Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499/7cf340fd-6dd7-3567-a947-743617c30562.roa
File:                     7cf340fd-6dd7-3567-a947-743617c30562.roa (raw, json)
Hash identifier:          GJ5kB1EXsRxdYNej36tIV2r1FFDDFSfX5XEOaIczDSY=
Subject key identifier:   8E:1A:19:0C:BF:0D:83:F3:4E:C9:9A:6B:5D:2F:23:80:B0:E3:B0:F6
Certificate issuer:       /CN=cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499
Certificate serial:       010D0C9F4328584EA2DFB700052A1F65895FF5E0
Authority key identifier: 03:FD:53:64:34:52:F0:D6:FA:32:8B:75:DD:55:DE:E1:58:21:E9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499/7cf340fd-6dd7-3567-a947-743617c30562.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     401640
IP address blocks:        2602:fe53::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:b7:00:05:2a:1f:65:89:5f:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=f8eb1bcf-2507-4c93-8313-5508828b819c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:78:7d:ca:fe:62:42:c0:f7:8a:bb:72:65:d8:
                    e0:d9:da:90:16:44:9a:82:d1:7b:f2:38:d7:61:26:
                    98:b0:42:9e:1c:af:50:89:12:af:7d:63:bf:ed:b0:
                    e9:3b:04:31:c2:8f:d3:a1:62:49:28:d3:a8:74:dc:
                    0e:74:c5:68:77:3f:47:dc:be:a4:09:1c:7f:90:0f:
                    af:db:b8:24:68:fb:d6:98:a3:90:86:97:03:bd:1f:
                    af:ca:3d:c3:df:20:a1:25:4e:53:cc:4d:cd:cf:64:
                    5a:be:fc:dd:2a:4f:52:e2:c2:94:7f:05:4a:c5:96:
                    8f:08:b2:be:fd:12:51:ab:4f:b2:5e:4b:ab:cf:79:
                    5c:c6:50:f2:49:65:9e:c6:87:d2:01:2a:e9:1c:8e:
                    be:72:44:76:f5:c6:4f:06:6a:30:d7:6f:85:a2:76:
                    4d:ad:b4:0f:13:cc:31:0f:0e:56:4f:30:c7:56:96:
                    94:d9:f3:41:1c:26:70:a3:91:ea:6e:31:e9:c2:c7:
                    22:6a:44:fc:12:8d:7e:f0:5c:63:66:a8:bd:a1:24:
                    74:f5:b9:0c:eb:cf:4c:c4:b1:3b:4d:97:d6:0e:ad:
                    6e:f1:05:bd:cd:31:5f:01:04:f2:b3:3c:eb:83:68:
                    7c:6f:51:2c:3b:9a:5c:25:4f:f1:87:01:df:68:ec:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1A:19:0C:BF:0D:83:F3:4E:C9:9A:6B:5D:2F:23:80:B0:E3:B0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499/7cf340fd-6dd7-3567-a947-743617c30562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499.crl

            X509v3 Authority Key Identifier:
                keyid:03:FD:53:64:34:52:F0:D6:FA:32:8B:75:DD:55:DE:E1:58:21:E9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb65ef9c-d56d-4ff7-9e0f-7f2c420ea499.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe53::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:60:30:a7:8f:0b:46:5d:1e:1d:66:59:51:d7:a1:51:73:74:
         9c:92:d5:80:e4:de:24:7b:bb:ca:eb:75:f9:b3:21:2f:d6:4c:
         52:95:65:c1:e0:b9:75:eb:d4:dd:fa:25:57:e1:35:06:f9:d0:
         68:9d:b5:4a:68:81:9a:69:96:06:43:26:f1:3c:01:21:cf:7b:
         a4:df:19:11:51:3b:ec:4a:c3:94:0f:01:29:19:c7:2e:8d:38:
         41:7e:90:da:63:49:ae:98:b0:09:d5:cb:7d:b0:ef:9b:b9:60:
         3b:84:5b:b3:6d:db:d0:3e:47:63:fc:4a:09:7b:46:ec:00:be:
         cc:14:6a:95:b1:49:b9:9b:bc:34:16:89:de:ee:e6:e7:2d:09:
         73:e5:3b:ed:8a:0c:7b:31:fa:99:46:c6:e2:2c:9f:7e:65:de:
         62:48:e8:cc:9f:97:3b:eb:b3:d7:5b:a7:1b:fe:98:58:22:a9:
         4d:89:ec:9d:8e:bd:d5:8b:88:f7:b9:ca:b6:8d:74:66:f4:47:
         78:24:33:f4:07:bd:e6:24:11:74:ad:6c:1f:a1:9b:42:cd:13:
         d2:18:66:3c:cb:56:3e:b9:92:35:a4:e3:6f:05:2a:44:1d:1f:
         e4:d0:c7:c1:c2:86:65:ce:10:97:93:55:b5:7b:fa:bb:27:b1:
         81:29:86:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:57 2026 by rpki-client