Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/97ad094c-da35-3d80-8689-c761db2adeeb.roa
File:                     97ad094c-da35-3d80-8689-c761db2adeeb.roa (raw, json)
Hash identifier:          9hccTmK8UFsI4RG/XZ67X1ErWXXQny8o6DQ/qMcqM5s=
Subject key identifier:   47:20:61:DC:EF:E8:CF:C1:F7:F0:64:30:C3:75:68:44:70:AF:B8:99
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584E1E44522CE7187D0305BF3F80
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/97ad094c-da35-3d80-8689-c761db2adeeb.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     8070
IP address blocks:        2607:f368:b004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:52:2c:e7:18:7d:03:05:bf:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=9f1123e1-cc9e-41ed-bb6c-476dcc194d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3e:36:a1:84:37:48:2d:e2:4a:cc:0a:38:6f:
                    d7:b1:b0:87:57:66:19:72:72:58:6a:9e:73:68:3a:
                    c5:49:67:90:1d:dc:36:a9:ab:ae:24:33:90:26:3e:
                    e8:f7:89:4c:c5:4b:8a:1a:8b:df:cc:54:5d:43:b9:
                    81:bc:f2:34:dd:a6:01:8d:4c:2f:ca:7d:e0:fb:ed:
                    01:ed:58:51:30:85:c6:5b:90:b3:fd:2b:f5:7a:a7:
                    ec:cf:09:28:67:94:79:23:c1:32:b4:7f:eb:ab:4c:
                    46:5d:9a:cc:e4:30:4f:07:c6:90:9e:47:7f:81:01:
                    13:2a:63:b0:e6:e5:28:17:ab:c9:bf:a7:d5:0a:d6:
                    8b:35:28:74:e6:05:2d:55:43:05:51:30:20:ae:a3:
                    bd:7d:ec:a3:a6:e9:e7:0c:09:8b:43:10:9d:21:76:
                    69:22:7c:97:18:b1:08:3b:07:f7:47:3e:93:bf:93:
                    46:2a:28:03:b3:b9:f3:8c:ff:45:68:41:30:02:6a:
                    ae:62:91:06:df:0c:ce:d3:af:c7:47:e8:b3:c5:48:
                    b5:03:08:b6:98:10:0e:f4:cb:f4:29:3b:ae:90:47:
                    53:0c:84:8a:a9:9a:eb:01:5b:f8:ce:9e:05:e0:e8:
                    86:65:aa:ae:cc:64:a4:e2:c1:a7:b3:0b:a6:7f:55:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:20:61:DC:EF:E8:CF:C1:F7:F0:64:30:C3:75:68:44:70:AF:B8:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/97ad094c-da35-3d80-8689-c761db2adeeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:b004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:be:52:a9:2b:8f:85:3a:19:61:60:cb:c4:11:d5:e4:1b:b1:
         85:8e:89:7b:9a:97:63:49:cd:14:34:2c:9f:38:a9:49:d4:f6:
         2c:78:30:1d:6c:36:20:c0:d9:c9:4b:de:b0:84:6c:0b:5f:ca:
         b1:9b:42:97:1f:78:96:d9:a6:e9:c1:53:9e:d4:2e:0d:ec:07:
         18:90:dd:16:54:3f:59:8d:4f:70:64:58:46:ad:4b:2b:b5:7a:
         e7:47:b2:22:1e:93:20:df:84:ab:0c:90:41:9e:c4:23:29:91:
         6a:4d:ab:fe:d1:29:9e:36:b9:11:82:7d:5d:52:65:a5:c7:0f:
         c5:3d:97:06:8e:e0:05:eb:37:9d:02:72:29:2f:03:e1:b6:08:
         24:a2:04:1c:31:e5:2e:8d:35:58:aa:4a:f3:fc:97:67:36:c4:
         df:f4:11:2f:88:02:3f:4f:7f:1c:6c:5a:c6:42:5a:5d:32:76:
         5b:f2:12:41:0d:ea:ee:36:60:5f:f9:62:43:50:c8:6b:e6:c0:
         9d:3a:d3:ab:7f:17:e4:98:e5:0a:3b:dc:4c:d5:cd:10:f6:f8:
         38:af:25:af:e1:95:40:40:d5:33:e8:9c:2e:c7:5e:71:5b:25:
         49:80:35:c4:96:c4:6c:38:6b:be:f4:3c:9c:79:21:e2:22:1a:
         9e:da:c1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:35:53 2026 by rpki-client