Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa
File:                     e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa (raw, json)
Hash identifier:          knJeYOCQfvCDcg8lAYBKrpOyJ4zUine7qpfOzv6o9o8=
Subject key identifier:   8B:F0:AB:28:A0:49:51:38:B5:24:15:F6:07:50:2A:DE:4F:44:03:B4
Certificate issuer:       /CN=6288979e-3de3-4c2b-9663-274b980094e8
Certificate serial:       010D0C9F4328584EA7875AF5346F53783FB90310
Authority key identifier: EE:A6:80:69:BA:9F:74:19:EC:3D:57:C3:E7:9D:92:7F:4F:C3:32:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401593
IP address blocks:        2606:dac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:5a:f5:34:6f:53:78:3f:b9:03:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288979e-3de3-4c2b-9663-274b980094e8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=164fb427-8ba3-4041-8275-faceae3c2ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:e0:55:f7:73:50:72:fd:13:bf:14:8f:b7:
                    97:44:cd:07:c4:8a:3b:2e:ab:94:17:0d:76:72:ca:
                    29:a1:ce:57:ec:e0:fc:1f:d5:ba:98:99:b1:0c:09:
                    4f:5f:d6:c2:bf:48:e3:0c:26:f1:3f:92:68:b1:f5:
                    d2:15:54:4b:4d:83:4f:e3:3d:83:f6:db:6b:ff:90:
                    d2:66:94:57:58:2d:91:ca:a2:15:60:7a:5a:d6:fb:
                    7d:0f:db:3c:0a:d9:2a:4e:4f:23:e0:b3:ff:11:66:
                    73:b3:4f:a4:04:27:0b:5d:af:a0:7c:d5:0b:dd:ce:
                    fc:0b:42:b4:28:a3:64:e3:25:e5:5b:61:aa:b2:fa:
                    68:68:67:f6:02:95:f7:05:80:e5:05:54:23:f3:79:
                    0a:e9:ef:aa:07:03:30:b6:76:b4:bf:1f:45:7a:6e:
                    e7:75:03:08:2e:cd:5e:86:e3:96:da:86:1d:e0:6b:
                    22:e7:ac:42:f6:e9:60:5b:83:17:c0:96:88:90:7b:
                    62:77:c3:dc:33:45:26:e6:0e:76:3b:8b:91:88:9a:
                    a3:1e:b4:1c:c0:1a:8a:d0:69:f7:86:9a:4a:26:1c:
                    fc:98:d4:7e:d6:9f:e3:b1:f1:f4:49:69:69:c6:67:
                    bc:4e:3e:5f:16:c6:6c:ae:1e:5e:d1:86:fc:de:f3:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F0:AB:28:A0:49:51:38:B5:24:15:F6:07:50:2A:DE:4F:44:03:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.crl

            X509v3 Authority Key Identifier:
                keyid:EE:A6:80:69:BA:9F:74:19:EC:3D:57:C3:E7:9D:92:7F:4F:C3:32:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:3d:aa:c0:a7:52:ef:6a:c4:fd:ba:6e:eb:0a:aa:9d:9c:34:
         f6:25:44:da:78:c2:ff:8d:3f:89:e1:56:0b:72:6e:ca:fb:de:
         ad:7e:9e:69:1a:3b:b9:ad:e6:49:f6:18:db:8e:22:e1:6f:20:
         7d:59:d0:b7:4b:21:bd:e7:67:69:eb:af:0e:67:b6:12:10:65:
         6d:f3:f9:aa:af:c0:2c:20:c4:53:0f:0b:8c:e2:b8:fa:df:53:
         21:4d:f8:63:bf:c3:d7:5b:39:dc:26:ec:b8:82:14:e7:e4:a7:
         a2:e6:e5:b4:d9:e2:15:21:3e:ce:85:8c:85:ab:c2:aa:58:41:
         63:47:f5:7f:51:97:16:9a:79:20:25:7c:57:48:0b:05:a3:d0:
         60:48:c0:ee:38:35:12:ae:56:07:06:8c:cd:60:10:d0:a0:50:
         1b:b7:0e:bf:b4:c5:72:d5:a2:03:c4:0e:4e:88:00:e1:94:b4:
         24:ff:71:72:5b:4f:ef:b7:c9:47:83:72:6a:84:51:5b:0a:26:
         a8:ed:a6:b9:25:e7:8a:bd:f5:b9:1f:be:05:03:fc:3c:cb:6f:
         ba:19:c5:60:7e:73:69:4d:85:89:53:63:6d:7e:e1:ce:1d:4c:
         18:90:c1:5e:7c:2e:94:df:7c:af:76:43:cc:22:c2:4b:ff:0d:
         f6:ca:fe:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:22 2026 by rpki-client