Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa
File:                     1b63046d-f519-3f13-a304-7091d7eabb92.roa (raw, json)
Hash identifier:          1NwYp4YSAkKz16Adf2B3grZU8Nj/ruCLHfbuVN6akgQ=
Subject key identifier:   A5:E5:7F:AD:71:B7:F8:44:D7:48:2D:1C:7E:10:7B:40:AC:A8:46:71
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584EA78850C679023EA54F530B10
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53727
IP address blocks:        2602:f982:200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:50:c6:79:02:3e:a5:4f:53:0b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e4387c65-bc9a-4f60-be5b-bb0faaa28f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:78:e0:6f:c8:b6:7e:6e:af:3f:51:15:34:
                    da:82:65:3b:da:31:c0:55:a2:60:18:bc:d9:97:0e:
                    41:12:bc:91:a4:b2:97:86:ff:58:29:80:85:8c:64:
                    a1:25:18:05:fa:63:ea:14:7a:9d:ab:33:7d:c2:fe:
                    e3:60:bd:fc:b5:07:4f:ce:ca:c7:8c:10:e7:78:79:
                    c9:04:22:f9:e0:2a:fb:8d:a8:58:d7:41:ab:4b:25:
                    93:4c:c9:44:0f:18:fe:67:ce:dd:76:0c:48:d2:27:
                    b9:e8:16:05:c6:1f:49:d6:03:64:80:8c:b2:90:c0:
                    64:f1:e3:af:db:09:76:09:00:12:6c:aa:9f:49:63:
                    de:f9:57:6c:36:fa:25:7f:2c:da:36:eb:24:ef:03:
                    38:99:91:a6:18:f1:de:80:9a:30:3e:3a:87:3a:21:
                    ea:b1:1e:36:4e:1c:74:49:78:83:1d:b7:9f:5b:09:
                    e0:d5:5b:00:a9:52:eb:37:72:09:46:98:dc:cc:e5:
                    34:21:32:27:57:54:90:2c:86:51:61:87:6f:52:7b:
                    7a:10:31:fd:37:49:61:f4:75:61:5c:dd:dd:9b:1b:
                    5b:a6:4a:c4:a5:81:9a:c2:3f:cb:c7:0f:0f:3a:f7:
                    1f:11:2e:9f:29:d9:53:fd:d9:b8:f7:92:b3:52:86:
                    b5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E5:7F:AD:71:B7:F8:44:D7:48:2D:1C:7E:10:7B:40:AC:A8:46:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:66:15:68:8f:33:4f:20:94:5e:27:32:b8:e7:36:db:6f:ed:
         31:34:53:23:1f:23:b7:b5:45:b7:bf:20:d5:ba:39:ca:22:a8:
         a9:f3:d1:eb:7a:2d:c4:0c:1e:93:18:9b:53:e3:20:51:18:8f:
         47:c7:fe:84:53:c7:ba:7e:eb:bf:ea:e1:e9:81:e4:4c:2d:1b:
         8f:24:bf:88:f6:bd:06:ca:e3:6c:3d:a1:4d:79:07:3b:c9:56:
         b1:b0:12:d2:f7:c9:21:c6:b7:e3:62:be:6c:95:6c:ff:63:db:
         a5:c6:7c:d3:b7:38:3c:4e:d3:62:6e:cb:a1:eb:f2:03:dd:1c:
         40:b5:e7:ad:d6:36:62:8e:8b:77:d6:37:a3:70:f7:ce:3b:3d:
         5f:13:e8:5a:d3:27:04:b8:59:03:9d:54:4a:d3:9d:cd:5b:26:
         5c:da:78:63:7d:ac:07:58:90:67:c5:4a:33:8b:35:ba:ef:35:
         aa:d7:33:b1:53:04:79:f7:19:2d:e2:a4:74:17:4d:47:b4:04:
         15:a4:57:eb:85:a9:91:4c:1b:42:66:af:23:aa:7c:6b:84:fd:
         74:1b:6f:f3:de:a5:28:c4:32:34:8d:09:b3:3a:d9:34:e7:b8:
         3a:da:47:ca:24:32:e2:b8:25:85:bc:30:82:d6:34:a0:af:ff:
         29:cc:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:34:13 2026 by rpki-client