Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa
File:                     dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa (raw, json)
Hash identifier:          QZZ5Dee4OdTcJF4T8C6mKRkwXP17XqjExDwhyX271uM=
Subject key identifier:   DE:56:58:CB:91:2F:69:EA:23:07:34:29:7F:E7:53:76:09:4F:7E:BC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4478CBB97AA07AEA2DCFC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     7843
IP address blocks:        2603:90f2::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:78:cb:b9:7a:a0:7a:ea:2d:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=e647e2d8-2872-43c6-a8d0-e89d23edcb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:1a:76:1d:c7:d5:86:80:50:92:36:55:7d:
                    0c:03:13:6b:19:6e:80:5c:57:55:da:fe:91:67:16:
                    ed:70:ff:96:c3:7a:66:c6:bd:23:43:ed:cd:66:63:
                    30:6a:2e:27:ee:3a:0d:fd:77:9a:bf:6c:52:38:38:
                    5d:e9:98:d5:2c:3b:32:13:6e:09:ba:92:8a:43:c5:
                    05:bb:98:be:a9:35:af:e0:c6:73:5c:eb:91:ce:47:
                    64:0c:5a:be:1e:e7:55:05:b1:80:07:0d:09:5d:66:
                    24:b8:d5:12:e4:dd:ce:a2:7e:c5:4c:c3:1f:aa:d7:
                    8a:97:e5:f9:29:45:21:ad:a4:fc:76:f6:7d:ee:64:
                    18:c5:c9:95:a7:f1:8d:a4:52:95:c3:19:15:f3:02:
                    96:10:1d:a5:ae:14:56:fb:97:d8:66:32:6b:29:c3:
                    64:81:e5:f2:b8:f0:03:3c:e8:9c:a0:0f:57:0c:3f:
                    bd:1c:81:a7:c8:d5:fd:10:22:0b:33:38:75:fc:aa:
                    a0:2e:3c:a4:19:ef:25:24:f2:0f:9a:1b:1c:d8:cf:
                    35:0a:b3:a1:6e:cf:54:bd:d5:ed:01:d0:4b:d9:6c:
                    4a:0d:43:1d:dc:1c:93:17:89:16:23:28:f6:9d:34:
                    05:ac:22:8a:a5:c6:3b:47:c2:c9:62:55:0c:25:69:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:56:58:CB:91:2F:69:EA:23:07:34:29:7F:E7:53:76:09:4F:7E:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f2::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9b:ea:e4:f5:95:5f:03:86:6e:86:42:38:fb:41:d7:a9:bd:
         65:0f:9e:7a:4a:d9:c7:82:d5:02:38:67:85:f0:99:22:f3:aa:
         62:b3:21:6c:cc:5c:c5:aa:d0:19:f5:7a:f2:e4:53:61:85:7b:
         9a:c9:c9:c8:42:40:b1:e8:7f:ff:92:37:bb:df:c1:01:13:0f:
         ad:e8:31:7c:d9:64:eb:06:b8:5c:58:60:2a:07:ee:da:80:c4:
         7d:47:15:c1:96:12:e9:1c:9c:53:15:df:78:fa:26:98:64:71:
         d1:fd:ef:80:d5:14:29:8c:9d:4e:2c:7a:52:12:84:75:71:5b:
         43:50:33:28:06:96:24:6b:1e:56:12:53:c2:b9:cc:5f:36:b3:
         de:d2:4b:88:b2:c1:84:70:92:db:27:b3:fd:36:1f:30:79:72:
         08:fa:36:9e:91:19:22:05:8a:a2:69:fb:01:da:92:60:23:71:
         91:31:c5:5c:5a:94:03:15:5d:75:2d:ba:10:91:e7:fa:39:42:
         c9:af:03:b9:11:86:8b:06:7a:02:4d:e1:cd:92:08:9d:6b:51:
         1a:c0:6e:50:04:62:0c:96:c6:69:49:00:bd:9e:98:b6:73:d6:
         79:54:eb:a7:60:87:cc:d4:d9:65:c6:38:48:40:dc:36:c8:71:
         b0:ba:34:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:21 2026 by rpki-client