Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f8c2cb43-7050-3c1a-8795-76c4e58ba82b.roa
File:                     f8c2cb43-7050-3c1a-8795-76c4e58ba82b.roa (raw, json)
Hash identifier:          jDZra6NYevoSv3yF1KYSjnklicRzJiY6NXrPuCpirwY=
Subject key identifier:   44:DB:02:09:E9:7A:1F:0D:D8:B3:D7:6B:B6:67:99:B3:0E:D4:BE:39
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584E7204C8A40AFA8236E194E160
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f8c2cb43-7050-3c1a-8795-76c4e58ba82b.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     21976
IP address blocks:        2607:f3b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c8:a4:0a:fa:82:36:e1:94:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=ed1e4921-be40-4310-a0c9-939c36d78fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:0d:52:50:e7:9c:bb:1c:20:84:58:79:b6:
                    be:ff:4c:d6:1e:70:3f:ab:af:76:e7:3a:21:c0:09:
                    ee:dc:3e:49:c5:0e:a0:52:0f:74:20:74:f7:24:1a:
                    c2:9b:f3:cf:e7:e8:b9:06:75:e8:8f:1d:bc:c9:37:
                    57:21:38:d8:bc:49:fc:de:55:70:92:bb:f3:04:66:
                    a5:01:6f:ff:2a:3b:06:12:52:b0:72:de:2a:93:e3:
                    be:05:b9:a2:4b:6f:cd:df:e8:3a:83:6f:41:0a:db:
                    77:23:35:1a:60:76:fe:d5:62:40:2d:d3:14:5b:5d:
                    d1:16:62:d7:62:51:7b:41:da:9e:28:eb:31:68:24:
                    f6:16:11:65:79:91:61:81:8f:5b:d4:8e:78:26:09:
                    d5:d1:36:ed:de:6c:96:d2:2b:42:fb:de:88:65:3b:
                    95:75:b5:2a:34:6f:c4:78:a1:2b:8a:98:01:38:49:
                    5a:aa:06:8c:78:82:58:1b:8e:37:0c:74:91:c2:95:
                    e3:57:cd:06:a5:32:af:3d:bf:56:9e:6f:f8:ce:5a:
                    70:3d:6d:fd:fb:75:22:42:82:96:d8:2f:46:ee:39:
                    1c:98:31:c2:0f:bd:a1:3b:7a:e9:4e:d9:ff:9e:d6:
                    2c:d5:d6:4c:3d:68:ab:d3:99:f9:5c:61:d2:0d:c3:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DB:02:09:E9:7A:1F:0D:D8:B3:D7:6B:B6:67:99:B3:0E:D4:BE:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f8c2cb43-7050-3c1a-8795-76c4e58ba82b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f3b0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4e:89:4e:4b:8d:64:b1:a1:94:6c:f5:3c:b1:e5:6e:bb:7c:
         1c:a7:25:52:5a:4b:5a:61:5e:42:9b:6e:62:91:63:a1:2a:cd:
         34:65:2b:02:21:ff:8b:6e:b9:1e:9c:13:75:d2:f5:4e:a2:c4:
         be:23:57:6f:0f:a5:6a:a8:59:b0:cf:d2:fb:83:8e:78:f3:5e:
         5c:94:29:dc:0c:4d:5e:61:fd:32:a2:68:0c:e5:23:37:01:be:
         e5:81:af:33:90:e7:77:e0:53:f7:b5:e9:dc:ca:89:56:c3:71:
         bc:81:eb:27:04:af:f0:c4:90:53:5d:52:dd:b2:29:27:b9:34:
         49:87:ec:0b:12:5b:1c:34:c3:f9:a9:d0:be:75:74:be:67:65:
         cc:4e:42:bb:40:02:0d:28:a8:c3:63:b8:0b:e1:76:8f:45:48:
         92:1c:2e:d8:63:1a:d2:81:fa:f1:56:2c:53:db:64:10:67:d3:
         37:5a:58:5e:72:da:0d:3f:13:ea:f7:49:f1:e8:b9:f4:af:0b:
         8c:42:9f:87:c4:8b:2a:44:a5:ba:eb:28:43:9a:95:6b:39:58:
         ee:63:58:95:fc:61:9b:d6:1d:e7:78:fe:f0:b8:f9:6e:a0:b1:
         d4:05:d0:ce:f4:15:94:13:0b:1c:96:ed:65:91:3c:35:84:e5:
         82:14:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:03 2026 by rpki-client