Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa
File:                     de9871b6-c06a-3910-8be5-7c2c3df1b317.roa (raw, json)
Hash identifier:          0k71lz/63eeXQ1MbEUCGSZTDjCaBYINkdecpq0MEagM=
Subject key identifier:   2E:23:76:EB:90:D1:D4:9B:D7:67:A3:DA:71:D7:71:23:3F:67:BA:CC
Certificate issuer:       /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial:       010D0C9F4328584E1A1443D1598DC83BE3ACAB60
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        2607:340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:43:d1:59:8d:c8:3b:e3:ac:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=0ddd830e-3bd8-40f7-848b-266ae8c7a717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:66:65:c0:5e:7f:ae:35:30:2d:4d:9e:7f:36:
                    7c:eb:2b:25:91:72:b3:38:80:fb:74:01:cf:c4:b9:
                    10:58:c7:63:46:9d:1f:fb:0b:ee:c2:40:30:b3:84:
                    0a:69:cf:60:c9:1e:df:a7:9d:72:9f:3f:42:d8:47:
                    60:eb:9b:cb:aa:40:ac:8d:24:c7:af:31:90:72:3f:
                    c9:38:d4:35:10:2a:c0:46:44:c9:9a:7d:b6:a5:2f:
                    59:c8:36:4e:42:c3:65:07:12:39:5e:1c:c2:fe:8e:
                    e5:8d:ee:8c:9c:d1:e9:31:cf:69:7e:3e:77:a0:50:
                    73:47:85:18:eb:ab:9b:89:78:83:c5:86:3f:73:f2:
                    f8:77:ce:45:02:a8:4a:c2:18:5e:3b:78:e6:a5:b2:
                    94:32:8c:9f:3a:ac:2a:c3:1f:6d:12:0d:49:58:77:
                    10:54:82:ef:4b:25:10:68:90:61:d4:a2:c0:df:bb:
                    15:09:88:ba:b9:d1:fc:0f:bd:5f:ba:b0:fb:2a:06:
                    21:be:56:f3:2e:7b:a0:6b:d2:c4:c8:34:66:d2:7e:
                    ae:4e:0f:8d:02:a7:fe:bf:6c:9d:36:24:25:44:68:
                    ef:06:7c:b2:40:55:8a:bc:f6:33:15:80:17:e9:bc:
                    f4:63:3a:41:fc:f7:13:6a:e8:ef:10:36:02:69:4b:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:23:76:EB:90:D1:D4:9B:D7:67:A3:DA:71:D7:71:23:3F:67:BA:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl

            X509v3 Authority Key Identifier:
                keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:38:5b:4c:82:98:16:2e:08:dc:35:6b:d1:b3:90:de:0a:34:
         41:4c:23:e7:9a:27:d0:68:7a:f2:ab:bc:98:10:b7:a2:be:bf:
         76:18:c3:30:20:3c:1f:77:57:29:07:9d:5f:c4:a8:d4:7c:b5:
         96:f5:40:8f:0b:8a:5c:6c:20:78:5d:f5:b0:38:17:95:44:68:
         25:2c:c2:dc:73:e4:73:87:6e:51:1a:67:83:15:dd:ec:22:2c:
         d5:8b:a5:e2:47:9b:43:ef:f5:59:9b:c7:e5:29:67:bd:86:01:
         ed:a2:27:ad:5a:2b:a7:86:e0:15:07:8f:61:d6:59:b7:fc:74:
         86:da:a7:e7:ce:cb:a3:5f:df:21:11:1e:69:03:54:04:a3:d5:
         5f:27:9b:c7:7b:29:64:79:5c:a5:ab:b6:f7:fb:56:6f:f0:70:
         37:b7:de:b7:84:39:56:3e:04:67:8e:f6:32:21:41:9f:7f:5c:
         0e:05:a3:96:ad:19:35:4a:e8:00:f7:ee:f2:fb:2c:62:45:3c:
         62:31:2d:ef:cf:69:fa:14:6c:dd:e2:eb:80:7f:e7:d5:0c:8a:
         f1:c1:a1:85:21:5a:55:f7:33:aa:f9:72:20:89:91:67:76:07:
         93:93:55:dc:d2:3e:54:d1:e6:7c:fc:70:10:bc:36:e2:93:8b:
         20:8f:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:19 2026 by rpki-client