Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7387f0d0-9219-321a-9b76-4e48a47da62c.roa
File:                     7387f0d0-9219-321a-9b76-4e48a47da62c.roa (raw, json)
Hash identifier:          K7WPlbnYHqORNoJzIjvUFsu0EfnXjDkceV1ejE/H6hg=
Subject key identifier:   92:F0:F1:88:63:B0:02:A9:B2:C3:C2:46:B9:2B:87:90:A2:6A:D6:F3
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584EA786EB94E6E8F86E81D93B00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7387f0d0-9219-321a-9b76-4e48a47da62c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22781
IP address blocks:        2607:fb50:1000::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:eb:94:e6:e8:f8:6e:81:d9:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a571bee6-3fd9-4e67-a334-f4a0bb0f766a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:3e:3b:de:fb:f2:ca:83:49:d4:6c:50:21:
                    02:48:47:7d:24:cf:ac:f5:2e:a0:44:5b:dc:aa:37:
                    32:4c:c5:7e:dd:2c:f1:b7:3d:61:ed:92:c9:45:1a:
                    19:2c:d7:06:af:b9:d7:dd:3e:d6:69:88:84:08:25:
                    32:a3:6e:43:dc:83:5b:b9:68:47:07:29:7c:b7:aa:
                    e2:d8:7e:d6:4d:b1:1b:ba:b7:bb:8c:82:c6:bb:e8:
                    d9:c6:e4:64:7d:cb:29:34:08:16:85:ca:f8:45:cc:
                    75:4d:0d:ee:01:72:46:af:48:d4:ff:c7:2c:f0:38:
                    9e:85:33:19:e0:bb:a5:08:06:87:1e:46:11:24:c4:
                    fc:ba:08:d4:dd:79:f7:fe:ab:fc:0a:b0:6b:b1:a0:
                    59:c6:6b:fa:3c:a9:44:1d:d1:eb:9c:e5:94:9a:e6:
                    ab:4c:a9:4a:ad:b7:c8:e8:49:26:00:fd:1e:0a:8a:
                    2e:ff:e8:a9:46:8a:92:30:25:a2:e1:17:69:87:a3:
                    e5:f6:fc:0a:9a:ac:78:2b:ab:5b:64:f2:d5:70:1a:
                    4f:d9:69:1d:04:e5:cf:07:d4:f3:c3:2e:8b:8b:45:
                    0f:02:32:6d:5b:1d:fd:04:a0:87:6b:58:4d:52:bf:
                    35:13:ac:40:41:a0:ef:07:25:d8:50:bb:fb:63:b1:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F0:F1:88:63:B0:02:A9:B2:C3:C2:46:B9:2B:87:90:A2:6A:D6:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7387f0d0-9219-321a-9b76-4e48a47da62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb50:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:81:4a:46:dd:a5:9a:81:cc:31:37:e9:ed:ff:af:21:95:1c:
         b7:2c:67:a3:6d:37:82:f0:45:9e:b7:82:b4:8e:ed:0d:c2:0f:
         3c:51:2c:4b:2e:ec:55:01:41:56:24:f3:bf:be:07:d3:dc:8e:
         bf:db:94:ad:db:ba:d4:7c:6c:74:1b:94:c2:58:aa:a3:dc:15:
         6b:cd:c7:18:de:2c:07:3c:7a:b7:b6:28:3f:6f:3b:d0:43:f6:
         96:a0:03:3d:8f:79:46:bf:64:ab:cc:42:a0:3d:33:02:0f:10:
         2a:a3:63:15:ef:98:0b:43:e9:48:10:a2:28:72:d6:8a:79:cd:
         62:65:96:e0:8f:d5:89:2f:56:da:3c:fe:c6:6f:3a:3f:80:15:
         7b:df:57:8b:b8:b7:d8:80:99:ef:5c:e2:c6:29:ad:49:6e:46:
         8b:80:a6:0b:ea:3e:d5:80:7e:87:2a:e6:96:07:a8:42:50:5b:
         7c:12:01:40:60:d0:a7:4f:fe:57:60:34:87:09:fe:37:64:92:
         9e:18:66:a6:d5:1d:f1:9e:8c:d3:53:1b:6d:15:4e:de:03:16:
         06:2f:d9:60:6c:10:90:37:da:13:e3:d5:f5:68:73:be:31:91:
         cc:c4:eb:53:06:8c:e7:2f:8d:c6:03:f1:13:38:05:25:78:de:
         18:28:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:43:02 2026 by rpki-client