Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa
File:                     9b7f43c6-1d60-387e-983f-5d6104c900dc.roa (raw, json)
Hash identifier:          2L2xpHRdVVOJduXsoqetJF8w06RrWFjxTnMhuzzN3RE=
Subject key identifier:   76:E1:1A:11:48:66:7B:94:5B:CB:B4:08:94:BB:6A:B9:90:A5:B1:FB
Certificate issuer:       /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Certificate serial:       010D0C9F4328584EA788A843F246926ACA002E00
Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30006
IP address blocks:        2602:f7df::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a8:43:f2:46:92:6a:ca:00:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=49e04b36-ccea-422c-99a5-4652dc2e9e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:95:fb:0d:81:00:40:55:dd:66:aa:a2:bf:
                    6d:ee:66:70:c1:a5:bf:ca:34:54:a4:1a:79:b9:fb:
                    61:66:6c:63:29:16:6d:71:66:90:db:c4:81:79:88:
                    99:63:e0:6b:57:62:a2:d5:2e:49:9b:95:ec:0f:c2:
                    c0:04:d1:40:3e:ac:1c:f8:66:f1:33:29:eb:cc:48:
                    55:7c:ea:60:8e:55:38:d7:40:70:73:ef:a6:e4:a0:
                    0c:2a:bc:c8:b6:f1:a3:63:25:99:f2:ad:24:12:13:
                    3d:c9:09:da:9a:44:8b:af:9e:95:2e:ee:4b:39:d6:
                    ee:cf:98:8a:d0:e3:b0:c4:11:91:ba:e5:e9:1d:18:
                    2c:ef:63:2e:cf:04:1e:56:d8:7f:6a:71:94:33:a0:
                    52:c7:d3:9a:ff:54:03:e9:fb:03:10:fc:2d:6f:b1:
                    52:0b:d9:e2:a3:95:66:39:c7:94:63:da:78:87:6d:
                    80:8e:55:ee:c3:6d:80:bc:01:cd:c4:92:b1:26:07:
                    1d:88:c4:70:c1:77:d3:2d:2e:bd:9b:2b:2c:e7:fa:
                    5f:a6:18:2e:b5:26:47:2c:2f:0d:dd:cb:3e:cd:57:
                    61:bc:6d:4e:86:7a:3a:41:6d:37:28:ef:75:75:11:
                    48:93:b1:d7:64:2f:03:c2:c6:44:b8:1f:74:db:57:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E1:1A:11:48:66:7B:94:5B:CB:B4:08:94:BB:6A:B9:90:A5:B1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl

            X509v3 Authority Key Identifier:
                keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:28:a3:5f:a1:8f:95:92:5f:07:91:25:2f:cb:9f:2b:3d:
         c6:d6:30:8e:dc:c6:18:8d:57:3d:61:00:23:11:0a:84:ec:ca:
         01:4a:bd:71:25:d3:cc:f4:73:01:db:ac:a8:8e:5a:44:fd:88:
         3a:32:27:4e:e6:44:a0:12:0e:f4:9a:56:af:a1:25:32:4d:08:
         4d:34:b1:99:55:fe:99:2d:53:40:0e:e8:79:0e:2c:5c:f6:01:
         a1:96:2b:57:77:8e:a5:a9:2b:81:bc:65:11:d9:d8:5c:1f:2e:
         c3:01:39:71:4e:cf:da:b6:e0:e8:17:8d:f2:07:ca:7d:dc:e1:
         a9:ae:4e:83:c5:c6:7d:33:de:9a:66:34:b3:c6:28:69:60:a8:
         b8:ac:ba:a0:d3:12:d3:3c:da:92:03:65:35:3e:f9:1d:a9:db:
         4e:2e:e6:ff:c6:ff:45:a8:c7:d5:9d:f9:70:5a:23:34:25:a1:
         ea:fb:a2:0d:34:c4:51:b1:1b:93:9f:13:a8:64:b1:af:a7:e5:
         01:cd:1a:c2:aa:c3:af:cd:c6:9f:3a:d6:4d:19:b4:ea:f5:23:
         8a:c8:7c:b2:04:ef:93:70:a7:fd:46:28:0c:fb:5c:dc:2a:f7:
         4d:43:31:75:d9:9f:da:42:8e:fc:3f:a0:06:90:5a:b9:db:f8:
         da:9a:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:36 2026 by rpki-client