Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa
File:                     15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa (raw, json)
Hash identifier:          ZY5OXTEdn/6kHF800PPwKTD4h+kwiEfSNFqijoq9L+I=
Subject key identifier:   1B:15:CB:7E:ED:CA:1E:48:43:C3:0C:77:EE:E9:EB:F7:B5:C9:6A:73
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F4328584E6F3A1CA5482694C86E0D6180
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     11039
IP address blocks:        2606:69c0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:1c:a5:48:26:94:c8:6e:0d:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=f968ebe6-148d-433d-adba-fd5dccb30416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1b:f5:28:42:aa:bd:47:5b:52:ba:3a:9f:29:
                    76:3e:2b:87:af:25:2f:0e:25:d4:54:7e:d1:10:d5:
                    66:8a:e3:b5:45:ba:51:b1:52:81:a0:c1:7b:b0:5b:
                    e8:e2:9e:53:68:9a:b6:fc:8b:c0:de:85:c3:c1:f0:
                    55:e8:cb:5d:84:84:47:fb:a2:20:1d:de:41:04:e9:
                    d0:62:b8:8d:7b:0d:7f:b0:c4:e8:75:17:51:08:1d:
                    29:ea:b4:1b:02:6c:65:28:76:26:93:d3:e5:99:6c:
                    ac:88:73:15:ae:a9:77:0a:8f:06:47:38:3d:d8:b6:
                    15:f6:24:67:04:f3:62:e2:e4:d6:af:9d:61:af:7e:
                    e4:65:3c:ff:65:b7:fe:ef:2a:f2:4c:ae:2f:fc:27:
                    2c:f3:8a:84:89:fa:c4:5d:d1:cb:35:74:93:9c:a1:
                    2d:6b:65:da:36:6f:b5:ea:a1:3f:34:5a:41:13:60:
                    77:ab:7e:e0:2d:ed:b7:c8:af:3a:1c:83:2e:2e:e2:
                    5a:f0:e2:de:fe:73:50:b6:f0:c4:46:0a:18:ea:f8:
                    b5:dc:7d:74:f3:a8:22:30:c1:ff:c6:73:8b:cf:05:
                    09:83:81:56:3f:e4:2e:1c:ee:a1:be:b0:78:86:7f:
                    61:4a:9f:49:dd:42:ab:c6:68:95:4a:fd:c4:c4:a0:
                    84:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:15:CB:7E:ED:CA:1E:48:43:C3:0C:77:EE:E9:EB:F7:B5:C9:6A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:69c0:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:28:6c:dc:1d:29:b4:5f:76:b7:db:e8:6b:7d:65:a1:68:be:
         38:60:77:0d:df:e4:01:91:9c:1a:b3:11:7b:0e:ea:fc:05:a4:
         33:0d:6a:88:b1:dc:f9:66:58:7a:2d:9c:51:fe:9d:14:5c:99:
         e1:1d:9b:0f:77:f9:f6:52:79:73:6a:0c:9d:ed:7e:2d:0a:20:
         f3:68:11:5b:f7:0a:c8:1f:e1:c2:78:bb:51:94:a3:78:64:c8:
         d9:76:cb:7a:19:60:5c:94:a7:6f:4f:14:1a:62:c3:76:05:0a:
         27:1e:d3:bf:63:24:0a:75:10:b0:8f:2d:3f:7d:19:64:82:14:
         19:80:91:78:2c:70:6b:2a:f8:e0:41:95:a6:df:ac:9f:92:18:
         cb:46:13:c1:8b:c1:26:69:5d:eb:42:67:b1:f3:f4:dd:0f:e7:
         4f:2a:ef:4b:a3:76:0a:33:c6:86:98:e4:d5:c7:70:ce:4b:22:
         93:05:c7:91:ce:a9:c5:9c:cb:d8:36:4f:30:15:53:f7:eb:93:
         fd:da:55:b4:1b:42:8d:e8:6f:96:25:3c:c2:60:8a:f7:95:6d:
         04:f2:46:9e:d4:66:48:7c:9b:cf:98:da:48:2b:cf:8a:c5:02:
         6c:7d:d5:2c:f3:a9:e6:a1:53:fc:37:68:e0:e3:c0:28:12:f0:
         28:2a:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:54 2026 by rpki-client