Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ad4798a0-b865-3094-9439-c153ddea64bc.roa
File:                     ad4798a0-b865-3094-9439-c153ddea64bc.roa (raw, json)
Hash identifier:          Q8p+emD+5itvPIm68HHzJTLQeBJCqOD112r61OrznEs=
Subject key identifier:   FF:9B:7F:89:D4:78:80:55:71:23:60:12:74:CA:6D:7D:50:2F:93:0E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4463828AEA2C288C2B0800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ad4798a0-b865-3094-9439-c153ddea64bc.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8038::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:63:82:8a:ea:2c:28:8c:2b:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=ad50f060-cef9-411d-b35f-3588c0a9813e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:69:c5:d4:47:a4:11:e4:6c:5b:fa:3c:30:
                    28:93:78:37:8c:6b:28:de:57:f9:08:4d:08:3a:0c:
                    a2:1d:ad:b8:68:3b:c1:02:93:6a:0e:15:ef:56:04:
                    bc:b7:02:b6:34:2b:d5:92:c3:85:2c:17:2f:71:a4:
                    8b:d0:f1:ef:c5:28:d9:c7:2f:b2:5d:66:e7:4e:b3:
                    48:78:6b:74:a6:7a:1e:d5:96:d3:25:b9:64:69:c9:
                    91:df:e8:d7:ca:0f:95:db:5d:a7:77:84:2b:b6:96:
                    15:01:bf:c3:20:3e:36:ea:09:bb:6f:c2:6f:d8:16:
                    02:20:66:0a:10:57:d7:e7:7e:17:4c:31:91:74:da:
                    da:5b:7f:1a:ad:b2:f0:6f:6a:d2:e9:5c:6f:81:79:
                    97:e1:6b:d1:90:58:dc:b5:29:27:73:61:e0:36:0e:
                    dd:0a:35:41:98:c8:09:12:e9:91:f2:de:cc:cd:e8:
                    ff:93:c8:13:be:a9:e8:50:10:e4:c0:41:35:93:9a:
                    e4:27:42:10:45:d6:23:f5:0e:53:57:a3:2a:06:18:
                    3c:f0:0b:a8:0a:59:0c:14:2c:15:92:29:d6:5c:b1:
                    17:d6:9a:b4:97:80:c9:1b:f6:1c:f3:43:ee:dc:57:
                    7f:4f:61:cc:69:3e:f4:c2:dd:34:46:19:d3:20:ed:
                    2b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:7F:89:D4:78:80:55:71:23:60:12:74:CA:6D:7D:50:2F:93:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ad4798a0-b865-3094-9439-c153ddea64bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8038::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8d:a0:cb:6c:c8:05:86:78:e8:92:c2:d1:cd:86:57:5d:b6:
         36:5d:2f:5c:39:9b:b2:3b:68:40:7f:d9:72:bf:a5:45:b6:d4:
         d0:e3:93:e5:5f:76:04:08:f5:8b:e3:53:9d:8d:f4:ef:13:f4:
         8c:02:7e:f7:ae:3d:67:d2:d4:80:07:e9:1b:5c:b1:0c:70:10:
         2a:b9:ec:d5:1b:57:48:12:d4:3f:c2:81:22:c0:35:dc:e8:82:
         33:8b:83:01:24:88:0c:46:5a:51:08:79:60:26:92:3c:a2:5e:
         6d:8f:bc:f0:aa:8d:c3:b0:cc:ce:ee:0a:53:ca:31:52:0c:55:
         05:13:a5:0a:8f:a2:21:43:21:ab:2b:2a:2e:82:ba:2f:ba:7d:
         fb:ce:5e:ec:9b:2b:12:ad:dc:05:12:14:23:d2:b8:ed:ce:99:
         88:55:fa:f2:af:13:a9:fd:29:09:d7:2e:51:78:c8:ce:e9:ee:
         2b:00:28:71:8b:1e:07:90:c3:cc:6a:71:d9:e4:45:ec:4f:05:
         c0:f9:2d:23:95:b9:a9:fc:45:e0:88:8a:3a:9d:06:21:1f:38:
         ce:67:70:6a:45:20:4d:68:d6:10:58:a5:38:1e:1c:a3:3d:4f:
         93:79:46:7e:bf:94:d0:3d:52:1d:2f:11:30:7c:38:41:b2:32:
         d9:aa:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:15:50 2026 by rpki-client