Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa
File:                     30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa (raw, json)
Hash identifier:          CSjQVzzG+ehtt4B9ApA6tZ8MkqOiEDmf0RFGDZTh6EI=
Subject key identifier:   26:61:4A:6C:54:13:15:27:2A:4E:1F:00:8C:EB:7E:FD:F1:6B:2E:3F
Certificate issuer:       /CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
Certificate serial:       010D0C9F4328584EA79A644336FE05311A5A5200
Authority key identifier: 7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395934
IP address blocks:        2620:ac:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:64:43:36:fe:05:31:1a:5a:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bafb0c52-255b-4aa4-9b92-fe8ba5eea1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6c:8f:9a:cd:c6:c2:7f:1a:1c:ef:82:8f:ce:
                    8e:b2:e0:1e:b7:98:10:4b:cc:ae:e2:a4:9b:d8:0a:
                    38:3d:dc:39:25:6a:31:48:c9:e1:7b:65:c7:c2:58:
                    c5:c5:3d:82:49:68:74:fc:18:4f:fb:03:16:e4:d2:
                    f3:d1:81:5e:29:41:1f:2d:9f:76:8f:c6:d5:2d:b2:
                    d2:72:0d:ae:89:89:be:cf:f5:d2:0b:0d:4d:3a:bd:
                    28:8b:b8:93:7c:ed:e8:89:ac:aa:ce:91:99:86:c0:
                    fa:5d:ed:37:e2:4c:b4:ea:72:d6:fe:3b:62:c6:75:
                    2a:c2:7a:ec:b4:47:76:12:b7:ab:78:86:74:0b:1a:
                    ae:57:54:0d:14:91:bf:07:d5:7c:76:6e:32:aa:58:
                    05:cd:de:bb:33:43:0b:de:85:ce:be:9f:4a:ec:53:
                    92:b6:32:17:94:07:7d:0b:54:34:d5:ad:02:97:fb:
                    e4:b4:9f:32:f2:cf:8f:4a:bc:3d:eb:22:5e:03:7a:
                    32:08:5c:76:52:71:31:e0:7e:29:34:f3:58:6d:7b:
                    37:f9:2f:3b:04:63:c5:3a:b3:79:2d:83:f4:fb:3d:
                    28:87:42:5b:e7:37:e8:2a:93:62:04:17:be:7b:9c:
                    65:a6:8b:f5:fc:cd:be:7d:ba:90:53:27:f1:b4:1a:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:61:4A:6C:54:13:15:27:2A:4E:1F:00:8C:EB:7E:FD:F1:6B:2E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl

            X509v3 Authority Key Identifier:
                keyid:7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ac:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d9:23:dd:2c:c9:95:5c:2c:6a:4d:2a:52:16:77:2b:9c:61:
         07:f9:4d:b2:33:36:ed:f5:ac:1e:89:a7:b4:48:e9:91:3a:c9:
         61:33:db:b5:74:81:21:b0:f7:a2:a6:a6:9e:68:bf:13:f3:c0:
         aa:a2:71:2d:14:c5:d5:31:f0:c3:ef:5d:27:2d:fa:b4:82:5e:
         35:b8:43:2c:c2:09:84:c4:a8:b9:cf:39:63:3d:e4:ae:71:67:
         5c:19:dd:f1:97:d2:44:69:7c:51:ac:1c:1a:7c:9c:94:4a:1f:
         fc:67:d1:2c:5a:d5:39:38:34:8a:fb:18:1e:24:44:4c:fe:9b:
         b6:91:3c:d2:9a:12:b2:ee:d5:0c:31:e2:3d:74:a9:a3:8b:c3:
         cd:a0:93:95:8f:a4:47:6f:16:48:40:51:41:22:cb:07:bf:d0:
         f6:82:ab:4a:b9:3c:f2:5c:1c:3e:db:e9:1e:9e:2f:a8:44:c8:
         07:85:ff:b1:13:67:98:a1:96:0b:1c:86:be:f7:0c:d2:0b:34:
         8b:ea:2e:cb:93:e1:e6:59:3f:4b:de:0b:57:9a:27:dc:d5:22:
         f7:4e:df:4f:b9:18:45:c0:a7:da:46:6a:aa:e2:f8:cb:31:14:
         4b:cb:64:e4:40:cf:35:24:8e:a7:21:7e:2e:94:41:31:d2:26:
         16:b1:48:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:10:17 2026 by rpki-client