Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa
File:                     5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa (raw, json)
Hash identifier:          w09bsgB6Fp7vW1ie2kF49p7n2sMJuw2tQ3DzHxjeMac=
Subject key identifier:   8D:82:48:85:42:D5:BD:1E:9C:FC:77:3F:23:4D:F7:E1:83:D2:13:4A
Certificate issuer:       /CN=22ce2863-e26f-47ca-8b36-16048be7f337
Certificate serial:       010D0C9F4328584E5FDF5CAC14D201AC64E70A00
Authority key identifier: 26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     398931
IP address blocks:        2620:af:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5c:ac:14:d2:01:ac:64:e7:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ce2863-e26f-47ca-8b36-16048be7f337
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=284cf1fd-e962-4b84-a221-a3f82fc9c8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e7:f2:c7:db:2d:69:a3:a8:3e:43:7c:fb:53:
                    90:bf:70:b2:52:fe:29:06:a1:0d:53:5d:35:b8:bc:
                    a2:f2:21:e5:1e:dd:9e:07:7d:46:5c:a7:f5:78:14:
                    3b:65:4c:d0:88:97:21:cd:58:db:ef:00:07:3f:75:
                    cb:eb:60:19:00:d2:99:49:5d:ad:21:c8:82:d6:67:
                    81:81:23:ed:64:d1:31:e6:7e:31:23:33:97:ea:2c:
                    e6:60:05:db:ae:ce:e3:c3:6b:94:cd:d6:f4:33:f9:
                    a7:51:75:a4:fb:ff:8c:33:27:48:e1:6b:65:77:06:
                    d0:b7:79:91:88:a1:1c:df:9b:b7:be:b0:c8:4e:32:
                    28:0f:7c:a9:38:a8:05:57:5d:5d:a0:bb:68:94:51:
                    f8:78:71:a6:c8:eb:44:f2:a0:b0:03:e1:c4:06:64:
                    b0:7a:2c:08:cb:20:87:5d:41:c7:7d:4d:46:8b:d5:
                    0e:10:b3:1a:2f:a3:8a:a8:3a:34:cc:12:45:17:2b:
                    b4:44:71:ec:ce:07:87:fb:7b:07:07:c8:4e:3a:2b:
                    4b:84:13:88:8b:00:c0:9a:a4:fe:64:04:39:d3:5e:
                    55:e3:26:bf:2b:21:00:b4:18:cb:f3:30:cc:79:b3:
                    a5:33:81:c5:fe:ad:98:8c:56:d0:a5:02:6a:ee:8d:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:82:48:85:42:D5:BD:1E:9C:FC:77:3F:23:4D:F7:E1:83:D2:13:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl

            X509v3 Authority Key Identifier:
                keyid:26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:af:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:b3:b4:6d:fc:3b:0e:94:60:62:9c:14:7c:6b:d1:de:13:
         e5:e0:52:b2:a2:1c:2b:54:c8:bd:ee:36:4f:00:7c:7f:ac:e9:
         74:86:6d:0f:ed:67:54:0d:ac:47:08:c1:2c:36:08:f9:9b:19:
         5d:2d:8f:d4:65:c8:d0:a4:b7:6b:f4:eb:9b:88:dd:6a:9b:87:
         ab:2a:6d:1f:e7:aa:01:01:a3:c7:23:ed:63:f2:1a:d4:e5:b4:
         bd:2f:ba:cc:a2:f7:4d:7d:a1:18:d8:3b:e7:86:96:1c:33:a7:
         9a:8e:1e:1e:2d:74:a5:f0:89:86:fa:ac:39:4a:70:fb:84:f0:
         02:8f:83:32:fd:c6:3a:57:1c:e9:67:2f:d2:f7:78:f6:31:ce:
         1e:f5:21:12:d9:f0:f1:64:f2:a1:0d:13:0c:72:a8:6f:1b:ce:
         40:a1:3d:6d:46:e4:65:76:e7:9d:d0:bb:21:d2:4a:3b:84:f8:
         d0:48:d6:4d:8d:fd:bd:68:a6:84:16:72:ca:af:da:88:0b:61:
         91:f7:a6:fe:eb:b1:39:3c:dd:42:09:ed:79:98:4d:1c:36:2a:
         52:b2:57:79:5a:12:71:17:f0:f5:11:89:ee:21:f3:02:c5:df:
         c7:87:54:1b:5e:62:fd:ce:0c:1c:fe:16:15:83:4c:2e:1a:f0:
         a0:06:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:13 2026 by rpki-client