Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa
File:                     c47f8c8a-a763-38be-9577-076076c9c6f9.roa (raw, json)
Hash identifier:          Jwhu6GsIEewMz0dXBKN/8ykhBnowfbAp6ZdQvswlpUU=
Subject key identifier:   1D:80:F4:C5:21:A1:91:F2:4E:0C:98:A9:C7:99:B8:8B:8A:5C:86:75
Certificate issuer:       /CN=086f01d4-c895-4205-9b95-29c50942197b
Certificate serial:       010D0C9F4328584DE84B43B765D640F157EDEE00
Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     7050
IP address blocks:        2606:8700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:43:b7:65:d6:40:f1:57:ed:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=b2f0effb-adf3-4e3b-81eb-4740e0d699cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:a2:cd:31:c3:d0:76:eb:de:77:dc:ff:b8:
                    c1:fb:43:08:a5:04:b8:b4:d9:11:5f:25:40:15:1a:
                    52:a0:fd:51:f4:55:c2:ee:d0:f7:ac:ee:0d:03:d3:
                    c5:30:b7:11:de:5c:94:e0:d3:08:cb:91:fc:68:50:
                    b9:06:f0:a2:04:28:16:de:41:a5:e0:0c:40:61:83:
                    df:0f:5d:a9:e2:e4:c5:6a:68:be:78:c0:73:f8:38:
                    dc:29:26:3f:eb:48:5d:7a:14:5a:e1:d5:b5:89:c7:
                    53:74:ec:00:83:eb:c4:71:bc:2a:da:a9:f6:60:be:
                    9f:d8:68:f8:57:ff:06:0d:8f:8c:5f:5a:7d:94:37:
                    18:25:b3:0c:55:ce:6a:85:bb:bd:20:76:c3:4f:b1:
                    75:99:fd:52:b0:f6:21:9b:2e:ce:2f:3d:45:7a:ab:
                    38:8e:61:58:23:b4:7f:2b:03:3b:f4:6a:95:8f:02:
                    89:46:8d:7a:0e:5c:27:27:3c:d8:cf:27:5a:68:5e:
                    c4:fa:9f:c8:2e:0a:83:43:e8:41:56:88:c0:21:8b:
                    d0:d4:f9:e4:98:54:7b:a8:1b:fd:9f:d5:98:ae:21:
                    18:22:e7:f3:94:13:3d:1a:ee:27:0d:db:b7:0c:e3:
                    c7:63:0c:d3:c6:d6:15:7a:4d:ba:7f:24:6d:08:b3:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:80:F4:C5:21:A1:91:F2:4E:0C:98:A9:C7:99:B8:8B:8A:5C:86:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/c47f8c8a-a763-38be-9577-076076c9c6f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl

            X509v3 Authority Key Identifier:
                keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:88:87:49:bf:cb:3e:0d:23:c6:ea:37:12:b5:71:71:f6:
         d8:65:b2:60:d0:88:f9:a1:ab:ce:8a:c4:65:05:1e:0b:29:ec:
         b1:59:0d:08:13:46:03:98:cd:34:cb:af:3c:5a:e7:20:db:4f:
         79:29:53:de:06:ae:fc:94:ae:54:ef:dd:9f:d1:df:f4:f4:5d:
         15:0d:dc:06:be:9c:e8:70:60:5b:1e:fc:ac:b5:cd:07:95:d8:
         40:91:2f:b9:cf:47:38:b0:84:19:25:00:0a:12:b1:bb:e4:b1:
         70:ec:fe:eb:17:04:fa:87:5c:17:e8:18:92:ec:97:45:48:38:
         72:6b:86:32:03:83:16:42:22:b2:7b:59:d0:51:27:fd:ac:c8:
         e7:d8:f7:ba:8e:7c:f5:d1:be:06:df:5a:2f:f3:98:be:f1:37:
         50:bc:47:89:8b:e7:2b:c1:95:8e:4f:57:da:43:8f:d9:f7:e8:
         5a:fc:83:98:66:e0:c0:27:1d:e9:51:7d:7d:78:e4:46:11:f2:
         b8:33:a3:11:71:40:7b:9e:93:cc:f5:52:84:db:44:b2:e3:b1:
         ea:2c:97:9b:1d:bb:da:26:5b:5d:26:27:ec:9b:d4:40:14:18:
         aa:ab:36:d4:53:f6:fb:61:f6:07:61:ae:39:ac:7b:c2:a7:fa:
         08:b3:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:35:08 2026 by rpki-client