Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa
File:                     7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa (raw, json)
Hash identifier:          6JUVa3oIv9yzxVYSjb17TJVHfvSz/UYwNEqRDKkzfdA=
Subject key identifier:   DB:51:71:F8:C3:42:5A:C5:3D:E7:34:BB:DB:3C:F3:FA:9E:A5:C9:4D
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F4328584E22744B52B6DE7E7B95E2E240
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     11017
IP address blocks:        2602:f98b:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:4b:52:b6:de:7e:7b:95:e2:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=95c2c6f0-8d18-4881-a1bb-6518e38e8946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:12:56:fa:78:d9:a8:33:63:23:4d:ca:ee:
                    4b:a2:90:66:cc:56:91:6c:c5:ab:06:39:19:8f:f8:
                    1c:00:0c:11:97:02:51:38:e7:a6:44:b3:2a:68:0e:
                    9a:bc:5d:1a:48:d4:6b:c0:f0:2b:72:bf:9d:7c:b9:
                    59:13:b4:e1:73:1d:30:cc:f7:8d:50:61:7e:83:0c:
                    c6:42:e8:ef:3e:f8:7e:08:e9:87:17:a2:cc:6b:ae:
                    b3:ea:38:12:ca:8a:6b:73:3c:41:1e:fd:be:33:8b:
                    24:96:29:82:80:13:32:c0:b9:ef:42:a4:69:2f:28:
                    0b:25:a9:40:01:b1:f8:9d:eb:6f:e6:b6:17:4e:bb:
                    c7:71:3b:61:b0:5c:e0:89:27:49:db:58:bc:43:7c:
                    eb:3a:c0:6c:73:84:f6:85:99:26:a9:b5:b9:16:ff:
                    e5:ad:e7:78:d9:da:c7:34:07:75:69:15:f3:ed:94:
                    bb:e8:6b:46:79:74:c7:9f:48:ea:9d:06:9a:3b:b4:
                    e7:6a:b9:99:c9:e1:b0:18:87:e4:37:34:74:1a:a2:
                    1a:8e:13:22:c7:7f:3d:85:28:d1:5d:7b:8d:77:1a:
                    8e:ba:1d:b7:75:f5:1c:cd:33:15:f5:13:48:e2:c4:
                    d8:74:9e:44:da:14:40:8b:03:88:1e:fa:5e:68:ff:
                    f1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:51:71:F8:C3:42:5A:C5:3D:E7:34:BB:DB:3C:F3:FA:9E:A5:C9:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:bc:1d:75:70:33:f1:a5:2b:07:53:4b:97:97:53:ed:cb:43:
         62:5b:9f:f6:73:18:82:f2:f7:a9:39:3f:e5:c7:34:38:36:e5:
         d9:35:d0:fd:77:cb:11:61:57:d2:cc:39:12:16:0b:3b:29:39:
         44:e2:f0:17:34:e7:ad:23:21:92:02:cc:05:49:06:11:24:9b:
         da:93:fb:1a:d1:ef:99:82:e7:c1:9e:e6:6f:8e:ae:78:86:9e:
         56:c1:bd:b8:66:27:32:e4:f9:eb:cb:65:df:c0:79:4a:5a:77:
         b7:d0:49:2b:91:2e:88:be:14:d5:97:43:c2:4f:82:e6:77:2d:
         ac:dc:4f:0c:d8:97:d4:a5:eb:95:e2:02:e4:a4:dd:1f:9f:21:
         5b:80:e1:6f:01:6a:db:90:28:e9:82:cd:90:0a:df:8c:ac:bf:
         2a:45:b1:fe:65:bc:f7:26:f5:ba:54:54:a2:7c:60:d8:64:c8:
         12:2a:0e:0c:5b:32:8d:e8:35:0e:89:c8:c3:63:1d:47:7b:26:
         01:f5:0c:47:38:69:7c:40:ca:c9:b6:30:c4:e0:33:93:ea:2c:
         13:07:c8:32:85:ac:9f:ed:3d:6b:0e:8d:f0:a3:fc:3b:57:68:
         1e:5c:b9:56:7a:f1:97:27:37:50:1e:20:e1:aa:03:00:a2:25:
         15:2c:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:11:26 2026 by rpki-client