Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d18d52c1-1350-360c-a5d0-ea37b0d73db5.roa
File:                     d18d52c1-1350-360c-a5d0-ea37b0d73db5.roa (raw, json)
Hash identifier:          4mKW1YGJYWt8MNa1vO7Tm28z8UNEbP4xGOdUh4VB2wQ=
Subject key identifier:   BB:DC:B6:A5:A6:2A:D0:99:31:2C:45:20:FB:C6:B9:81:E8:71:FB:88
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584E104ED2777EF5A791B0E5E5C0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d18d52c1-1350-360c-a5d0-ea37b0d73db5.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     22652
IP address blocks:        2607:fad8:c7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:d2:77:7e:f5:a7:91:b0:e5:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=46adaba4-0f26-4028-85ba-c19311d89b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:74:66:f1:c3:6b:b1:e5:a8:80:a5:ab:a1:
                    a4:80:32:9d:b9:b2:72:ea:38:77:34:46:4f:f2:ec:
                    48:f2:de:eb:7e:80:1c:02:13:cc:5e:3c:b3:4f:39:
                    fd:2d:73:1a:a3:b5:4f:38:61:c7:65:d1:20:08:36:
                    95:a0:13:ad:6a:92:2e:e3:eb:5e:c4:d0:9f:03:3c:
                    90:f9:02:99:c7:c8:ba:fe:67:b0:6e:8c:09:b6:34:
                    11:4a:15:2a:96:fc:38:2b:ba:41:16:e5:c7:50:e7:
                    e5:fe:07:10:9c:13:f8:37:af:65:34:b4:bd:50:72:
                    6b:63:dd:92:9d:a4:5f:a7:fa:28:01:9f:ee:f9:bf:
                    a7:24:10:b0:9b:f8:72:71:59:50:3e:68:01:eb:dd:
                    9c:34:4f:15:02:a7:69:76:5a:94:c1:cc:cb:f1:60:
                    c3:ac:aa:ca:e2:a9:9a:c7:41:6e:85:0a:c5:87:27:
                    ab:38:3a:23:14:32:f4:fb:25:c4:27:b0:77:16:70:
                    a5:63:02:28:bb:7e:70:37:f8:63:c8:78:84:3b:bb:
                    18:f2:67:e6:a9:72:1c:96:b5:f6:dc:e1:c1:99:6d:
                    b1:ef:f2:64:09:d6:b3:f4:85:ba:6c:09:82:c7:6e:
                    02:6c:f6:24:05:a8:e8:db:84:55:dd:b3:80:28:b6:
                    e9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DC:B6:A5:A6:2A:D0:99:31:2C:45:20:FB:C6:B9:81:E8:71:FB:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d18d52c1-1350-360c-a5d0-ea37b0d73db5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8:c7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ee:e3:5e:3b:ee:a4:9a:63:0e:d9:07:ff:82:2d:0d:a8:ad:
         c5:53:4c:91:58:43:29:95:30:bb:a0:b5:8d:bb:0e:0d:14:67:
         ba:a6:a4:a1:24:80:0a:e0:6d:45:f9:6c:d6:33:b3:db:90:47:
         65:29:ab:d9:89:2e:b3:96:f6:06:a8:a7:e2:e4:f5:4c:fc:fe:
         0d:fc:13:f8:7b:4c:56:be:cb:02:9f:67:d5:90:38:0a:ad:ff:
         b9:41:f9:66:1c:16:7f:fd:11:2b:3c:0d:61:cf:02:e8:c8:b0:
         5b:a3:c5:5b:2a:17:75:9d:d4:c2:ec:16:42:50:fb:00:5f:20:
         45:ed:84:45:7f:3f:e4:a5:8b:ee:a9:4b:44:01:9f:09:9e:da:
         53:7a:24:5c:1c:d8:d5:eb:0c:16:69:87:da:fc:c0:32:45:de:
         81:77:97:e1:ec:7e:6f:ea:e6:f2:f5:0b:12:de:a7:63:b9:eb:
         ac:b9:75:bf:30:17:38:ba:46:dc:cf:1f:42:09:cc:14:4c:17:
         92:31:02:24:c5:84:c3:a0:36:3d:b1:49:02:83:81:ee:a7:b1:
         a1:9c:cb:2c:9c:bb:2c:e9:fb:d0:65:05:80:78:ee:ec:a9:3e:
         ec:3f:d3:52:74:78:a9:1f:ce:66:8e:45:ae:d6:91:29:30:cb:
         95:18:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:13 2026 by rpki-client