Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa
File:                     7c0cede4-8012-3c79-9d4f-59f194f7d629.roa (raw, json)
Hash identifier:          BNOme0WHNujpErGyGPCnMhkIFGLddp12SmuSzJVGK70=
Subject key identifier:   A7:17:A9:81:0D:E8:34:9A:0A:1E:BD:D9:39:38:35:D6:9D:2C:CB:69
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F4328584EA788D9F9C537DE80154C9D80
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11810
IP address blocks:        2620:98:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d9:f9:c5:37:de:80:15:4c:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4db9d22e-c5f0-4216-ad7c-75617900933a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:2e:c4:39:7b:f4:f9:29:31:1c:e9:43:cf:
                    e1:eb:21:f6:d8:3d:7c:d6:90:01:42:d8:29:91:1d:
                    de:6f:70:91:2a:20:78:1e:9a:45:66:75:bf:be:79:
                    c3:8b:91:c1:5d:18:42:f3:a8:1c:15:06:2c:7b:4a:
                    ab:08:06:33:bb:7c:01:79:97:dc:79:8e:ac:f9:e5:
                    ff:1c:d9:2f:fd:4b:c5:8b:d6:1d:62:63:03:d3:b4:
                    7d:cb:06:d7:58:1b:79:3a:c5:af:03:43:cb:e3:4e:
                    47:da:3f:0b:23:73:00:14:eb:f2:60:60:01:02:b9:
                    66:37:26:f2:fe:eb:83:16:46:99:47:f1:48:54:c3:
                    86:c6:e9:50:29:a7:41:84:18:f5:8a:a5:b6:d8:d7:
                    b6:3f:f9:f0:53:b0:0f:2d:de:64:45:5f:f7:76:37:
                    07:5a:a7:ab:cb:09:87:54:7c:44:bb:73:fe:ce:4e:
                    5a:bd:da:82:e5:93:fd:26:85:59:cd:2c:e7:81:42:
                    f1:7c:67:b3:c5:68:42:05:4f:64:fa:94:d4:48:4f:
                    ad:53:df:dd:7a:ab:77:ec:8d:29:08:b7:88:a3:26:
                    c2:94:bb:60:e7:d4:6c:2b:40:2d:08:a0:a2:44:35:
                    ca:ea:1d:ea:7e:29:5b:80:1b:32:3a:ff:d3:ef:af:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:17:A9:81:0D:E8:34:9A:0A:1E:BD:D9:39:38:35:D6:9D:2C:CB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c3:12:55:fb:f4:2d:9f:cd:86:51:54:f8:f4:05:6f:32:bb:
         36:2f:ea:23:81:00:b2:65:61:bf:fd:09:dc:14:cb:88:72:cc:
         4c:a5:eb:25:b9:08:94:f5:1b:f7:3b:df:a8:17:a3:bf:7c:6f:
         6d:2d:78:11:4c:17:c7:46:91:2d:97:fb:b7:55:ba:49:8b:a9:
         b1:6a:13:0a:55:20:b9:63:81:be:b9:4c:8d:80:25:a5:6e:6e:
         13:b3:57:88:a6:77:b5:91:f7:58:4e:2b:f5:cd:f1:b0:33:b8:
         d7:a3:3a:72:bf:21:f9:d1:22:6c:fe:3f:84:11:4b:92:b6:76:
         a1:50:3a:3b:17:be:bd:01:36:a2:78:71:d8:8e:b7:78:41:d6:
         00:3c:e8:e3:ac:ea:92:8b:4f:5a:ca:da:90:94:a9:b2:bf:78:
         f5:bf:c4:b3:2e:c8:ef:ac:be:35:c9:2b:dc:71:a0:b1:52:96:
         c9:40:79:39:bf:63:24:df:a0:73:33:6e:89:3f:0d:e8:43:02:
         e5:39:1e:ec:1a:ca:19:1c:7a:db:e6:fb:43:83:49:12:a2:ce:
         af:90:47:09:92:7c:88:99:97:58:48:13:86:4d:5c:70:67:91:
         b7:f3:25:30:4f:6d:7b:e9:4a:9a:e7:1c:71:99:2f:d2:99:02:
         1c:36:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:24 2026 by rpki-client