Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfd6f3be-9678-3304-adc9-d63651631f29.roa
File:                     cfd6f3be-9678-3304-adc9-d63651631f29.roa (raw, json)
Hash identifier:          Wi3TYV8EHRaaxzipbI8eVzmxF53lwcMqHo+0v1aVo/0=
Subject key identifier:   33:35:7B:BC:07:E5:4F:24:09:EF:66:B0:14:7A:A3:6B:FD:43:24:56
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E445FC4A4582E6261CEF200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfd6f3be-9678-3304-adc9-d63651631f29.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8074::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:5f:c4:a4:58:2e:62:61:ce:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=8e34dee9-bc0c-4f53-b099-507307d2dd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ba:e1:3f:38:82:e1:35:b5:65:25:0c:25:4d:
                    9f:48:0e:0e:d6:60:b6:3a:1d:e1:34:4f:4e:38:5e:
                    e6:09:56:e0:8b:fe:17:76:17:a4:5d:e6:9e:7a:69:
                    b6:ee:f9:e6:dd:dd:2b:86:d5:49:cd:f9:22:68:9c:
                    e7:60:09:cc:3d:9d:69:5b:be:89:ce:9d:1f:d5:5a:
                    82:94:28:f5:db:65:23:a6:49:4d:14:51:b0:a5:1f:
                    53:c1:24:a4:71:e4:27:cf:12:3b:ef:67:fd:e0:1e:
                    8e:4e:90:fd:e2:98:46:08:34:12:88:b7:ae:1c:3c:
                    81:25:11:c0:b0:31:15:ef:cb:cd:50:f7:08:d6:e5:
                    c3:4b:61:aa:cd:d1:44:4e:26:fa:be:14:2f:af:e0:
                    25:d7:87:14:6e:3c:c0:3b:cf:e6:16:59:c7:83:15:
                    0d:ae:6a:cc:4a:53:c4:27:a1:56:7a:68:98:08:38:
                    9c:f1:26:cc:3e:d9:fa:70:f6:35:ba:01:6f:40:ec:
                    05:d3:c7:bf:97:73:cd:fa:36:0d:85:b1:44:52:16:
                    b5:76:50:3f:67:cf:17:2b:a3:73:98:a4:1c:ac:80:
                    bb:7b:39:71:b3:b8:bd:a0:2c:e1:53:ee:aa:60:8e:
                    be:95:66:7c:f9:39:f0:24:16:4f:ce:a0:46:eb:a6:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:35:7B:BC:07:E5:4F:24:09:EF:66:B0:14:7A:A3:6B:FD:43:24:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfd6f3be-9678-3304-adc9-d63651631f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8074::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:fe:b0:d8:28:17:47:a1:ac:df:84:74:19:8f:27:10:5c:20:
         35:d9:25:d7:43:14:c6:d4:5e:8b:f5:a2:bd:26:10:e6:2e:ee:
         c0:99:ce:9f:b6:de:85:ff:09:ca:1e:89:f8:60:6d:d7:8d:0d:
         7d:f4:b6:d6:c8:f8:e2:38:79:dd:c0:fb:3c:3c:ec:34:8d:8f:
         1a:af:ee:f0:7f:e3:3f:28:66:5e:d2:01:26:42:b3:9a:22:7d:
         69:63:d1:c9:bf:47:57:5c:e6:04:a2:34:13:d5:ce:04:4c:72:
         3b:47:da:eb:70:f6:6a:72:b3:1f:39:2a:e1:38:f1:8e:c9:a0:
         8e:3d:4e:8e:e0:c6:00:cb:80:54:94:fc:3f:80:62:6d:c2:76:
         f9:9e:28:71:a0:dd:b2:ec:9b:6b:87:4d:99:2d:8c:f3:6b:41:
         72:05:8f:78:c6:0d:b9:bf:6f:44:26:fd:44:42:e1:64:bc:be:
         55:e2:f2:87:a7:ed:75:5c:c0:12:1d:44:9c:54:c1:3e:45:83:
         78:b2:0f:cb:da:5f:3b:5d:d7:8f:c0:f0:a1:24:4c:1a:d3:01:
         1e:95:60:1c:63:a3:ca:ea:ab:f9:ee:a3:e6:ae:67:73:9f:8c:
         3d:51:1c:3e:f9:36:8d:23:f1:8b:34:4d:30:d3:b8:53:83:5c:
         1b:e2:09:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:16:17 2026 by rpki-client