Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/7a174a32-a9cc-3d5f-ae9d-fcb78a755c9c.roa
File:                     7a174a32-a9cc-3d5f-ae9d-fcb78a755c9c.roa (raw, json)
Hash identifier:          MvUB6nZ8x9jNMIn+Yvq1vbyNc+JyQ/Dsgpht8P9uTrY=
Subject key identifier:   15:37:08:B8:0E:A4:41:EB:37:E7:4A:05:55:43:12:5A:E5:27:67:EA
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584EA7950FEBCEAB97700DE6D100
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/7a174a32-a9cc-3d5f-ae9d-fcb78a755c9c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     199436
IP address blocks:        2602:f921:f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:0f:eb:ce:ab:97:70:0d:e6:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=31934d77-9359-4b11-a3b8-573acfc73ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:b3:8d:d3:d6:ad:16:b2:bd:14:51:3b:ff:
                    db:da:9b:a1:67:5d:1e:d4:a5:33:06:41:ea:59:e8:
                    2a:56:4b:87:95:67:eb:1e:69:0b:7a:07:eb:22:7e:
                    53:02:b7:e4:15:54:56:3e:de:20:7d:9e:92:52:de:
                    54:61:62:21:79:e6:fd:2a:c7:be:d9:d1:ed:36:69:
                    ad:4e:37:a4:c1:54:d4:d2:87:00:9f:fb:84:f8:a0:
                    44:53:1a:4a:f5:c0:4e:8e:9c:d5:ec:28:65:8e:4b:
                    a6:4e:bd:77:a2:d2:98:b4:70:f3:fa:db:52:ff:23:
                    60:e4:6a:73:a9:32:06:df:75:a0:f8:15:ce:63:33:
                    34:0f:2c:6e:07:c6:b0:1c:dd:1e:50:17:81:1f:36:
                    40:82:bb:a1:51:fa:b1:61:ea:39:d4:7d:a7:d6:27:
                    47:3b:eb:00:1f:4d:e8:80:24:f8:91:da:80:9a:a7:
                    11:27:32:65:64:05:b4:8a:7b:ca:16:2a:13:5b:94:
                    5b:30:66:54:8e:1a:a1:a8:e9:6d:41:03:2e:a1:d9:
                    89:70:d8:8e:c4:ef:aa:42:34:18:c2:02:93:da:22:
                    7c:11:74:e6:da:8c:ca:4e:bd:7c:c0:55:25:cf:bf:
                    7b:43:3a:fe:54:91:33:ec:c2:37:de:60:44:6f:9a:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:37:08:B8:0E:A4:41:EB:37:E7:4A:05:55:43:12:5A:E5:27:67:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/7a174a32-a9cc-3d5f-ae9d-fcb78a755c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:42:66:66:96:a0:46:8b:fd:c5:a1:7a:c8:27:e2:ef:d3:e0:
         69:6e:21:b7:e4:61:cf:9d:25:3b:dd:b8:89:05:8e:16:bf:85:
         98:80:a1:0d:e5:70:93:4b:79:8e:d9:f3:0b:0c:aa:8a:05:d7:
         e2:69:42:dd:65:e8:45:20:9c:09:db:34:5c:81:3b:b2:8e:85:
         0a:9e:86:86:8b:98:6a:91:0b:f6:2d:3c:a7:82:d4:a1:67:66:
         2d:1b:ad:55:6e:27:27:f7:22:6c:8d:42:c0:9f:43:18:76:83:
         f2:ab:a6:f3:a1:2b:ef:1e:30:b3:29:4e:58:ac:a1:05:21:f3:
         9b:da:7a:ca:6c:06:f6:1e:c1:d9:bf:c8:1b:61:d4:d6:38:3b:
         3a:50:32:75:58:7c:d3:30:a5:2b:69:68:a0:53:4c:06:25:4e:
         78:e1:6f:93:7f:f6:9b:08:4d:69:e1:7f:ab:43:b7:24:bb:8e:
         13:27:2d:3e:19:fe:e8:23:6a:79:dc:60:9d:5e:04:e3:f9:70:
         a7:db:44:71:28:29:6f:af:c5:da:f7:49:49:ec:86:38:57:2f:
         a1:62:98:12:7e:21:27:2b:a2:f6:c1:4a:ca:1a:62:53:31:d7:
         c3:8a:a2:cd:d6:ca:b5:a5:dd:ab:04:7e:1f:74:53:3e:18:e6:
         a2:76:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:42:51 2026 by rpki-client