Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/fdb7d79b-8caa-37cb-a97b-0a2767b34ea5.roa
File:                     fdb7d79b-8caa-37cb-a97b-0a2767b34ea5.roa (raw, json)
Hash identifier:          vveXYGA3yn5ejSYFTMXHqDsO6c9HOAy7pGJmAZpuhVo=
Subject key identifier:   04:58:5C:E2:49:34:30:BE:D5:03:1E:F1:44:C5:42:5F:FD:3F:2D:A8
Certificate issuer:       /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Certificate serial:       010D0C9F4328584EA7947481E9E2C019EE5599C0
Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/fdb7d79b-8caa-37cb-a97b-0a2767b34ea5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2606:a440:4::/48 maxlen: 48
                          2606:a440:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:74:81:e9:e2:c0:19:ee:55:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aef55444-30cb-47a4-88be-174ed19b3a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:f3:60:9b:65:e2:92:fa:a2:96:66:e1:0e:
                    73:de:29:92:74:82:fb:7d:75:75:18:9e:eb:97:b9:
                    0b:ee:9f:f5:12:b0:b3:ca:fa:1f:47:26:fb:92:ce:
                    d7:01:38:85:c3:8b:0b:c3:57:92:cc:2c:84:12:af:
                    d6:35:13:22:55:37:86:e7:24:f3:d1:f4:6e:88:3f:
                    0e:3d:34:e6:fb:d3:37:fd:b0:87:e4:a9:4c:83:80:
                    3a:d5:32:1a:21:e1:e3:91:5f:67:98:57:77:1d:7a:
                    d6:97:51:92:2a:86:41:50:7e:f5:44:65:ce:76:4e:
                    fb:50:a0:a0:0e:a6:5e:3c:88:97:ce:3f:0d:f3:29:
                    0a:5a:5a:99:05:f3:4e:bb:02:7f:70:50:ad:2d:4b:
                    a4:ea:9a:be:2f:c4:54:39:77:a0:0a:b6:b1:80:cb:
                    93:a9:ed:fc:bd:f7:7a:f9:06:51:11:2b:a0:11:b4:
                    4c:67:af:91:5d:9e:50:98:a4:a0:fa:ce:27:a8:5e:
                    5b:ce:d6:1e:03:bd:dd:43:1f:1b:28:10:2f:e8:74:
                    3b:d4:22:c4:f6:c8:00:b5:97:38:bd:56:35:65:f1:
                    bc:c4:13:5a:80:4e:8a:9d:b2:50:8d:ea:83:b0:6e:
                    25:99:1b:7d:ac:98:f7:f7:65:a2:9c:26:3d:c1:8d:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:58:5C:E2:49:34:30:BE:D5:03:1E:F1:44:C5:42:5F:FD:3F:2D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/fdb7d79b-8caa-37cb-a97b-0a2767b34ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl

            X509v3 Authority Key Identifier:
                keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a440:4::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d9:ab:01:34:d8:93:12:e9:fb:21:6c:10:35:0f:89:d0:e9:
         1d:9b:e3:2b:07:cf:ec:b8:1b:42:68:a5:35:42:c0:b9:03:e7:
         84:da:2e:80:94:92:3d:be:66:94:bd:d1:09:bd:98:70:4f:8b:
         8e:98:74:67:3a:43:42:cf:6d:81:df:15:e7:b9:a7:f1:98:6e:
         f8:e5:26:9c:8e:37:a5:d6:86:55:97:ec:62:62:a4:15:aa:86:
         e1:20:c5:c5:eb:0d:d4:7b:8e:a3:40:49:6f:2b:1d:fc:a7:df:
         99:bf:86:0d:ef:9b:bc:25:59:58:c3:59:47:d2:b8:6f:d8:bc:
         6e:f9:74:59:de:24:99:24:d7:80:bf:89:07:7c:c7:f7:a3:f3:
         0a:7c:62:e4:9f:30:29:68:1b:d9:81:1d:ed:e0:9d:0b:34:0e:
         22:85:d1:0d:aa:63:f0:05:94:16:e6:ba:f7:ec:e9:db:3d:f0:
         a9:af:94:20:ca:9e:f6:5f:df:7c:ef:ba:fe:e6:07:46:65:89:
         2e:ac:54:82:82:17:cb:e9:aa:55:91:06:90:fa:18:d3:e6:e6:
         0a:3c:ce:5c:a7:03:49:dc:11:76:56:33:50:ad:01:c5:cb:32:
         74:23:26:d6:26:75:09:56:42:64:7c:4e:da:d6:d3:ca:f3:69:
         87:f4:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:43:19 2026 by rpki-client