Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa
File:                     5b7d3556-28e1-360c-9a9e-a01bb7111857.roa (raw, json)
Hash identifier:          BS1k9kfpbN3h246ux9AfQ1D1RCO3C7Y+XVKp2X+np+0=
Subject key identifier:   89:D7:8E:1D:BC:2A:9A:3F:46:BA:1C:92:72:3F:A4:05:43:7A:A6:AA
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584EA79654F1CBF89DBA7EEAA360
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23347
IP address blocks:        2602:f921::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:54:f1:cb:f8:9d:ba:7e:ea:a3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4b497137-38e4-4af0-90b2-a4f9e1739527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5f:f3:9d:9a:ea:e6:ce:37:34:85:3c:37:32:
                    99:b6:b1:86:8c:20:db:ee:fe:1e:94:a0:6e:08:bd:
                    3a:8b:de:de:5c:ac:c4:a9:b6:7c:54:fe:de:b2:19:
                    1e:9e:88:d6:d3:66:bb:7b:cb:56:75:c9:a7:48:4c:
                    fd:5f:b7:a6:a7:83:1c:72:38:a6:41:b6:6f:8d:ea:
                    e7:a3:69:49:28:b8:69:45:a9:14:89:ff:0e:86:49:
                    dd:45:bd:27:12:dc:3a:81:a0:6b:4f:69:24:bf:3d:
                    ba:90:75:d7:9e:4f:aa:a2:0f:41:93:98:23:15:7a:
                    96:02:14:e9:a5:78:37:08:29:ce:62:ed:60:ea:a3:
                    98:16:1d:c9:bb:89:1f:a3:dd:31:2e:84:b5:af:e1:
                    5d:be:55:ff:aa:24:26:bc:09:75:b0:9e:52:dd:b8:
                    d6:70:7d:fe:1b:a0:c1:07:21:3d:89:8d:e8:98:a2:
                    c4:9e:18:f6:55:24:35:92:af:2a:79:a3:42:ef:41:
                    8d:43:95:a2:5e:cf:25:2b:35:2c:66:53:9e:23:7a:
                    55:40:07:44:8e:2f:27:81:69:49:4d:87:83:2d:3a:
                    22:0a:c2:da:22:96:4f:9c:0a:ed:2a:cb:1e:0c:be:
                    ef:57:42:c1:35:55:36:51:81:82:f0:ab:14:c4:61:
                    7a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D7:8E:1D:BC:2A:9A:3F:46:BA:1C:92:72:3F:A4:05:43:7A:A6:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:81:bb:f1:fc:60:16:48:e0:37:85:36:27:ed:14:70:d9:
         53:aa:86:57:82:75:79:13:18:20:0d:4d:e9:0e:cb:a8:93:e4:
         e5:9a:d5:85:5f:47:80:52:08:fe:45:ee:2d:c9:eb:d1:de:bb:
         45:08:e3:36:ec:69:c2:03:87:d5:11:98:ce:84:a4:fe:78:81:
         a1:84:4b:51:76:44:eb:ef:f9:87:9c:10:31:54:99:30:5b:d3:
         e1:8f:5f:ce:b6:16:23:46:b8:17:04:dc:91:d6:f3:c1:74:84:
         90:6a:ed:35:c1:10:3b:82:37:48:f0:bd:8f:4d:d4:8a:25:57:
         f0:41:44:66:37:0c:85:27:ff:a5:cc:eb:4c:6d:89:e0:ce:11:
         70:48:0d:85:34:b3:42:fa:00:00:cf:c9:25:b3:21:6b:2d:9a:
         4d:59:14:5b:bd:12:1e:45:f1:87:cf:46:af:e1:2b:d4:06:a3:
         23:20:60:ba:6b:8a:66:07:b6:f7:a3:dc:fa:f4:c2:0a:b2:5b:
         b9:45:75:18:4f:63:2a:4c:05:37:f1:5c:15:1d:17:d4:45:d8:
         de:d8:61:79:85:2a:98:63:4d:5c:53:04:54:9f:a5:f4:01:01:
         6a:80:4b:6d:55:d4:a9:c9:a9:94:b9:44:45:1d:f1:15:46:76:
         6f:ad:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:00:43 2026 by rpki-client