Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/2d0bd174-74ee-33af-b41a-1ac571be9097.roa
File:                     2d0bd174-74ee-33af-b41a-1ac571be9097.roa (raw, json)
Hash identifier:          Jqxey3jUVSaXOYYRfDgc5UbXzzsFmeT1EpmsQ9zziQA=
Subject key identifier:   06:AD:2A:12:CC:83:27:C4:0C:89:81:30:FF:72:5D:71:6F:64:F3:07
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584EA7908F3D945BEFA1EE50BEC0
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/2d0bd174-74ee-33af-b41a-1ac571be9097.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     394354
IP address blocks:        2620:10a:8018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:8f:3d:94:5b:ef:a1:ee:50:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=70a31299-dab8-4cf3-aecd-a7d90febda33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:55:59:cc:0d:57:53:52:be:64:95:b2:50:
                    73:26:c9:e8:cb:85:e6:72:3b:35:aa:c4:d0:9b:e1:
                    47:12:95:e7:8a:15:9c:3a:2d:d9:5e:01:67:28:0a:
                    02:d4:14:50:04:49:f2:7d:55:e2:4f:ec:51:98:a1:
                    50:af:f0:66:18:a5:f0:cf:5a:44:cb:22:69:93:58:
                    c5:c5:f9:ea:e5:88:39:34:94:4c:4a:20:a7:d5:77:
                    8e:00:b0:a8:86:26:a6:b0:1e:5d:07:6f:fc:6c:7f:
                    bd:bc:cd:d3:6a:2d:54:e9:8f:28:62:11:10:50:35:
                    45:06:de:09:6a:f1:8d:c2:18:07:f1:26:21:04:27:
                    34:a6:25:29:c1:ad:ef:fd:34:2b:24:c7:03:12:0d:
                    fa:fd:c5:ab:87:29:b2:cb:62:ad:48:c6:05:6f:f5:
                    bc:cf:8e:42:1e:01:c2:d3:8a:fe:6a:67:d1:1f:fb:
                    b8:a9:51:a5:e7:23:d6:74:b9:69:c5:e1:4f:5a:a3:
                    1f:ad:94:8e:66:d5:ce:47:cc:16:c7:0f:0c:49:0a:
                    fa:72:43:13:e4:6b:7c:e7:f9:82:e9:3e:97:bf:0c:
                    b7:27:2f:8d:53:c4:c9:b7:6b:dd:3e:10:14:0a:52:
                    1d:81:07:42:af:39:d0:5b:63:c4:e0:17:2f:96:e4:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AD:2A:12:CC:83:27:C4:0C:89:81:30:FF:72:5D:71:6F:64:F3:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/2d0bd174-74ee-33af-b41a-1ac571be9097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:8018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9b:93:49:40:a2:4f:75:58:43:f9:a2:d8:75:3d:a2:07:02:
         96:fa:3e:fa:f9:f6:6d:9b:3b:5c:df:d1:15:e6:f8:e2:ec:f5:
         aa:35:c1:66:61:e9:47:74:cf:9d:65:0f:9f:ab:9b:53:7b:36:
         d5:cb:b9:26:77:84:08:c8:71:00:01:84:9d:3b:ee:6c:76:90:
         48:2f:35:2e:5a:22:5e:e4:97:99:30:fc:dd:8f:10:d0:5f:06:
         cf:43:f9:a3:1c:c1:c4:bd:6a:e1:74:ad:65:96:ad:a4:e2:94:
         70:cd:f9:3d:74:b1:af:18:83:60:89:31:87:2e:9f:46:20:5b:
         b1:3f:b7:f5:2e:78:01:cc:63:97:ad:5b:14:79:cf:eb:f5:29:
         a0:56:34:c8:c8:98:9f:09:38:bf:b9:03:dd:a5:2f:e0:2d:94:
         9d:56:14:b3:52:ed:11:8c:95:60:f3:30:e3:e2:ba:c7:38:47:
         e2:3f:f0:85:09:2e:38:31:71:9f:a0:d0:43:8d:e9:76:ee:c0:
         ba:05:5c:18:d4:b8:73:10:35:3b:05:b7:b0:f6:cb:46:88:db:
         ed:7a:db:5a:0d:87:d8:b9:3c:9e:8b:72:30:0a:88:60:67:fb:
         8c:a2:be:c7:86:e2:a9:73:93:9e:10:0b:68:e4:73:15:7f:8d:
         bc:4d:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:56:34 2026 by rpki-client