Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6e673af4-b7eb-3b9d-a8ed-21c3646119c2.roa
File:                     6e673af4-b7eb-3b9d-a8ed-21c3646119c2.roa (raw, json)
Hash identifier:          slUIklF+/0pby1dVnj3tTjmg/M9UN1vPb3ij3kA6qLo=
Subject key identifier:   97:F6:86:47:FD:B7:B8:E4:6B:D4:5E:58:1A:2B:AB:0C:1D:A1:F1:33
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584E86F4ECFD92980EF0468BE5E0
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6e673af4-b7eb-3b9d-a8ed-21c3646119c2.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     36103
IP address blocks:        2606:db40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:ec:fd:92:98:0e:f0:46:8b:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=18d64134-0dd5-4bc6-94ca-927669780e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:4a:3b:a4:b5:21:ad:a9:8a:55:36:89:05:
                    0d:10:de:18:8c:c1:f4:f0:0a:96:cc:a9:e1:36:bc:
                    f6:bf:cd:79:6b:21:6f:96:4c:cd:45:88:cc:4e:7c:
                    e9:cd:95:ee:4e:69:0b:0a:68:64:31:7e:cd:52:b0:
                    cf:94:56:5f:87:98:54:f2:1d:be:3e:70:fb:26:44:
                    b2:c0:a4:1c:43:9d:97:c0:8a:4a:72:42:03:37:16:
                    c3:06:61:ce:71:7c:4f:70:83:7f:0f:ac:8e:07:35:
                    18:fa:ff:5f:38:d7:f6:da:cd:48:22:15:f8:bc:ea:
                    b0:a5:60:f2:45:20:51:91:dd:a5:0b:03:13:29:d0:
                    96:d6:26:aa:64:9f:e6:c7:f2:2c:b0:3f:96:36:a5:
                    63:23:66:1d:af:8f:d3:3d:6f:84:6f:c9:6b:e0:69:
                    c2:b3:21:3f:ae:76:dd:fe:8b:51:d1:1b:f4:3e:76:
                    63:93:89:24:d9:71:29:26:e2:20:7b:ca:8b:7a:4c:
                    46:f3:83:cb:5f:f3:1a:32:de:38:e3:cf:3e:0f:9f:
                    0d:06:4a:40:22:03:c5:b7:8b:14:e7:58:33:2b:df:
                    ab:4c:42:1f:79:0d:f2:bc:44:2c:1c:c3:7b:9e:3f:
                    17:34:b1:97:ef:39:26:0a:34:78:46:ab:5c:2c:55:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F6:86:47:FD:B7:B8:E4:6B:D4:5E:58:1A:2B:AB:0C:1D:A1:F1:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6e673af4-b7eb-3b9d-a8ed-21c3646119c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:db40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:09:ee:ae:58:b8:0c:06:86:a8:7a:ed:eb:d0:2c:60:3e:1b:
         d3:03:ca:d0:a9:ca:71:45:4a:7e:7d:3c:82:78:db:b5:d9:f2:
         2c:d9:74:8e:c1:ce:32:4e:c6:c6:aa:cc:4f:3e:bf:c6:86:c0:
         12:27:24:6e:6e:86:c7:9b:c9:08:3c:9e:67:41:37:ab:8e:27:
         6d:77:ee:19:20:f0:25:eb:fc:ac:ca:c1:c2:56:b7:87:73:c7:
         4c:ee:aa:ff:8b:2c:24:9e:76:dd:00:a6:54:c7:29:27:39:e8:
         c1:e0:6f:d1:4f:9f:a9:e3:96:df:ff:23:89:79:35:66:4f:a7:
         b9:64:98:a9:19:cb:bf:af:66:dc:27:ba:76:ce:88:47:fd:4f:
         22:06:db:ba:c8:c6:2e:1a:05:ae:16:e2:eb:be:e9:15:13:27:
         d6:fd:8d:57:c0:e2:66:c8:51:d0:1e:ad:14:27:fd:e0:a6:5f:
         13:34:ef:e4:95:d1:51:10:ab:da:b0:ae:42:dc:36:57:44:cb:
         3f:8a:26:76:07:94:b2:be:05:97:34:01:36:b1:20:bb:22:4b:
         f9:1d:70:76:6a:c8:0c:ae:78:e3:ac:2b:9a:ba:85:a9:e4:ec:
         b8:5b:e6:2e:46:55:a0:2f:23:8d:a9:92:34:1e:e7:67:08:b4:
         79:e5:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:21 2026 by rpki-client