    e0:95:65:1b:85:88:f9:70:ea:4c:56:00:71:3a:5c:
                    8e:8a:f4:5e:4e:39:be:29:8b:ed:e6:54:06:fd:f9:
                    01:a9:31:22:c8:39:94:cc:6f:90:ba:4c:0b:25:2d:
                    1d:42:66:ad:af:86:41:d7:52:86:b7:3e:0f:a9:ef:
                    81:e2:41:42:a1:a4:6e:eb:f6:7c:b8:18:4e:e3:5f:
                    19:52:c2:8a:0a:0e:98:22:86:14:fb:6e:f8:2f:4c:
                    a2:68:93:2a:ad:b6:a2:2e:6f:3c:89:0e:79:a9:14:
                    8b:85:49:1f:1b:5c:b3:0d:7b:05:6f:a9:13:d6:b0:
                    11:1f:21:61:6b:39:d1:23:98:c8:35:df:3b:c6:de:
                    e3:52:f9:0d:23:c9:0e:76:b2:1f:66:55:9d:55:e1:
                    94:2e:9d:36:34:9e:1c:a5:da:cb:f8:44:73:f7:ed:
                    3c:5a:cc:34:50:1c:15:ba:56:f5:63:7c:14:e4:bb:
                    cf:34:f7:9f:24:ec:8a:b4:35:cc:a9:0a:14:b2:e2:
                    d5:99:85:1f:6f:58:fa:e6:8f:31:9c:09:ec:69:f0:
                    f4:4f:05:c6:c1:b2:a7:7b:ff:96:1c:fe:d2:ba:29:
                    96:d5:2f:90:f6:bf:8f:e2:1d:c3:b5:e7:61:b0:cd:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:94:EA:F5:3F:96:A2:4C:03:0D:E0:C7:55:ED:F8:7C:72:10:4D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:ca2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:80:2e:47:12:4a:5e:0e:78:69:53:52:52:d5:b7:b5:11:d5:
         f1:95:77:86:88:12:70:39:10:5c:59:85:46:46:7e:66:a0:b2:
         05:79:72:91:59:6d:9b:33:61:60:43:8f:f2:cc:17:50:55:d2:
         18:b4:72:29:6e:19:05:a2:00:91:14:7d:81:de:df:2e:c5:cc:
         8f:46:50:a9:71:fc:7b:2f:93:96:6f:01:02:26:4f:39:b7:51:
         22:b3:fc:0a:9c:9a:b4:79:a2:2f:97:a7:d7:a7:f4:e7:d8:ad:
         df:9b:12:4b:8e:e4:08:c6:4b:20:07:4e:6b:57:76:fa:b8:9c:
         e8:ad:06:47:0f:e4:d5:16:43:62:96:c1:e3:df:2e:58:20:17:
         b1:97:71:a5:3d:2d:00:10:32:9f:db:ef:85:73:82:70:6c:ed:
         8b:bf:1f:8a:a8:c7:45:b5:32:90:2f:0b:a7:3a:a2:2e:e7:33:
         12:dc:1c:5f:50:f4:a4:a8:c0:a2:ad:32:e1:79:f5:7a:c2:1c:
         07:29:cf:3c:91:2d:76:09:e8:76:b9:d5:5f:aa:a5:0f:02:e5:
         d6:30:65:02:1a:af:ab:85:bf:d0:23:5f:40:63:1b:dd:1c:5a:
         17:f8:5e:e1:cd:6a:c2:f2:ef:86:51:c2:38:9b:a9:2e:b8:6c:
         cf:43:bb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:02 2026 by rpki-client