Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bb3587db-b3b8-301c-8510-60cc3989e09f.roa
File:                     bb3587db-b3b8-301c-8510-60cc3989e09f.roa (raw, json)
Hash identifier:          b9GwjfRWG1i/dJKitNUkZfxZB5NqrsOnBsCHuGjMeZI=
Subject key identifier:   37:EE:B9:1C:F3:F0:61:6E:0C:EB:9A:64:EF:65:AC:8B:65:50:4E:04
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F4328584E5A4A22CF76854CCF569D01D8
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bb3587db-b3b8-301c-8510-60cc3989e09f.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     395909
IP address blocks:        2602:f93b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:22:cf:76:85:4c:cf:56:9d:01:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=d92b600d-09e1-4362-b1d8-1a8e77b9fd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:29:11:1c:11:8e:2c:18:ae:8e:9f:73:7d:e5:
                    3e:d7:b8:5d:f2:5d:26:b4:d2:a5:51:a4:dc:87:91:
                    81:f7:94:53:18:0c:1c:75:15:1d:d0:ad:59:e5:9b:
                    83:8e:f9:70:ac:40:bd:7b:67:3e:20:79:25:8a:a2:
                    bd:5f:91:f2:24:a4:e8:43:fe:cb:8f:53:ff:50:a0:
                    e3:c8:4d:74:81:94:68:31:d3:6b:63:e0:d8:b6:14:
                    be:dc:4e:53:d8:d5:29:ea:c7:a5:5d:73:17:6a:84:
                    58:e6:ef:87:34:5e:e7:f7:94:3c:7c:7b:42:34:8a:
                    0f:bb:ee:96:d4:10:11:35:ae:df:61:c9:b9:2e:b8:
                    fc:92:8a:e4:64:a8:06:04:fd:49:2c:44:97:7c:fe:
                    bd:4a:f6:ec:42:2f:5f:65:11:9e:15:a7:50:84:89:
                    ad:4e:bf:86:a5:17:27:4d:f8:1c:24:49:82:70:69:
                    fe:93:48:e2:28:7e:14:d6:d6:10:c4:96:41:2a:b7:
                    b2:15:6f:6b:ad:db:f9:4a:20:44:b9:18:1b:c6:bd:
                    f5:be:8c:63:2c:88:d1:4c:22:ee:b6:0d:c5:34:cc:
                    d4:1a:bb:f1:10:f6:0e:8c:46:4b:39:a5:41:00:92:
                    1d:1e:97:82:b6:d4:82:8f:ed:ad:bd:ae:b0:7a:a0:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EE:B9:1C:F3:F0:61:6E:0C:EB:9A:64:EF:65:AC:8B:65:50:4E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bb3587db-b3b8-301c-8510-60cc3989e09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f93b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f1:03:cb:23:c9:9d:61:90:d8:6f:b4:42:0e:bd:29:13:6d:
         b8:25:3b:2c:08:15:9a:c5:a0:78:4f:b8:c8:24:b0:b7:70:6c:
         7a:be:02:3d:5f:31:02:35:19:f0:51:fd:b2:1f:b8:36:47:b1:
         33:7f:db:ef:10:83:d3:d9:20:21:3a:8c:66:81:32:f9:72:ce:
         d0:bd:ce:1d:bf:51:a8:51:5a:cf:6e:fe:ca:05:9e:96:73:0b:
         6d:15:7a:f9:1a:86:a9:92:5a:cb:b7:08:ba:8c:7c:9c:2b:22:
         16:7c:0e:67:f8:fb:18:fc:3e:7c:c2:c7:5f:41:7f:99:f5:ca:
         88:dc:48:07:b1:9c:ee:59:19:a5:5b:88:db:e3:e0:b5:58:4a:
         67:8b:52:73:3c:09:7a:ac:cf:d3:87:c4:f8:f4:d1:d3:17:5f:
         f3:bb:37:0e:e1:e3:46:c3:e5:e6:5e:18:30:60:35:a2:91:ee:
         80:df:2e:14:d1:24:b4:71:6c:9d:7f:27:17:36:4e:26:0c:8d:
         6c:56:5c:d1:5c:9f:92:c7:75:14:d3:91:0a:87:df:bf:45:70:
         20:26:6f:69:61:cb:59:d8:65:79:eb:c4:45:a7:5b:2e:d9:43:
         ef:8b:29:20:c4:07:c1:f5:4b:64:ac:2a:ec:01:77:0d:e4:bf:
         96:5b:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:28 2026 by rpki-client