Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/ea48664e-7f29-35b5-bcf7-47161f22fb58.roa
File:                     ea48664e-7f29-35b5-bcf7-47161f22fb58.roa (raw, json)
Hash identifier:          u8DMfDTey4yxvVbvgKxiGilfyVWdxRf72uoKIUsboWs=
Subject key identifier:   AA:FD:AE:A9:8E:E4:A9:98:10:3F:C7:47:75:5F:6A:97:D5:21:A1:B8
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584EA7973F8F5EEA6BB4AB0A6100
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/ea48664e-7f29-35b5-bcf7-47161f22fb58.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     57974
IP address blocks:        2602:2d4::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:3f:8f:5e:ea:6b:b4:ab:0a:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e6ebf2f1-9904-468c-8771-39c162e15ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:5d:5b:ab:4b:17:0f:a0:ed:81:b3:76:35:
                    0b:c5:70:0c:5c:ba:8a:1e:18:08:a3:0a:64:d9:85:
                    a3:1a:52:f1:fd:17:a6:12:4f:e7:8d:51:8c:36:80:
                    78:41:d5:8c:33:74:8b:53:c3:6e:e0:85:b0:71:34:
                    63:0b:fc:f2:b3:a6:e2:b7:db:93:a1:38:35:34:87:
                    25:80:9f:65:ea:f5:2a:75:46:7a:ba:a3:32:9f:89:
                    2a:db:c6:ce:63:fa:38:bf:70:f9:27:99:28:6b:e7:
                    70:7b:95:6a:67:ca:27:15:5d:22:22:8a:75:7f:68:
                    46:18:14:da:dc:96:f9:c2:20:ea:96:74:11:c2:ab:
                    35:df:18:77:dc:af:f3:24:39:78:e1:ed:c0:41:01:
                    0d:ce:43:2e:15:ac:07:59:fb:ff:39:5b:d8:a2:2d:
                    35:6b:05:c3:1c:ae:55:19:b6:07:80:52:7a:92:51:
                    6d:03:d2:21:35:7d:bc:41:39:14:e4:05:40:8c:86:
                    19:09:50:b3:f4:c9:e8:a9:ef:2d:b0:c8:35:66:78:
                    98:af:42:e6:bd:25:aa:65:ed:f2:a2:81:0e:f5:b4:
                    09:48:78:56:01:b0:e8:53:a9:e3:92:b9:a6:b2:6a:
                    53:7f:3b:31:68:04:95:39:5f:ea:29:40:cf:15:b6:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:AE:A9:8E:E4:A9:98:10:3F:C7:47:75:5F:6A:97:D5:21:A1:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/ea48664e-7f29-35b5-bcf7-47161f22fb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:d3:56:f2:91:b9:f5:9b:39:b6:a0:c7:78:7d:3d:9c:50:17:
         0c:e2:b1:dc:d1:50:3d:17:93:f4:03:dd:fb:67:cc:01:91:60:
         85:cb:91:78:94:f5:d2:7f:ff:58:78:f9:48:28:df:59:b8:b5:
         d5:a2:3d:04:6c:eb:39:a3:80:83:87:51:4b:36:f4:18:a5:6f:
         ab:e6:be:38:6a:f4:23:21:8c:f1:31:27:6c:23:c0:93:43:cf:
         40:34:20:c8:91:5c:6f:56:f6:70:6e:34:c1:20:2a:47:0f:b8:
         a9:14:71:7f:2f:20:31:c1:c6:83:a5:4e:3f:ed:01:43:1c:bc:
         c8:05:11:7e:bb:a0:3c:7a:5b:80:89:0a:e9:f5:58:95:38:03:
         f2:62:55:82:ac:b7:7b:cf:1a:dd:be:65:d5:7e:ea:10:f9:5e:
         f1:8a:31:8d:1d:23:fc:c1:12:1b:ee:ea:71:29:57:82:91:14:
         89:71:09:aa:30:7a:02:11:c1:a6:65:99:78:d4:0f:4f:0e:e7:
         f5:ea:41:87:2f:13:67:be:1e:dc:87:83:90:37:5a:72:bb:4c:
         a1:34:6c:8f:bd:4e:87:39:68:c7:30:6d:98:91:a3:75:dc:9f:
         91:87:ce:f5:46:5b:bb:80:bf:cb:bc:73:80:68:d4:44:93:b3:
         c2:41:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:24:58 2026 by rpki-client