Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa
File:                     e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa (raw, json)
Hash identifier:          XbleLEFCJX9UWxz0wu43M0R/gvU2za6lT0cwBIb7dgE=
Subject key identifier:   1D:AC:D3:33:B4:99:1F:35:80:5C:37:2F:A5:B6:5B:16:B8:E8:3B:A7
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B9487FFFA98E3475BB87CE0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        2605:4300:2600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:87:ff:fa:98:e3:47:5b:b8:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=7a1553af-6f73-4ef9-804a-011d4265d571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:72:ed:43:07:3b:2a:66:90:ce:c7:19:81:
                    c9:db:3b:7e:a1:de:b4:fc:c0:18:02:4d:47:b5:0a:
                    ed:7b:da:07:c7:d5:a2:5d:23:46:84:77:79:e6:bc:
                    3c:e5:28:b1:b1:13:e6:a4:b7:9b:23:6d:c7:b9:99:
                    84:50:39:0f:87:06:35:9f:a0:97:40:81:ea:9c:dc:
                    95:89:d8:34:3b:63:b4:13:dc:25:a3:98:69:cf:cd:
                    28:40:d7:cf:28:3d:0a:89:ee:5f:06:a7:a0:be:04:
                    05:b6:77:8a:cd:e7:b1:bb:4d:14:b0:e4:cf:3d:db:
                    f4:a0:58:6a:66:bb:91:51:ac:83:8e:c3:f5:fd:c9:
                    52:8b:e5:30:8c:7f:e9:a0:d9:85:3e:1f:5d:57:d2:
                    8a:4b:b9:e0:de:a3:6b:1d:3c:1d:9f:6a:06:30:40:
                    96:fe:5c:ad:44:4d:90:14:68:b3:75:a3:42:13:79:
                    3d:b8:33:47:3f:7f:f0:e1:57:88:4f:1f:e8:52:27:
                    30:3f:85:de:9a:36:33:42:a1:98:3f:ad:f7:73:d9:
                    c1:7d:72:14:96:57:dc:79:1d:b5:b8:c1:63:00:29:
                    f3:e7:ba:62:e8:c4:98:12:9c:1c:4b:3e:e7:a4:ad:
                    ff:ee:6f:69:d9:aa:7a:47:9c:e5:1b:95:0e:80:73:
                    c5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AC:D3:33:B4:99:1F:35:80:5C:37:2F:A5:B6:5B:16:B8:E8:3B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:15:35:86:c8:40:e5:8f:2f:52:76:42:90:fc:24:81:90:b5:
         9c:44:ab:df:3f:61:43:81:64:2c:3f:e2:6f:d1:58:c3:3c:96:
         6f:d3:13:f6:d2:f1:ca:85:5e:0f:2d:4b:0b:99:50:5d:0a:2e:
         a2:a6:d4:23:c6:48:2f:bb:df:de:cb:16:20:cb:6c:d7:8e:4e:
         d7:06:6f:c7:27:6e:5d:74:ee:ff:13:9f:5c:f5:e4:72:b7:15:
         c6:94:2a:52:8a:84:bb:cc:d8:fe:ac:50:7b:6b:87:cc:29:c7:
         0f:be:04:33:8c:80:0e:50:2e:be:d9:44:7b:eb:18:8f:70:10:
         3c:b5:79:2a:ff:4d:6c:b1:75:d1:43:d5:df:2a:d1:2f:20:e5:
         fa:c7:50:50:91:d0:57:51:65:89:92:04:db:a2:f4:f9:1a:8c:
         4b:ff:11:a9:a3:f1:ee:0a:1d:03:f7:9f:19:b2:a9:01:c4:bd:
         62:71:cc:52:1a:b3:14:65:27:fd:58:88:a3:bc:27:64:ed:aa:
         f5:97:92:be:51:c6:97:33:c0:cf:e2:d5:57:a1:86:3c:0d:ec:
         61:d0:ba:ee:48:bf:9d:4d:e0:35:17:05:03:88:8d:c7:45:61:
         33:9a:d4:4c:d0:f5:6f:b4:86:3c:46:61:ba:97:28:14:13:49:
         a3:54:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:28:36 2026 by rpki-client