Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa
File:                     1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa (raw, json)
Hash identifier:          v5jQR3Cwc3mowE2Pmh9NswGYJ80DDsL2xJaPrnuCCcA=
Subject key identifier:   3B:C3:3A:FD:BD:42:C6:0A:0A:20:46:AC:96:3B:90:DC:DF:C1:E9:AD
Certificate issuer:       /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
Certificate serial:       010D0C9F4328584EA7972F8E23CBCE00D107F740
Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     394470
IP address blocks:        2620:25:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:2f:8e:23:cb:ce:00:d1:07:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7384ed04-074a-4d43-bb24-0bb9536806b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:90:56:fe:9c:e9:87:e5:c2:2a:09:37:c7:
                    d9:99:ba:ef:65:c2:48:7a:e9:e5:92:06:c6:0a:f1:
                    bc:a4:98:18:d5:7f:4d:d6:a7:59:7f:4a:7c:43:e2:
                    ce:ab:c3:ff:2c:fc:1f:29:ec:69:00:ed:6f:97:8c:
                    89:da:f3:16:56:37:9e:12:5d:10:c7:6a:26:83:3b:
                    64:ca:42:a0:43:a1:35:d4:b4:60:ee:f4:f8:1a:3e:
                    b2:43:d2:7b:6f:98:6b:d7:1f:3b:b0:99:9c:11:c4:
                    21:ba:96:e5:11:af:2e:d3:96:46:9d:34:17:91:ed:
                    03:ba:6f:ee:66:0d:b3:9b:75:49:a0:aa:7e:97:92:
                    7f:80:c5:d6:fb:67:dc:3a:89:bd:86:00:37:b6:b5:
                    08:83:ee:80:07:fc:e5:bf:40:d6:6a:66:a3:83:b7:
                    61:0a:3b:a8:c1:76:72:3e:12:92:4b:b9:0f:4f:d3:
                    03:1a:3a:9d:5d:d4:d9:36:c2:ab:99:2e:c2:c9:e5:
                    24:35:8f:47:5a:83:ed:04:2d:d5:36:52:6d:8a:13:
                    f3:41:aa:08:7a:02:f0:c3:61:23:65:90:53:43:77:
                    d9:c3:a4:d4:bc:14:cd:6c:04:4c:04:b8:34:d1:65:
                    42:bb:67:08:14:ce:31:61:06:cc:38:a6:c5:b8:6a:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C3:3A:FD:BD:42:C6:0A:0A:20:46:AC:96:3B:90:DC:DF:C1:E9:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl

            X509v3 Authority Key Identifier:
                keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:25:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:11:95:04:c9:fc:ae:89:9f:5c:ed:de:ac:72:98:b3:e4:75:
         fd:d4:3e:fe:27:35:d4:bf:36:b5:12:87:18:93:5d:35:c9:49:
         2b:b0:15:fe:b8:aa:0d:1e:93:75:8f:4e:f4:9a:12:09:a4:48:
         35:36:f2:50:61:91:3e:fd:86:24:29:d5:05:40:e4:20:1f:e9:
         c6:ec:64:36:fb:b7:03:84:dc:df:37:a1:ce:ce:10:1b:76:e2:
         80:3f:2a:50:c1:da:58:ab:39:e8:91:b5:76:4e:74:91:a6:10:
         2d:6c:88:e1:94:ba:cc:c7:e3:b0:d2:3f:b7:e9:0f:13:a8:63:
         12:d6:e9:22:b1:8d:a5:60:fe:a7:3c:ab:7d:29:c6:d0:9c:06:
         2f:7f:f9:0a:b8:ca:02:06:2a:79:d6:d1:63:4a:23:8e:32:ab:
         7f:b8:a5:31:f5:36:89:5a:55:8a:56:a4:e8:fa:8f:e6:32:85:
         f3:69:51:d0:15:01:4c:bf:c1:c4:2e:35:8e:e9:66:e6:f7:5f:
         42:3e:48:03:59:59:85:2e:65:3b:ec:78:cd:87:27:be:b1:f7:
         f7:ef:b4:2b:ce:66:cd:29:bd:38:09:d3:aa:a0:ff:d6:f0:f6:
         45:1c:33:84:aa:6d:4a:64:e0:82:ef:9a:89:e5:fe:a2:17:2d:
         02:0f:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:36:18 2026 by rpki-client