Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/ccd1e17b-a326-32cd-ac51-fa322ce04397.roa
File:                     ccd1e17b-a326-32cd-ac51-fa322ce04397.roa (raw, json)
Hash identifier:          SagPlRIT3oKRaURej2bsOe23N9iFnUwwTsV8hV3A0zg=
Subject key identifier:   D3:32:7F:D7:E8:CF:60:F0:99:35:C0:53:3F:9F:5F:0D:48:EB:F7:39
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F4328584E9BE533C9836DD6D3B5B9B980
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/ccd1e17b-a326-32cd-ac51-fa322ce04397.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     400967
IP address blocks:        2602:fcd8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:33:c9:83:6d:d6:d3:b5:b9:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=0df19d44-314f-4f2e-a672-febd71eb87d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:95:ab:d4:e6:00:d0:13:59:f7:b0:c0:0e:
                    07:8c:c7:87:4f:35:f0:91:df:31:5b:3a:47:f1:ff:
                    0d:c7:3d:f0:56:54:f3:8a:54:c1:41:f6:fd:34:58:
                    fb:ab:ec:bb:31:d7:d7:70:d4:24:cc:89:3e:d2:44:
                    47:78:0a:20:c1:a2:67:fc:e3:fc:a3:09:18:0c:fd:
                    7d:89:f3:cf:60:7a:14:80:e5:18:e6:a5:51:2d:9d:
                    69:5a:6c:a2:8d:4d:4e:72:cd:72:57:d3:ae:90:85:
                    70:64:03:5a:00:9d:0e:bb:69:9d:70:f4:fe:02:50:
                    6f:46:57:c6:db:56:97:84:f9:4a:90:61:a9:c6:3f:
                    6b:60:52:c9:dc:39:ab:8d:84:99:76:7c:c9:38:43:
                    6e:a4:aa:4a:cb:99:de:f2:32:ee:62:08:0c:44:44:
                    15:a9:99:29:0b:85:8c:52:36:da:f4:1b:c3:87:c4:
                    0b:4a:ad:41:b8:d7:73:d1:41:d9:99:85:3d:ff:51:
                    10:7e:ff:75:9a:b4:71:57:69:2d:b3:54:42:be:e5:
                    fa:7d:54:bc:6a:aa:25:e2:04:92:61:41:d9:01:68:
                    d4:80:d2:e2:ac:f3:9d:12:fe:1a:22:a5:cf:ce:dc:
                    c1:35:59:b4:e2:94:fd:34:05:b5:32:fe:36:0c:11:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:32:7F:D7:E8:CF:60:F0:99:35:C0:53:3F:9F:5F:0D:48:EB:F7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/ccd1e17b-a326-32cd-ac51-fa322ce04397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:21:8d:02:d1:73:6c:bb:60:0d:8d:25:47:24:66:d3:54:
         42:95:83:9f:1d:40:23:1e:be:bc:d2:aa:2c:88:46:92:3a:f0:
         f9:fb:9e:38:54:bd:d5:29:fd:95:86:9b:e7:43:ab:d3:23:67:
         51:6d:43:0b:8a:f8:88:ba:5d:f0:5f:dd:27:d9:86:ad:10:7a:
         ab:e9:59:ee:0e:3e:bb:09:22:fe:24:5d:84:97:9f:77:09:e3:
         81:8b:48:9f:c6:c2:88:6c:d3:32:97:59:95:64:ff:54:b9:e3:
         dd:a8:27:68:d4:4e:af:65:ac:f4:b1:20:9c:dc:5f:80:27:80:
         b0:bd:cf:0c:d6:d4:6e:ff:53:7e:5d:da:b2:82:3e:ca:b1:05:
         48:b0:fe:1b:94:1d:31:13:ff:94:13:b2:87:2f:4d:6a:38:51:
         f3:61:e0:b5:9d:40:a7:c2:06:31:e6:1e:af:63:76:d3:7a:88:
         75:b9:28:a0:13:02:4e:b5:9d:b0:70:03:33:18:70:e3:6f:a1:
         27:69:4f:4a:23:d1:1b:f7:a6:79:5c:0d:7a:18:33:4b:4a:be:
         b9:61:10:6d:1c:f3:72:35:94:5c:22:b5:36:47:5f:f3:67:dd:
         fe:ba:9a:bd:24:b4:07:a6:c0:be:39:e5:6e:9c:8b:c4:a0:00:
         42:f6:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:46 2026 by rpki-client