Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/75f0abaf-7026-3d77-a50d-c5bcdf55e547.roa
File:                     75f0abaf-7026-3d77-a50d-c5bcdf55e547.roa (raw, json)
Hash identifier:          r1wPuP21LT61pVp53DS8XaZpJGGpQzjxajF9GMgavGc=
Subject key identifier:   E1:67:BB:70:97:9B:92:27:14:05:D4:27:59:3A:F0:A2:5D:02:80:5A
Certificate issuer:       /CN=c739b1fc-db89-423c-9437-5e3b11048882
Certificate serial:       010D0C9F4328584E94EA4DEFDCA712950B1A4700
Authority key identifier: DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/75f0abaf-7026-3d77-a50d-c5bcdf55e547.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     40080
IP address blocks:        2602:fb31::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:4d:ef:dc:a7:12:95:0b:1a:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c739b1fc-db89-423c-9437-5e3b11048882
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=15f2f3c8-85c0-44e9-8c30-9485aa3e6626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:99:a8:1c:f5:c3:66:fe:09:d4:6b:0d:30:
                    74:23:e6:e3:21:57:7a:f0:37:82:20:ab:88:76:1d:
                    2f:c7:a7:cd:62:d5:53:0f:4d:4c:be:8f:51:12:e8:
                    1c:95:ee:69:11:c3:df:b2:8c:1b:ce:ad:04:0e:4d:
                    8c:94:85:e7:77:d4:27:7f:bf:3e:aa:42:ea:cb:65:
                    c6:ab:15:8b:f2:05:92:c5:0e:03:25:b6:7a:2f:74:
                    e7:0a:58:3f:39:f3:d3:cb:f5:82:b7:2b:b9:c5:41:
                    27:41:52:be:63:9c:37:d1:85:35:41:95:c0:ed:a0:
                    9a:a7:d8:90:63:69:d1:51:6b:77:42:c2:08:c1:e2:
                    a1:dc:ed:e2:d7:1c:e3:f3:a9:66:ea:bc:3e:69:a5:
                    41:2d:2d:5d:49:04:0c:fa:f3:21:af:ed:28:d0:66:
                    56:6e:36:26:69:53:a6:dd:e6:d3:91:e6:ac:9b:a0:
                    d5:8d:29:c8:ce:da:21:47:7b:b1:67:38:5d:82:0a:
                    84:9b:bb:ee:f8:a7:fb:8d:f5:18:a7:13:07:e2:15:
                    de:66:c8:01:58:8d:71:ff:98:84:8a:f5:22:a7:ff:
                    1d:6a:08:2b:c5:49:15:1f:4b:5c:2e:8c:77:fd:90:
                    70:16:0a:9a:2d:cf:29:6f:8e:e3:b2:77:00:04:0e:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:67:BB:70:97:9B:92:27:14:05:D4:27:59:3A:F0:A2:5D:02:80:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/75f0abaf-7026-3d77-a50d-c5bcdf55e547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl

            X509v3 Authority Key Identifier:
                keyid:DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb31::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:29:dc:5b:97:f4:e9:89:e6:ba:5a:ed:26:b5:7c:df:34:
         f3:05:9c:81:f2:d3:ad:52:5a:45:55:24:22:94:d2:37:05:d1:
         5a:56:f9:fa:69:26:e5:50:3f:9b:9e:17:79:8a:6b:6d:91:a4:
         ce:ea:4f:b0:7c:11:a3:a6:e5:d2:9b:e6:83:34:c9:a5:da:c4:
         b6:55:22:db:38:a1:15:f2:b6:cd:c1:e4:82:93:d1:49:5f:fb:
         96:ee:50:9b:9a:85:6f:8f:40:c0:d9:45:1e:b6:81:3f:d3:b7:
         c4:ea:24:13:f2:03:b5:04:4f:35:3b:20:76:2a:ed:01:4b:01:
         ae:9f:1e:74:e5:16:6d:14:02:1c:ab:a5:33:77:3d:d7:0e:f0:
         27:a1:f8:28:c7:47:53:ae:e0:d1:59:59:bd:6f:c3:44:e1:a8:
         aa:34:5d:68:0a:eb:db:c1:66:29:0b:03:f2:92:72:6b:b8:bf:
         ca:7b:a8:55:47:05:05:b5:a3:af:7b:c4:10:04:5d:c5:f8:57:
         97:f0:d5:83:05:5f:84:49:2e:81:64:94:30:e8:1e:47:50:42:
         9c:f3:17:6b:ca:00:d3:01:3f:7a:3c:14:39:6c:de:df:38:69:
         eb:26:5f:99:8b:da:54:49:a2:bf:2c:f8:03:8a:ae:78:d2:2e:
         70:7a:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:53 2026 by rpki-client