Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07bb6ba1-f043-3643-9fff-6ebbd432e8ea.roa
File:                     07bb6ba1-f043-3643-9fff-6ebbd432e8ea.roa (raw, json)
Hash identifier:          GGcZJfnsmW/rSv7Z7LjKFChwkyV0uequg8aPvUD8dh8=
Subject key identifier:   B3:BF:43:39:65:BA:FC:82:0B:06:98:4C:32:E1:11:66:B7:3A:1F:61
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E51E9FA26F982212F0D1B1490
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07bb6ba1-f043-3643-9fff-6ebbd432e8ea.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     13335
IP address blocks:        2606:4700:48::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:fa:26:f9:82:21:2f:0d:1b:14:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=59564d24-d85a-482b-b6d9-9cb64266ce37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:6f:a6:ba:86:69:ce:a7:2a:a9:77:02:e8:
                    2c:01:02:72:ad:61:cf:5e:e9:f7:43:da:9b:48:fc:
                    62:f8:57:2f:17:31:8a:ca:14:39:d9:73:77:65:18:
                    b9:7d:f8:69:5a:a3:5a:4b:d8:86:da:e2:4d:a6:18:
                    9e:e5:bd:58:41:af:a2:a9:a3:6b:6e:a2:24:86:bf:
                    b5:92:b1:df:17:35:3e:21:28:1d:d7:fa:d5:05:2d:
                    bb:f7:db:26:32:08:2d:86:ea:38:79:10:29:48:7b:
                    3f:25:23:3d:bb:87:19:f3:fb:1f:f5:2b:42:56:d3:
                    65:5a:c9:c9:fe:dc:4a:a6:99:40:8f:2e:80:f8:78:
                    cb:d8:5d:9d:75:3d:47:73:fd:1c:d4:3a:b4:5e:86:
                    8e:8b:55:ce:3e:9d:7d:d6:c0:10:ea:59:5c:e4:e5:
                    a2:d9:f3:82:58:b3:28:af:63:cf:f7:8b:d8:fd:40:
                    77:c4:62:68:a3:8b:40:ce:82:c4:e4:41:a8:05:ac:
                    2f:c3:d5:81:6e:f0:3a:54:8c:74:73:8e:57:15:f1:
                    11:a9:d5:23:24:bb:c5:47:51:ae:ed:07:44:51:00:
                    01:fe:6d:15:17:1d:b8:17:68:51:a6:f9:d2:3e:2b:
                    44:51:3f:ee:51:1c:da:cf:e5:7f:b0:bf:59:eb:82:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BF:43:39:65:BA:FC:82:0B:06:98:4C:32:E1:11:66:B7:3A:1F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07bb6ba1-f043-3643-9fff-6ebbd432e8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:48::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:c5:02:78:b4:6f:1d:6a:ae:2b:7f:b1:f1:2d:9b:b5:01:04:
         0a:5c:6f:36:1b:91:c6:73:b0:67:79:3a:07:b6:3e:7b:41:e2:
         a2:6a:84:ad:92:ef:3a:80:49:93:31:c9:75:5c:bd:b7:a4:26:
         bf:44:11:3b:86:66:b3:f3:6a:f6:9f:2c:7e:8b:41:61:c9:21:
         06:ac:c2:71:4d:c6:83:a6:33:54:24:ab:2b:3a:73:a3:8e:b9:
         f3:bc:6f:68:e1:fe:21:09:e7:86:22:7f:ee:6f:94:f4:31:b5:
         0e:d9:31:9b:8e:65:d9:32:e0:0e:95:15:7e:9e:1e:dc:38:fa:
         b9:b3:58:7e:7e:c5:81:7d:39:33:53:a0:45:23:32:a4:0e:22:
         56:c6:b4:e8:60:48:53:30:55:c6:c9:f1:a0:3c:88:92:22:50:
         0b:62:bf:a8:8d:11:8d:78:91:68:71:2c:33:26:74:f3:bc:51:
         a1:3a:78:9c:9f:ae:a2:58:af:ef:f4:68:4a:b5:46:a0:88:e8:
         29:34:da:ae:e8:fa:7b:42:e6:27:15:b2:e0:2f:20:a5:6b:2b:
         04:20:16:e7:3d:8f:37:8f:5f:ce:1b:6b:26:ad:e4:79:59:a1:
         e6:b5:d2:28:1a:0c:2b:54:dd:bf:52:11:3f:6f:2b:90:50:1e:
         3b:d5:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:29 2026 by rpki-client