Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda04578-1852-37e8-942d-696b643a77de.roa
File:                     fda04578-1852-37e8-942d-696b643a77de.roa (raw, json)
Hash identifier:          Zu/YNeRS4CDljKlwX988KReI0hIDd7aWooasCpjbBZE=
Subject key identifier:   5F:D2:6B:6F:40:05:98:D9:FE:67:85:67:BA:C2:8D:26:24:FB:38:10
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584EA7978B8B9356E88031DE6A00
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda04578-1852-37e8-942d-696b643a77de.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6517
IP address blocks:        2607:ffd8:ff02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:8b:8b:93:56:e8:80:31:de:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ef654305-a89a-44af-9517-c602a0295684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:de:c6:ca:af:95:89:cc:c2:a3:9b:50:e6:
                    2e:ad:b6:f4:b9:a3:65:4b:0e:11:a7:f6:f3:cf:ee:
                    21:d5:00:33:e4:65:af:e4:07:61:39:b1:52:d9:54:
                    2c:78:13:f1:af:ed:70:97:22:ca:85:29:8a:f1:49:
                    24:80:f6:39:a3:dc:b7:f2:9e:6c:b4:45:53:0a:f0:
                    49:09:b6:f2:04:70:83:d3:70:29:17:cf:65:0c:2e:
                    b8:1c:78:af:42:42:f8:18:39:9c:f1:f1:49:09:05:
                    88:16:f2:bc:eb:d9:28:a7:e9:14:3e:bf:4b:85:86:
                    06:2e:3a:64:1a:43:6a:bd:b3:87:5a:d8:7e:88:94:
                    74:b3:57:47:bf:23:cc:e7:da:7c:98:60:2d:1d:5c:
                    15:de:5a:e7:50:99:32:d9:a7:f0:a5:ae:6b:4d:66:
                    71:ce:e4:44:fb:c2:f4:e5:44:d1:86:ef:bd:15:20:
                    7d:6f:08:89:08:e4:de:c7:dd:99:93:94:81:48:e3:
                    26:9c:09:25:06:3c:75:b1:fa:86:82:6b:1d:93:bc:
                    19:a9:ba:09:d0:fe:f2:1c:2e:28:1d:9b:09:d1:2a:
                    02:a8:f2:82:4c:60:29:8b:13:6f:1a:9f:99:16:45:
                    77:3e:61:6c:82:e0:73:9f:f7:ae:d7:95:1f:4a:da:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D2:6B:6F:40:05:98:D9:FE:67:85:67:BA:C2:8D:26:24:FB:38:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda04578-1852-37e8-942d-696b643a77de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffd8:ff02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:91:4e:ee:95:88:ff:c6:e2:a1:ab:cf:2d:5d:db:44:ac:
         4f:be:f2:b4:27:9b:d0:0c:99:d4:99:97:24:c4:b4:63:85:da:
         75:08:e7:2f:3e:bd:26:83:e2:1c:a3:a7:d2:44:dc:a3:45:64:
         a5:e6:e9:78:6e:cc:d4:f8:94:9a:fc:84:8c:24:12:dc:84:86:
         48:ee:42:c1:ea:12:54:7d:e7:e1:8a:c9:3d:47:55:8c:5f:80:
         14:37:8f:fe:60:8a:03:e6:b7:31:b4:0f:de:95:f1:50:2b:9f:
         07:36:d8:96:ee:d0:ab:0c:9d:a4:1d:ce:22:5c:f3:3d:5c:1b:
         20:73:b8:cd:ad:ee:ca:f6:09:6f:84:f7:54:ae:4d:b8:6e:0a:
         bf:4f:bb:ec:1a:8f:66:b9:63:64:bd:40:01:e8:09:42:f9:62:
         3e:48:04:96:f7:84:15:66:be:11:6e:f1:39:3b:91:72:53:37:
         09:04:ab:f6:78:e1:cf:cf:b6:20:1a:46:1d:21:d5:59:c8:53:
         fa:2d:3e:52:38:1b:67:45:a6:61:7c:98:c4:50:87:3a:1f:26:
         d5:80:c8:83:c7:25:36:4b:08:97:c4:0f:12:1e:65:99:85:eb:
         80:ac:18:1e:95:a5:31:ea:ce:97:7c:e5:51:25:e8:ff:fa:ba:
         48:a1:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:56 2026 by rpki-client