Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/01a9fd9c-0ef3-34b7-b865-6c75d8ec3f1a.roa
File:                     01a9fd9c-0ef3-34b7-b865-6c75d8ec3f1a.roa (raw, json)
Hash identifier:          L4OFfEgANQXsOnuObaDeXx7VTu192+czVf70ecSjw7s=
Subject key identifier:   88:46:F3:FB:26:02:4F:95:09:5D:FB:12:C8:98:87:97:BD:11:01:44
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584EA6C7EEA33AE3A92E2C6C6400
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/01a9fd9c-0ef3-34b7-b865-6c75d8ec3f1a.roa
Signing time:             Tue 28 Jul 2026 18:35:32 +0000
ROA not before:           Tue 28 Jul 2026 18:35:32 +0000
ROA not after:            Mon 26 Oct 2026 18:35:32 +0000
asID:                     22359
IP address blocks:        2607:8240:ff1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:c7:ee:a3:3a:e3:a9:2e:2c:6c:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jul 28 18:35:32 2026 GMT
            Not After : Oct 26 18:35:32 2026 GMT
        Subject: CN=d12beeee-cbfa-4286-8763-dff43635a678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:55:59:fd:44:07:99:5b:9a:57:01:81:a7:
                    59:f4:bb:49:3e:4f:99:0c:7c:86:4d:8b:f3:ab:d8:
                    72:8b:f2:0a:97:36:47:65:ba:de:00:11:28:cd:4f:
                    51:2a:95:74:62:71:75:e6:e5:20:9d:68:33:f1:62:
                    56:c3:51:3d:55:0a:f9:96:d7:54:27:0d:b7:f0:46:
                    a1:55:8f:77:b7:9a:7c:32:66:41:4d:cc:68:88:2e:
                    ad:89:1b:c6:13:83:e8:2b:f3:1d:42:e8:e0:f5:f8:
                    22:88:91:00:ec:c0:a5:18:20:09:e1:6a:91:1d:b5:
                    33:07:53:6b:2e:77:7e:84:10:a0:25:11:2d:48:cb:
                    da:ff:19:b7:52:61:a3:be:61:91:f2:fd:ee:70:21:
                    a9:7d:2c:e8:e9:70:37:ca:15:88:ef:47:5f:91:5d:
                    5b:6e:2b:34:a6:12:8a:66:a7:d1:21:6d:62:8b:18:
                    46:c4:2d:42:3c:31:ab:42:a6:0f:6d:75:46:4f:ad:
                    75:83:cd:71:3c:f4:74:ba:97:0a:19:29:a9:5b:50:
                    56:14:a2:13:07:9a:3c:ab:07:f2:31:ea:78:8a:c1:
                    70:9b:1f:73:ef:54:d2:3f:e5:8b:2d:46:ad:7e:8a:
                    4a:ed:49:11:b8:24:5d:47:7f:bb:6e:f8:f4:83:f8:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:46:F3:FB:26:02:4F:95:09:5D:FB:12:C8:98:87:97:BD:11:01:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/01a9fd9c-0ef3-34b7-b865-6c75d8ec3f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:ff1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:3b:63:3e:79:f1:97:89:a8:91:73:b8:0a:b2:8c:01:5a:
         b3:b5:b4:51:ea:b4:5f:68:c2:d3:e9:fb:98:d2:04:1b:94:38:
         d9:07:b5:54:88:2c:fe:d3:a1:9f:d6:f6:9e:14:45:cd:ed:ac:
         51:5a:77:9c:1c:a2:0a:d9:c7:66:a2:a1:b3:5c:6f:db:a5:69:
         6b:f8:84:70:23:f3:5b:e4:5c:81:ed:fb:fb:3a:a9:97:54:b7:
         25:ff:11:81:e7:a7:50:18:76:8b:ac:e6:62:a6:74:9f:27:91:
         b2:f8:09:b7:ce:8b:c7:eb:d4:80:72:bd:24:4d:59:51:6b:49:
         1e:65:08:a8:8d:52:70:05:2b:14:ce:a7:3a:8d:32:69:56:47:
         57:90:0b:2f:81:25:00:44:3b:5c:ad:cf:5c:e5:c9:94:ca:44:
         a7:d7:51:f6:1f:4d:f4:b4:d2:7c:db:b4:df:41:b2:60:28:62:
         3f:86:b1:46:62:ba:4a:6b:eb:9e:65:14:e7:8e:26:98:58:55:
         35:60:63:9e:30:12:10:65:99:cf:3f:c0:ad:63:0b:94:a4:9f:
         68:d9:89:6b:25:68:a5:04:97:bc:90:e3:61:95:9e:09:6f:94:
         90:d2:69:ba:98:0f:61:52:cd:8a:eb:65:46:54:72:d0:f0:34:
         e3:7f:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:29:41 2026 by rpki-client