Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/c3b62cb4-7796-3008-8442-7252aac5f704.roa
File:                     c3b62cb4-7796-3008-8442-7252aac5f704.roa (raw, json)
Hash identifier:          7W0cNE6+7O6y1B8rRjD8EclWAjlBEjGSjo+jSM4Bgeo=
Subject key identifier:   77:D2:5E:32:E8:1A:8B:B9:CC:EA:00:30:0F:BB:DA:52:0D:90:33:8D
Certificate issuer:       /CN=ca4cb307-c1ce-4780-8903-6931cc40426b
Certificate serial:       010D0C9F4328584E9A7FBF0ACA49164264F7FF80
Authority key identifier: C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/c3b62cb4-7796-3008-8442-7252aac5f704.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     54804
IP address blocks:        2606:7c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:bf:0a:ca:49:16:42:64:f7:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca4cb307-c1ce-4780-8903-6931cc40426b
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=5f9c82de-eec8-45e0-b8e1-1e47334ce14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:0e:77:50:08:7d:6e:d7:3d:7b:41:e7:10:
                    06:3d:18:06:c2:9d:30:cb:b0:cd:66:c5:ab:47:85:
                    f5:49:7d:bd:be:8b:f0:d0:44:94:36:d4:65:43:6e:
                    2a:f9:15:fd:c9:6c:a7:27:c5:64:2d:a8:44:1a:04:
                    06:1e:15:54:5f:21:73:17:8f:69:00:44:50:65:da:
                    d8:a1:09:2f:4b:7e:84:e3:bb:f7:3a:04:38:b1:20:
                    60:5c:ed:7a:fa:29:a7:0c:78:bd:d2:4f:32:ba:a2:
                    71:15:7c:94:d9:17:e2:b0:a9:19:73:18:88:a5:f4:
                    2a:0d:74:e1:e2:03:17:de:e5:58:4a:2c:d0:7a:16:
                    73:42:1a:46:cc:9c:10:ab:4a:b4:7b:77:c4:2f:e1:
                    01:c7:de:7c:aa:e5:40:de:cd:d9:1d:18:4d:3e:b7:
                    37:3e:f6:90:ad:99:59:9e:78:77:f8:0f:e4:31:63:
                    3b:76:bd:45:1f:d5:9d:b6:42:1f:bd:08:42:0a:55:
                    0c:fd:61:21:8a:36:58:68:34:6d:86:71:67:ab:03:
                    c8:60:00:ca:fb:c1:99:45:c0:66:ba:fe:fb:71:22:
                    39:db:1f:4a:75:e1:c5:77:98:d2:f6:21:76:ab:15:
                    54:da:ab:ea:36:37:b4:b2:4a:36:b1:e7:47:aa:84:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D2:5E:32:E8:1A:8B:B9:CC:EA:00:30:0F:BB:DA:52:0D:90:33:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/c3b62cb4-7796-3008-8442-7252aac5f704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl

            X509v3 Authority Key Identifier:
                keyid:C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:c2:b8:48:26:01:27:5b:d9:14:5f:92:46:6d:47:9f:1d:
         c1:86:50:17:c0:e1:af:1f:8b:7e:10:04:59:da:88:b4:f7:77:
         dc:50:f7:1e:11:72:4f:73:69:40:16:ee:a2:e6:c4:8b:c5:d2:
         dc:74:5b:ea:aa:76:cc:1f:64:10:df:ef:1c:42:a1:f7:43:59:
         58:d9:95:3d:16:c5:cc:03:6a:4e:3b:de:fa:db:04:fc:1c:3f:
         01:f1:5f:40:64:f8:bc:bf:c6:79:e4:73:76:0e:09:8a:2a:20:
         0f:d9:94:44:ea:00:08:52:09:b1:d0:8a:32:82:23:84:9e:df:
         54:a1:ed:3b:dd:f6:b9:c9:ae:85:90:41:ea:8b:9c:75:d0:57:
         eb:d3:fb:06:c9:2f:7d:ba:23:cd:69:b8:ef:ca:6f:7f:49:41:
         ee:5e:9a:7b:64:c5:59:84:06:f1:bf:04:73:15:36:d0:c4:05:
         87:f4:d4:24:91:2a:c2:d8:6a:d0:00:74:71:97:18:a9:6b:e4:
         59:89:2d:19:82:ba:42:62:d1:38:f5:9d:8f:4f:7a:90:1f:1c:
         9e:87:bd:a7:5c:90:9c:bc:70:df:53:39:ff:f4:60:d5:89:7e:
         69:75:87:5b:1b:e1:de:26:86:bf:f7:83:a7:16:76:84:27:59:
         6a:40:57:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:25:24 2026 by rpki-client