Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa
File:                     cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa (raw, json)
Hash identifier:          +aGqMhWRXsZveQ0lPvG9n0CT6OLzmLUGnnxgRp7TKKA=
Subject key identifier:   20:BC:15:BA:F3:75:AB:F0:31:F8:F8:55:21:27:7C:2B:FF:25:7B:DE
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584EA79409C29847157B8667C880
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36829
IP address blocks:        2602:fc64:ca10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:09:c2:98:47:15:7b:86:67:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eaddffd2-e808-4e60-8b8e-938a2e6348de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:fa:58:ea:43:55:1e:bc:e1:fd:07:02:fa:
                    b1:55:82:09:c8:96:9e:3a:9e:f9:1c:0c:1a:9a:5f:
                    4c:9c:d1:41:c5:7c:04:8d:ba:8b:0b:dd:d8:f5:6c:
                    89:c1:ca:0e:bc:60:3c:8e:fd:c1:2a:8a:d5:2c:52:
                    4a:57:2c:b6:c8:fb:e1:49:b4:2e:71:f4:7d:97:62:
                    9a:55:a6:5a:05:54:6a:bb:ab:be:41:57:98:c4:3d:
                    d5:cc:54:21:f6:d2:45:53:3a:31:d5:40:78:58:6f:
                    e0:9e:f4:02:84:7c:bd:5d:35:2b:78:73:e4:fe:31:
                    28:af:c2:66:b7:85:c0:ed:6e:d4:47:30:d0:3b:3d:
                    57:8b:df:f3:f6:b6:57:00:ef:59:3e:48:87:da:b0:
                    f8:28:b8:92:06:5b:9a:08:b0:fa:24:35:fc:28:61:
                    0c:94:21:a8:5b:f1:40:17:9e:54:71:e6:b8:22:19:
                    04:c7:6e:b1:a3:40:f0:b6:19:de:b2:d5:7f:78:0f:
                    64:77:4c:22:4a:ee:38:23:87:19:cb:d9:8c:fe:47:
                    8f:a6:11:26:c1:48:38:36:fb:78:5b:0d:5e:d2:6d:
                    d9:04:0b:b0:62:24:b6:51:75:49:f4:46:e5:0c:27:
                    1f:7c:6c:37:f1:3f:8b:7a:4d:42:f6:a3:ec:9d:05:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BC:15:BA:F3:75:AB:F0:31:F8:F8:55:21:27:7C:2B:FF:25:7B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc64:ca10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:8d:75:95:4d:4d:25:28:16:e9:0b:77:12:2d:16:ee:78:
         2d:8b:34:bf:91:ef:3d:92:e1:2a:ff:b5:de:c7:93:b7:ef:ca:
         e2:e7:b3:2b:67:e0:8c:e9:eb:c7:28:81:9e:ab:27:45:e9:77:
         eb:d9:07:e2:f6:da:ef:d2:35:4d:97:5d:5a:4f:76:1f:cd:1c:
         70:55:49:db:59:3b:65:93:45:3c:44:1e:0d:fa:91:c8:f7:7b:
         0e:0f:d0:ca:3a:0d:fc:c0:46:64:8a:f0:c5:37:ba:d5:a4:8b:
         ea:fa:5c:f7:c8:bc:77:01:c7:d0:eb:bb:6b:35:b1:df:fc:4c:
         cf:9a:ee:0b:25:fd:5f:a1:28:57:2a:f3:ee:72:ad:dc:70:1f:
         ac:0c:4f:a6:1c:45:ed:71:88:6c:5a:2c:fa:49:a8:33:fa:34:
         53:b7:ee:87:c6:82:7f:c2:96:69:dc:80:09:98:4b:c1:49:8a:
         f5:c9:fd:ff:d3:48:7e:6b:d3:17:7f:6a:9c:38:9a:0e:bc:1d:
         b6:b6:87:ec:cd:d5:8a:e4:fe:26:8f:6e:e5:63:c7:3f:36:df:
         9c:be:78:a6:18:d3:5c:ed:0f:58:79:07:1d:78:15:40:95:cf:
         8a:63:3d:4d:1f:56:f0:db:e9:f3:d7:1f:56:d1:47:2f:55:2e:
         84:ee:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:12:30 2026 by rpki-client