Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/91a9233a-c11d-354b-ad3f-d049484e79c0.roa
File:                     91a9233a-c11d-354b-ad3f-d049484e79c0.roa (raw, json)
Hash identifier:          LU9a80N/TR1M2VBEkUkp38XKp6sB8fMMNy3Ncw/cW/8=
Subject key identifier:   34:7C:6E:DA:35:61:0E:BD:89:46:8A:A9:5C:37:07:26:17:F5:EF:28
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B9472B5BA74C44DCCAD9500
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/91a9233a-c11d-354b-ad3f-d049484e79c0.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        2605:4300:1d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:72:b5:ba:74:c4:4d:cc:ad:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=b12d1a6e-3753-4cb9-bf88-6a4be6b93bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:96:c2:59:7a:d0:83:47:43:6d:1b:8c:39:
                    ab:b2:8c:02:f6:d0:b3:88:a6:60:b7:f4:6a:96:d5:
                    a9:4d:0f:77:a8:6d:a3:fe:e1:e4:2f:57:bd:71:18:
                    05:64:7f:bf:da:86:34:0c:87:3c:95:9b:68:50:26:
                    7b:fb:25:b7:9e:b7:ff:c6:35:0f:91:e7:fa:4a:8b:
                    56:e6:21:86:04:af:8b:ad:2e:5c:41:75:89:eb:a7:
                    4e:5f:e2:08:6f:42:21:f4:6d:59:8f:0b:97:91:f0:
                    68:18:83:81:26:2c:43:a7:c0:c8:77:79:8c:b5:67:
                    f3:b3:c0:31:63:b0:36:09:3c:a7:05:56:c5:b2:ee:
                    28:ce:fc:09:a9:90:51:3a:7f:3a:75:38:fd:a2:71:
                    20:19:6c:5e:a9:27:6c:39:2e:33:a2:fc:89:fd:41:
                    5d:6d:fd:ab:e4:5e:00:52:c7:7a:a7:95:3f:c8:d8:
                    85:5c:f0:0e:9f:a0:29:7b:20:e6:e3:db:c7:d5:6d:
                    7f:da:ea:80:85:3d:e8:12:f0:95:11:48:a2:f4:eb:
                    dc:13:04:c2:71:ca:7b:1c:38:6a:f2:0b:34:8a:21:
                    0c:8b:54:dc:e0:a8:92:1d:04:1f:b0:db:1d:4a:ac:
                    74:eb:61:30:bc:c3:5b:84:77:b4:3a:d1:d0:97:75:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7C:6E:DA:35:61:0E:BD:89:46:8A:A9:5C:37:07:26:17:F5:EF:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/91a9233a-c11d-354b-ad3f-d049484e79c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:1d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:d1:1b:db:d2:80:2b:d4:a4:7e:4f:ed:ff:e7:16:14:77:
         af:15:9f:64:17:5c:c0:50:bd:51:e9:b4:6d:0b:12:e4:02:f6:
         e4:14:f8:ac:94:fc:c5:b3:d5:64:eb:14:fd:41:a6:2f:a8:a6:
         24:de:d4:55:c3:ac:6f:8e:2e:69:f5:8f:02:07:4b:b8:ed:da:
         03:cd:4a:67:b1:1a:6a:42:55:b3:b9:ab:ea:d7:5a:e6:f8:a2:
         58:dd:54:71:77:ae:e2:47:9a:db:91:5a:03:e7:bb:1f:0f:c2:
         5c:3c:ca:da:23:f7:e1:73:1b:66:e8:81:5f:27:76:f9:91:08:
         75:17:b3:e7:bb:26:29:ad:cb:f8:aa:9c:35:b4:f7:eb:10:c0:
         53:37:01:93:8a:00:50:fa:88:1a:14:e8:e7:76:9d:33:13:09:
         03:6e:3f:b9:5c:a0:9f:cb:51:d6:99:c5:03:ea:b6:1b:24:b6:
         69:5d:d3:1e:5d:22:8c:7c:74:ef:7c:00:ec:39:ec:ae:16:fb:
         36:93:e2:0b:37:8f:28:72:0c:7d:9c:28:36:a8:5c:28:c2:ba:
         91:af:07:51:f6:ea:4e:3a:c0:b8:ff:c5:c6:c2:83:2a:ec:7e:
         23:52:bc:47:57:68:d9:dd:00:a8:eb:44:b3:4d:67:0c:df:4d:
         e6:cf:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:11:49 2026 by rpki-client