Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/f204cb4d-22af-3e8f-8171-b184c97add9e.roa
File:                     f204cb4d-22af-3e8f-8171-b184c97add9e.roa (raw, json)
Hash identifier:          rpe3i7OchyPnm5rkEk0TQc4uXktwrHsoLyWsee83Xb4=
Subject key identifier:   89:B4:5C:ED:26:1D:FD:CB:33:6C:49:8A:D2:B2:00:BE:9D:E7:64:E3
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F4328584E54B4AAB2C9341484458CD600
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/f204cb4d-22af-3e8f-8171-b184c97add9e.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     3755
IP address blocks:        2620:f:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:aa:b2:c9:34:14:84:45:8c:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=e9662f31-9f5e-4b7a-96f7-2de350f6d3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:93:db:a7:91:5d:99:f9:dc:c1:0f:d0:58:cd:
                    34:70:aa:ef:56:7d:fa:29:3b:58:e7:32:af:f8:de:
                    ef:0d:69:c8:dc:b6:0e:32:58:2b:d0:c1:3e:bd:b0:
                    8b:48:50:f4:71:f8:e3:77:54:18:ec:e8:4b:d3:4f:
                    1d:a4:80:af:23:04:26:70:e2:75:df:71:1f:ea:a7:
                    31:ee:67:87:36:52:7b:0f:7e:d0:31:f0:54:85:de:
                    9d:b5:ea:e9:f9:12:b6:0b:03:c3:02:e4:d7:9d:82:
                    3a:96:5e:60:79:24:90:9e:6c:7a:c2:99:df:1d:61:
                    bd:43:aa:b6:e2:22:9a:00:65:d5:c8:5e:55:72:b0:
                    60:ca:14:bd:c8:19:a1:7c:97:99:79:05:64:8e:71:
                    3f:c6:d1:08:5a:64:9d:cd:3f:67:f4:b5:15:b6:7a:
                    f6:50:92:55:3e:3d:9d:69:61:91:1c:16:13:d5:a3:
                    31:ff:c8:13:b8:0e:19:36:27:3f:5f:77:2e:3a:4d:
                    aa:d3:f8:c9:a0:32:f7:86:aa:d0:d7:8e:38:d4:d0:
                    14:0e:03:b4:a3:44:76:f8:ce:1b:39:a4:8b:b2:1a:
                    30:fc:e5:05:c8:ac:ed:33:d6:31:fb:ed:1f:55:09:
                    ac:bc:de:2b:aa:88:fb:32:7f:56:6e:22:42:b8:98:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B4:5C:ED:26:1D:FD:CB:33:6C:49:8A:D2:B2:00:BE:9D:E7:64:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/f204cb4d-22af-3e8f-8171-b184c97add9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7f:c9:51:d3:bb:95:90:40:86:a1:51:75:67:ce:38:25:40:
         32:29:89:b3:49:e6:06:d8:f1:7a:b2:5e:18:90:40:0f:e4:05:
         79:91:35:85:23:9b:eb:00:43:55:7a:e2:ee:b2:7e:e2:a0:17:
         20:05:b3:92:7c:45:91:73:72:ca:e2:59:83:f9:cc:6c:2e:b6:
         2d:08:22:20:24:5d:06:8b:1f:88:b1:0d:ed:35:6c:62:1d:ef:
         9e:31:be:d4:12:b8:84:22:16:3b:65:a2:69:f8:48:b6:19:c9:
         45:31:06:fa:f8:05:f9:54:8a:a0:51:40:00:eb:95:ff:8f:08:
         65:8e:b9:ff:02:ad:e7:70:45:73:df:88:2a:e8:d8:c9:d1:23:
         f3:c9:61:aa:6e:f5:3d:bd:1d:54:e7:f7:4c:fd:45:ad:91:64:
         9e:22:44:58:a0:9a:d2:f3:c6:b8:b4:3c:62:58:ee:7a:d7:a1:
         e3:9e:8f:29:df:b6:93:28:f4:e5:c7:99:60:01:09:0a:cf:03:
         28:32:3b:25:96:fa:3e:55:77:34:42:1e:66:f6:96:04:c7:34:
         05:09:a6:42:cd:69:02:40:26:dd:c4:b5:43:95:30:e7:77:33:
         e7:60:f9:2a:61:0e:20:87:6b:c0:74:72:ac:b7:85:f3:18:42:
         ee:ec:6c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:13:13 2026 by rpki-client