Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/ae9397c7-240d-3b4a-b5fb-c4325a3a23e3.roa
File:                     ae9397c7-240d-3b4a-b5fb-c4325a3a23e3.roa (raw, json)
Hash identifier:          4Nf+3TFT0RiRArEBmJKsXvAOHpieMmPpo+aqsPuhIAc=
Subject key identifier:   34:2A:9B:01:44:63:C6:9D:D6:2A:FB:D6:9D:AB:4B:08:49:89:E5:D2
Certificate issuer:       /CN=082b5dd7-830e-4bd5-ac9d-2949ba50501f
Certificate serial:       010D0C9F4328584E95FAE35EB26B50C8159FFE00
Authority key identifier: BB:A1:24:25:0E:38:A1:8A:07:23:27:AF:C7:4F:D1:68:8B:CE:0C:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/ae9397c7-240d-3b4a-b5fb-c4325a3a23e3.roa
Signing time:             Wed 22 Jul 2026 18:09:28 +0000
ROA not before:           Wed 22 Jul 2026 18:09:28 +0000
ROA not after:            Tue 20 Oct 2026 18:09:28 +0000
asID:                     62672
IP address blocks:        2620:c4:e008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/082b5dd7-830e-4bd5-ac9d-2949ba50501f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/082b5dd7-830e-4bd5-ac9d-2949ba50501f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:fa:e3:5e:b2:6b:50:c8:15:9f:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b5dd7-830e-4bd5-ac9d-2949ba50501f
        Validity
            Not Before: Jul 22 18:09:28 2026 GMT
            Not After : Oct 20 18:09:28 2026 GMT
        Subject: CN=d01ff0df-3f5a-425f-8884-aee8b2913e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:51:a5:ae:c5:60:47:2c:64:82:2e:b7:41:
                    f9:7f:ee:cc:78:84:20:61:63:ae:e7:4a:f4:2a:fd:
                    be:35:a8:96:31:38:d4:6e:43:91:51:c6:2b:72:c8:
                    be:6b:7a:8d:61:ff:1e:5c:f3:36:6c:53:0e:39:16:
                    1d:93:1b:9f:a4:90:fb:6e:6f:5b:ed:e8:1d:bb:28:
                    2a:27:34:cc:f9:a9:2c:47:d0:3a:35:4c:bb:50:c2:
                    9f:90:1a:55:b6:6b:42:be:07:b9:a1:ae:5c:2d:8e:
                    2a:99:c9:d8:2d:4f:45:ba:8c:70:13:ff:55:ad:af:
                    2d:18:c5:9b:bb:15:72:e1:44:f6:ca:94:70:df:99:
                    69:2e:00:3b:a5:33:bb:ac:8d:04:39:5c:e5:f3:85:
                    3d:c4:31:e9:66:ae:49:ef:33:7c:bd:64:b8:0e:f8:
                    9b:79:be:83:f7:d8:bd:2f:f0:25:ac:10:0b:1e:cd:
                    63:be:d9:0f:42:02:8a:75:5d:07:62:57:d7:cc:f6:
                    34:0f:46:14:9f:22:7b:ac:17:ef:0d:3c:fd:02:fa:
                    b7:aa:90:10:f4:c3:9b:d0:aa:bc:26:8f:7d:4d:85:
                    39:18:b5:ac:5d:43:4d:48:43:c2:27:ad:cf:d4:78:
                    0b:54:2c:82:09:f7:2a:7b:18:c0:b2:38:48:74:25:
                    bf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2A:9B:01:44:63:C6:9D:D6:2A:FB:D6:9D:AB:4B:08:49:89:E5:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/ae9397c7-240d-3b4a-b5fb-c4325a3a23e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/082b5dd7-830e-4bd5-ac9d-2949ba50501f.crl

            X509v3 Authority Key Identifier:
                keyid:BB:A1:24:25:0E:38:A1:8A:07:23:27:AF:C7:4F:D1:68:8B:CE:0C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c4:e008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f7:a3:b1:6c:97:20:57:bb:25:73:d8:a2:6a:77:10:86:d2:
         08:bf:71:b7:56:75:9d:71:34:b6:c8:7c:cc:ae:f9:82:0c:ec:
         e5:33:40:c7:78:39:ff:42:15:44:c2:87:24:b4:d1:b3:d8:c9:
         35:c6:ad:07:32:86:4b:a2:14:8a:4c:42:21:95:25:3d:41:9b:
         13:8c:62:08:23:60:e7:e3:81:8a:71:85:87:c1:60:32:3d:47:
         2f:2e:86:3f:2a:25:85:50:58:ae:00:9d:03:0c:a5:01:11:e5:
         0d:0f:9a:39:0c:5b:ef:e9:cc:02:8d:c0:9e:50:ea:bf:6d:68:
         2b:2e:de:4f:c0:6e:65:82:b2:a4:69:5f:4a:de:8e:75:bf:dd:
         9e:10:a9:88:53:fd:55:63:ee:cc:1d:cb:57:d3:32:97:36:b8:
         79:5a:10:a3:22:02:f2:94:29:38:b8:9b:46:51:f1:3f:11:1e:
         d1:74:98:2d:57:6c:f3:82:5a:52:24:cc:43:51:de:9a:de:5e:
         66:a6:04:98:6e:a5:4c:b7:ec:79:5b:e1:f8:b0:86:ff:a8:37:
         7f:32:b3:1b:d7:17:d1:a5:ef:53:b6:14:55:d7:b3:e4:df:69:
         35:bf:89:5a:70:55:f5:75:3b:26:32:42:75:b2:aa:ba:08:03:
         f8:d1:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:51:02 2026 by rpki-client