Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3461eb29-77a1-3af2-b9c7-4d61df31689a.roa
File:                     3461eb29-77a1-3af2-b9c7-4d61df31689a.roa (raw, json)
Hash identifier:          5oOGu9xf6DQAJluB/raTAFP20+O9nWmPlXj0UbWTmN8=
Subject key identifier:   1A:5C:E1:A0:5B:86:43:2E:DB:69:ED:27:B0:6A:72:ED:E1:FD:A6:95
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584EA79122F0108D0CFDE2380180
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3461eb29-77a1-3af2-b9c7-4d61df31689a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19165
IP address blocks:        2604:5500:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:22:f0:10:8d:0c:fd:e2:38:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6a258b8b-71de-4d6e-b619-1e6bf816fbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:04:6b:05:56:a6:da:e5:02:15:37:f3:bd:
                    9d:a2:85:ef:37:6f:1e:ea:ff:17:68:c3:f7:5e:04:
                    c2:5e:a7:f4:8e:96:00:a9:63:f3:3c:5f:47:d5:32:
                    25:27:ce:ba:87:69:38:3d:15:96:90:2f:bc:5b:b1:
                    78:f9:68:22:dd:e7:20:e0:3e:d3:47:36:87:c6:3c:
                    66:16:28:d2:4d:3a:1e:61:9e:b5:d8:ef:6d:b0:b2:
                    61:eb:cc:6a:fb:89:f5:44:92:8b:c8:e3:02:2e:61:
                    24:da:85:a9:e7:96:ba:cb:1a:cc:6e:ba:11:a2:b1:
                    82:4c:bf:cd:eb:9d:75:b5:05:63:9e:0f:77:cf:7d:
                    fc:61:a2:78:2e:32:95:3a:2d:3e:6a:6e:ce:66:7c:
                    eb:32:49:6b:23:f5:6f:6a:75:96:90:e5:e0:2e:bc:
                    6b:a7:6b:76:70:69:06:7c:af:26:06:e8:92:5f:4b:
                    5f:65:67:d6:a5:93:ba:ef:e4:52:b3:c7:3b:31:26:
                    89:92:c9:cf:d7:53:ee:3d:6d:7b:b0:9a:0a:a2:22:
                    79:44:04:39:6f:09:0c:09:4f:d9:70:ed:a9:0c:07:
                    02:eb:ce:f5:de:49:be:7f:7f:94:33:d6:2a:19:ff:
                    3a:e2:63:b3:ef:d1:b6:a0:d7:a5:9a:0b:5b:41:19:
                    ee:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5C:E1:A0:5B:86:43:2E:DB:69:ED:27:B0:6A:72:ED:E1:FD:A6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3461eb29-77a1-3af2-b9c7-4d61df31689a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c0:4d:f5:6d:8e:96:6f:0c:1c:d7:f5:e0:73:e3:05:2a:69:
         ab:80:a7:df:ef:6b:1c:62:1f:f8:3d:11:f4:89:b5:d9:79:fd:
         cc:b2:95:bf:53:c1:eb:96:b7:ac:8a:7e:fe:60:2c:3b:00:d6:
         d1:5a:44:3c:b8:53:94:92:78:00:38:47:94:6b:6d:d6:08:f8:
         ec:f0:22:44:ec:d4:1a:26:7b:ca:da:ed:91:58:50:26:d8:7b:
         0c:e2:ed:15:27:38:4d:2a:d0:a8:43:90:46:ea:22:d7:68:f7:
         63:4e:64:44:99:82:b2:77:de:e6:9c:a3:fd:7f:4c:1d:b2:e8:
         4b:82:06:0b:18:df:71:e2:00:71:fc:7f:be:f0:16:74:c2:7c:
         90:47:14:d9:10:b7:cc:29:7b:95:a8:07:be:93:79:de:50:52:
         6a:d5:8b:53:0d:29:b6:f4:3b:72:64:94:23:cb:ba:8e:54:80:
         44:9a:6c:13:f1:4f:62:a9:b5:07:e6:d6:12:37:77:f3:38:fa:
         99:85:ed:7a:48:26:b7:00:79:0f:51:9f:63:59:38:cd:8c:ec:
         d6:3f:5a:4e:a7:bb:c5:6a:8e:c0:31:f3:bf:de:72:8f:94:b1:
         69:ef:a4:ad:20:2b:7b:20:0b:c5:fb:f2:37:98:00:3d:4f:4a:
         f9:81:1b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:59 2026 by rpki-client