Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cacc1eac-4540-3dc2-911e-a6dd779cac73.roa
File:                     cacc1eac-4540-3dc2-911e-a6dd779cac73.roa (raw, json)
Hash identifier:          feNxFlR5BRTAtzKLuSpAR2RYg3RGrH0BSMa/Fd1jcZk=
Subject key identifier:   9B:32:E4:FD:76:4D:95:4D:89:3D:2D:13:7C:AA:28:55:6E:48:B9:20
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584E89BF9155364696AB4E2C9820
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cacc1eac-4540-3dc2-911e-a6dd779cac73.roa
Signing time:             Sat 18 Jul 2026 09:00:12 +0000
ROA not before:           Sat 18 Jul 2026 09:00:12 +0000
ROA not after:            Fri 16 Oct 2026 09:00:12 +0000
asID:                     400097
IP address blocks:        2606:3d40:3b06::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:89:bf:91:55:36:46:96:ab:4e:2c:98:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jul 18 09:00:12 2026 GMT
            Not After : Oct 16 09:00:12 2026 GMT
        Subject: CN=663fe047-5054-4e47-a681-82f325eb50da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:68:2a:9b:bc:56:ea:7d:fb:50:d0:9d:9f:6b:
                    7c:a8:94:29:4d:a9:6f:75:65:b1:aa:c0:0b:2e:3c:
                    9c:70:12:31:89:88:45:f2:43:c4:cf:e2:2d:70:6f:
                    50:98:69:f1:c6:e7:d2:b6:f6:f8:5e:af:1b:3c:36:
                    17:a8:88:fd:ce:36:ad:0d:0d:a3:7b:f6:80:d0:a2:
                    cc:02:c5:d9:db:9f:fd:06:51:63:d4:8b:b8:4c:26:
                    89:0f:28:4b:e5:8c:6a:6f:8d:cd:a8:ae:4a:55:7a:
                    48:6d:6f:8d:29:26:c2:89:ee:82:9a:8c:1f:39:5b:
                    3d:d2:fd:d2:02:87:00:f3:85:da:f4:55:fe:e6:6c:
                    7c:94:c0:11:79:69:c1:bc:af:72:f0:b6:fc:77:8a:
                    e4:f0:69:fe:7f:e0:ea:c3:bc:78:91:cc:51:49:05:
                    d1:54:e7:89:ea:03:26:f0:75:e3:9f:30:4e:40:c5:
                    4e:dc:59:93:7f:db:7d:58:f0:35:6d:29:c2:52:7a:
                    fa:56:43:01:48:48:b1:51:d1:5b:22:4b:64:3f:f3:
                    c9:5a:54:bf:21:45:77:16:13:3d:7b:56:19:d8:49:
                    8b:53:88:54:65:68:af:2e:e9:41:b5:e0:2c:ce:8d:
                    d8:2a:73:c1:a0:62:34:f3:84:8c:a1:47:6b:f7:0f:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:32:E4:FD:76:4D:95:4D:89:3D:2D:13:7C:AA:28:55:6E:48:B9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cacc1eac-4540-3dc2-911e-a6dd779cac73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:3b06::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9f:5e:7b:b7:66:34:bf:18:e7:a2:5f:b5:83:f9:94:bd:10:
         bf:94:ec:92:94:ec:90:fe:38:32:c5:ec:5b:2f:42:d5:aa:34:
         9c:98:7f:4f:9e:72:12:f5:da:ca:b6:99:d3:ad:19:e8:ef:c7:
         7d:78:aa:63:41:34:93:63:85:52:c5:1d:45:0c:62:35:03:de:
         2a:ee:50:1d:58:ab:39:e7:81:c0:e8:8a:92:94:18:d5:e2:d6:
         4f:c8:38:f2:61:b9:95:1c:46:4f:67:ec:20:ae:15:25:75:07:
         4f:66:22:09:55:e3:38:ae:47:31:dd:fe:91:44:f9:71:cd:38:
         4e:93:86:d2:d3:f9:2d:80:d5:55:95:8b:74:38:e0:f8:ce:68:
         fe:b2:14:c8:99:ba:99:c3:c6:03:e1:3d:a0:e9:ed:85:60:89:
         7f:49:c2:93:04:c7:ed:3f:64:19:f9:0c:5b:fc:57:45:5d:d6:
         dd:43:47:9a:62:00:ad:4a:74:4f:b6:db:f1:fa:35:ac:a4:70:
         5b:10:9a:1b:c8:18:51:79:c9:8f:4e:bf:8b:79:f3:bb:da:a7:
         75:54:9a:db:95:76:81:b7:7d:d6:9b:6b:3e:ac:a7:38:c1:66:
         c9:db:c8:af:da:3c:aa:4a:79:9b:27:28:a1:51:39:27:d5:20:
         86:26:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:34 2026 by rpki-client