Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa
File:                     6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa (raw, json)
Hash identifier:          fdBlDrCRiTPym+0s/HRW4Ih0A/PcwNVnOP03XB8D/nw=
Subject key identifier:   D2:B5:65:1C:68:20:FB:1D:39:B2:D6:31:0C:45:B4:EA:82:84:32:04
Certificate issuer:       /CN=ba2f27f4-9270-4d20-9b84-034ca573f183
Certificate serial:       010D0C9F4328584E9BE5186E1879C6B40F71DE00
Authority key identifier: 67:B2:53:ED:68:85:C3:B6:CD:96:EE:83:4F:31:0C:4D:D6:BA:6C:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     397375
IP address blocks:        2602:814:3000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:18:6e:18:79:c6:b4:0f:71:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2f27f4-9270-4d20-9b84-034ca573f183
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=d7481379-4f9a-4eff-9a55-028d6d8a50db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:13:4e:fa:02:76:f6:8a:db:f9:10:58:29:
                    13:8b:4d:92:c7:cd:35:d7:8b:0a:8d:36:bf:bb:9f:
                    3f:5c:38:e2:32:63:c8:b4:e3:c6:36:a3:67:4a:fe:
                    36:60:71:23:8f:f9:b6:01:04:2e:68:a5:a8:b9:8a:
                    a5:64:13:2a:f2:a7:7d:e6:bd:f3:11:fe:fa:6d:4f:
                    3a:d5:32:67:e8:7f:18:66:04:87:ff:3a:d6:2c:c8:
                    9f:e1:72:98:76:58:bd:b1:89:49:41:31:ff:6d:6a:
                    fc:43:b5:53:96:f5:e2:ad:58:9b:2e:eb:ee:05:ce:
                    6f:87:18:b6:34:68:d9:1a:a9:d4:fa:e4:db:11:7c:
                    28:7e:fc:31:51:5c:d1:e0:96:6a:15:c8:1c:9c:5f:
                    c2:2b:03:4e:a9:df:64:6a:e7:27:8c:3a:d9:c2:70:
                    c4:b0:7f:d9:1c:5b:fb:c2:a3:76:71:88:55:55:da:
                    67:06:29:d8:aa:bf:13:00:29:81:76:59:d7:1c:d6:
                    ce:07:ce:af:c1:91:b1:22:fb:ee:c5:b7:48:b2:6d:
                    2b:20:eb:92:97:17:34:bf:69:41:c3:93:a6:6c:b3:
                    ff:cb:a1:4e:44:f3:40:c1:18:e3:9a:b1:32:d3:e6:
                    06:c3:c8:51:59:bb:4d:0c:7c:30:69:29:81:99:7c:
                    34:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B5:65:1C:68:20:FB:1D:39:B2:D6:31:0C:45:B4:EA:82:84:32:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.crl

            X509v3 Authority Key Identifier:
                keyid:67:B2:53:ED:68:85:C3:B6:CD:96:EE:83:4F:31:0C:4D:D6:BA:6C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:bd:f3:cc:7a:1f:ff:04:87:3b:b0:ab:a1:7c:8f:11:6c:e4:
         ab:c8:95:e8:2a:7a:4c:90:0e:af:be:5d:e2:b6:fc:97:16:e4:
         df:6e:9f:4d:8d:c2:7d:4e:56:ef:d2:4b:06:af:b1:f0:21:be:
         42:12:00:60:91:d5:9d:fb:81:c3:ec:a9:b9:52:70:ba:dc:0d:
         ce:3a:f6:36:cb:f6:59:e2:ad:2a:71:06:64:c6:f8:9b:6e:8b:
         81:1c:2c:78:71:09:5b:bd:c2:45:ec:8e:65:7d:75:1a:56:8d:
         07:c6:c0:1e:3b:84:ce:da:e1:84:98:42:6e:68:f3:79:19:0a:
         ce:b6:76:c2:84:7e:80:c0:df:59:ab:72:89:12:f9:30:cc:d4:
         92:3d:d9:19:94:8d:d0:67:a7:85:c0:7f:71:9d:92:66:77:87:
         e3:92:60:6d:59:43:1a:83:18:d9:5e:57:ad:1c:0b:c4:ec:b5:
         f8:29:00:80:81:94:30:6e:02:af:7e:4b:f0:32:60:2b:bb:a2:
         60:7b:f7:ee:9b:4a:5d:ed:20:a7:27:3f:37:59:71:bd:c2:1c:
         15:7e:80:ea:0e:6d:ff:3b:1e:89:60:03:94:15:7f:d4:ac:f9:
         ca:c8:28:80:e7:90:c8:a2:fb:07:54:8a:c2:f1:63:71:ec:48:
         47:d2:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:49:26 2026 by rpki-client