Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9033ce29-1a6c-3772-a526-84a80ca45e6d.roa
File:                     9033ce29-1a6c-3772-a526-84a80ca45e6d.roa (raw, json)
Hash identifier:          wkhcVyJ5OFulX/fvPpavAlBHiCmXUtyRcpSibhrE7FE=
Subject key identifier:   98:45:10:43:FA:FF:11:99:A0:4C:05:D0:FD:1A:3D:75:57:5E:AB:EF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E44887EE0237AF993A51D80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9033ce29-1a6c-3772-a526-84a80ca45e6d.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:88:7e:e0:23:7a:f9:93:a5:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=1ec9e25d-9ad0-43ec-9810-443109d36487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:20:fc:cf:d4:a6:b9:16:04:57:a7:9a:dd:d9:
                    bc:f9:7a:97:17:5c:45:41:f3:84:99:f6:73:09:cc:
                    f4:aa:69:d2:81:d1:0b:1d:b6:5a:18:0c:5c:23:c7:
                    54:14:ef:ae:f4:6c:10:99:13:f2:0c:23:cd:56:61:
                    78:a4:8f:27:c5:8d:09:b8:8a:10:2a:bd:5b:5b:b6:
                    68:77:da:b7:10:2a:fa:c1:44:7e:a1:79:8f:31:6a:
                    7d:50:e8:9c:75:e8:0e:cb:a9:b3:88:a3:62:79:a1:
                    7a:a0:17:7e:80:1a:9a:a9:cb:fc:12:ec:50:6c:08:
                    f4:6c:eb:5c:29:42:6b:f5:e5:18:2e:62:d8:c2:f1:
                    d9:f9:a4:e2:b0:9f:a2:bf:84:ed:ae:7b:68:7e:e5:
                    9a:99:ad:64:18:c8:d7:ae:1e:21:cd:46:ce:85:7a:
                    ff:87:f2:94:c1:4a:4e:e8:d1:24:60:5a:4b:82:38:
                    1b:14:4b:18:d9:e3:f5:5c:3a:b0:3f:34:56:ab:b7:
                    26:4d:ee:a9:5f:23:15:83:5f:02:e5:8c:42:b4:26:
                    81:c7:fe:96:c8:95:65:bb:09:4f:d8:b6:36:b4:e9:
                    26:89:92:b7:30:b6:89:c1:43:dd:86:95:9f:27:ec:
                    5d:e2:db:3c:ea:fb:4c:00:59:9b:fd:ea:d4:2d:6c:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:45:10:43:FA:FF:11:99:A0:4C:05:D0:FD:1A:3D:75:57:5E:AB:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9033ce29-1a6c-3772-a526-84a80ca45e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:96:42:14:b0:ca:54:31:8d:e9:d2:63:a6:c9:91:c6:43:
         e5:29:f6:3c:cf:4b:a2:50:e0:7a:07:e1:b9:91:22:7f:23:16:
         40:54:bf:8a:cc:b2:b0:a3:38:13:f5:c0:85:5f:c9:a2:0c:d8:
         85:ec:39:0e:ca:5d:cf:1d:92:84:97:f9:24:34:64:62:88:22:
         8f:87:a9:51:72:b0:56:66:65:8d:3d:08:c6:12:7e:4e:25:5e:
         96:63:28:e1:6f:75:41:ce:89:29:81:55:d7:f8:52:11:06:5a:
         72:ad:c6:8b:fa:22:48:09:79:da:17:de:20:f0:7c:14:f8:c5:
         e8:43:f7:d0:e1:12:15:1b:d9:47:33:3d:79:88:15:82:6b:46:
         c5:5c:5d:90:b6:50:01:1d:1b:c1:3f:90:86:45:a2:86:0f:bd:
         dd:2d:83:72:6e:ae:f9:41:e7:77:49:20:15:eb:e0:dc:61:da:
         6a:48:10:87:67:bd:00:92:38:74:23:c2:c1:ba:d0:85:34:56:
         21:2f:6b:8c:a5:1b:c5:bf:be:81:2b:67:b5:5f:8a:d1:f9:29:
         f0:7a:b0:13:a8:8d:23:44:a6:ec:0c:b4:ab:eb:0b:b3:6d:66:
         71:2d:55:de:c6:a5:4b:08:69:19:03:5a:70:e0:14:e5:ed:36:
         e8:93:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:32:52 2026 by rpki-client