Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa
File:                     f1da8eef-2bc0-3710-a530-fd8280e346c5.roa (raw, json)
Hash identifier:          f2PSAJM6S3x7Yc67I/pSgSTt6sKwf6qQNwsnQp170Ls=
Subject key identifier:   7F:BE:D2:7C:12:46:69:58:47:03:8C:F6:09:4F:AD:7C:A1:52:65:14
Certificate issuer:       /CN=d50d9265-ed86-4e53-88b9-cd56c607704f
Certificate serial:       010D0C9F4328584EA788BDCC01C4B573F1CC9440
Authority key identifier: 00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400438
IP address blocks:        2606:afc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:bd:cc:01:c4:b5:73:f1:cc:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50d9265-ed86-4e53-88b9-cd56c607704f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=92577636-7300-43a3-8c7b-abfdaeb7e207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:96:25:88:3a:f1:dd:ae:45:0d:03:2f:d3:
                    1b:18:58:6b:0b:32:cc:13:3d:df:09:f8:5f:d8:6c:
                    19:70:63:14:fe:33:f6:cc:e1:b4:4a:ca:f1:e1:d2:
                    b3:78:01:a5:b5:86:21:1c:2f:3a:64:75:b6:06:0d:
                    20:45:02:74:0e:b8:cf:b5:4d:a6:05:f0:3f:38:ff:
                    46:79:37:89:74:ca:d6:9a:62:a4:43:41:dc:67:33:
                    90:b4:97:42:a0:cc:9d:4d:6a:80:b6:60:18:73:7e:
                    f6:7f:df:df:06:84:c9:09:b2:75:35:91:2a:f2:a4:
                    72:e5:8b:31:0c:5c:ff:82:d2:b9:64:fa:6a:09:aa:
                    74:07:33:c1:93:5e:45:65:ae:98:27:f2:14:19:0d:
                    6f:ca:9a:3a:53:71:2d:0f:16:1f:62:50:db:e2:4c:
                    03:39:4d:6a:06:42:ac:ae:9a:51:52:2d:c0:9d:15:
                    95:77:e6:2c:9f:58:9c:41:c0:74:05:a4:b7:78:f7:
                    59:ae:12:d1:2d:cb:4e:65:a8:3a:0e:0b:e3:06:8c:
                    80:73:d4:db:ca:97:ec:ef:2d:e8:f2:88:b4:bd:88:
                    5c:07:fe:d2:cb:6a:ad:0d:37:1e:a7:c8:1f:b0:35:
                    da:32:ee:f6:bb:d9:02:c3:1b:15:46:4c:a9:25:b1:
                    eb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:D2:7C:12:46:69:58:47:03:8C:F6:09:4F:AD:7C:A1:52:65:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.crl

            X509v3 Authority Key Identifier:
                keyid:00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:afc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:4d:88:bd:88:11:d3:d7:af:2d:a9:42:13:3e:a0:60:94:da:
         a2:a6:84:a4:30:07:ce:a6:c1:f0:66:e9:06:15:a9:78:ea:7f:
         60:d3:8b:83:4e:68:c3:0b:55:4d:b1:0b:a7:28:23:52:65:a8:
         55:59:40:0d:02:a3:a8:58:1d:f9:30:de:49:c7:a4:c2:b4:10:
         05:98:75:0c:ce:1c:a7:53:38:1d:43:b2:34:f1:09:bb:17:c7:
         2e:bf:4f:d0:a1:8b:6e:a3:95:3a:87:0a:18:eb:f7:1c:f9:52:
         a9:aa:2b:32:b5:8c:5d:cb:4d:d1:18:cb:d1:ce:14:ec:c4:49:
         f5:ac:a4:0c:ac:c5:87:c4:62:5c:9f:47:f4:c8:50:b9:3c:d6:
         1c:6f:09:c7:33:1d:17:31:a3:40:55:ac:3e:a6:72:b9:44:17:
         5b:79:38:80:33:44:60:fd:0a:5b:01:0e:e5:a7:1e:b3:91:e9:
         47:90:9f:40:cb:31:cf:d3:87:f8:88:c1:e8:b7:83:66:21:fd:
         a1:44:9c:c4:36:bd:6a:90:8a:65:90:e9:54:8b:69:8c:9e:4a:
         6a:eb:dd:41:a6:83:63:5c:b6:f7:ea:66:4d:56:27:86:f1:f4:
         80:80:62:e2:2f:6c:50:e9:5f:3c:ad:70:74:39:12:78:93:19:
         e8:d9:ea:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:08 2026 by rpki-client