Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/d85e857e-5431-3fec-8408-9eb05d5b6801.roa
File:                     d85e857e-5431-3fec-8408-9eb05d5b6801.roa (raw, json)
Hash identifier:          O3oKW8oS4UzQoXVtwANtmutz3aMheXOkbMsjSA/o0LY=
Subject key identifier:   42:FA:77:2C:72:F8:95:8D:AF:93:C2:9F:AD:5C:0E:9C:14:66:89:3A
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584EA787998ED5C5608DA4297780
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/d85e857e-5431-3fec-8408-9eb05d5b6801.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36530
IP address blocks:        2602:f921:f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:99:8e:d5:c5:60:8d:a4:29:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=25cb0c82-c1c6-4470-a5d2-23c54ad41444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:70:24:2b:d3:85:bf:02:25:9c:ae:0c:c8:9a:
                    a0:c2:7f:f4:c8:5d:7b:94:08:b6:2c:90:2d:41:90:
                    27:ed:f5:9d:41:7b:98:7c:33:06:aa:58:7a:2a:ad:
                    eb:90:64:ae:f4:24:1d:b1:37:48:da:a0:01:6c:85:
                    e4:d2:ea:72:e6:c1:50:9f:7d:d2:38:f3:52:88:f7:
                    92:eb:01:04:b0:9b:41:7a:13:27:bd:60:64:d8:a2:
                    02:16:36:2c:56:e8:32:c0:d0:11:14:ba:79:c7:4c:
                    60:f0:43:96:e6:68:6d:9e:fe:3b:a5:75:58:ae:78:
                    8f:fb:25:33:25:58:a5:22:de:10:0e:5d:0a:0d:14:
                    8e:ee:ae:ab:53:24:6d:e3:30:a9:a3:5c:f3:52:01:
                    01:26:34:73:bd:f3:97:f3:6c:21:ba:f0:18:73:a3:
                    76:bc:15:88:7a:6e:9d:a9:1f:86:66:c4:ab:aa:ce:
                    a0:26:d0:70:93:26:a0:f0:b2:95:9a:52:0d:26:ea:
                    03:9e:7f:79:d8:31:63:ea:1d:11:74:20:4f:ea:f5:
                    34:7a:31:dd:ba:8d:bc:51:45:c2:20:47:87:98:1b:
                    90:2a:8c:72:1c:9c:b3:fa:d0:b1:6d:e6:53:c5:36:
                    9b:62:eb:4d:46:0e:7d:3a:0d:c3:29:57:e9:ba:46:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FA:77:2C:72:F8:95:8D:AF:93:C2:9F:AD:5C:0E:9C:14:66:89:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/d85e857e-5431-3fec-8408-9eb05d5b6801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e7:d5:aa:49:87:9a:f4:1b:50:c5:d2:d3:a7:47:3b:5d:4c:
         67:56:8a:1e:09:c9:1d:01:ed:80:42:da:73:cd:7b:f0:fc:94:
         71:64:f8:2c:73:64:3e:fc:39:ac:c8:a0:07:11:61:3b:a6:0b:
         4c:74:1f:f3:5b:24:b7:d0:20:63:05:66:a4:39:17:48:dd:a3:
         43:cb:a8:86:2c:2c:9d:98:92:68:56:9c:0c:ea:21:c3:44:41:
         5f:71:ee:bc:28:61:7a:24:e1:95:a5:a6:9a:aa:a3:46:22:27:
         c7:8a:79:f9:11:e1:a4:5b:c5:88:6e:04:93:6f:91:7d:6e:7a:
         d3:8b:18:a8:1f:9f:b3:5e:e5:38:e6:f3:c5:1c:3e:fa:66:0f:
         6e:60:f0:ac:57:f3:0b:7d:82:e7:b3:d6:35:2a:29:6e:67:52:
         5d:90:05:6a:a4:19:2b:ed:e7:ba:35:1b:9f:90:52:c0:cf:99:
         d5:34:26:73:6d:42:ff:f6:e4:2d:ef:43:da:d9:68:14:74:70:
         78:f6:08:3e:ac:a2:29:66:78:34:08:82:90:84:12:8e:ad:c3:
         df:23:92:b5:ce:03:7b:be:9f:8a:1b:df:cf:c0:5e:e0:71:98:
         c5:83:ea:f6:5a:7d:a9:8d:c3:88:b3:4c:de:d6:71:b2:4c:ce:
         e3:b3:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:16:09 2026 by rpki-client