Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/61413741-9901-33ca-be44-090d9830ff16.roa
File:                     61413741-9901-33ca-be44-090d9830ff16.roa (raw, json)
Hash identifier:          vXMCqNsAc/W6swbLjIrh3R4AI82IA4nuhKHipHiUj14=
Subject key identifier:   8D:5E:F0:9E:B2:03:D3:3F:17:2F:BF:7E:B0:85:B5:4E:0E:2C:1B:AA
Certificate issuer:       /CN=a6e2845d-3d1c-4612-b11c-d852ceebfa50
Certificate serial:       010D0C9F4328584E7E94EFFEB35F37CDE5C0F500
Authority key identifier: 44:B8:D9:FC:45:E5:BB:CC:B1:A4:1C:76:06:E3:87:07:47:3D:94:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/61413741-9901-33ca-be44-090d9830ff16.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     396431
IP address blocks:        2620:53:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:ef:fe:b3:5f:37:cd:e5:c0:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e2845d-3d1c-4612-b11c-d852ceebfa50
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=42ce931f-b53f-4b01-9a32-3bbd78edc9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:8a:c2:78:05:69:fa:fe:88:1c:2b:b3:91:
                    a8:9a:3a:34:72:8d:e2:5b:ee:4d:99:d0:d3:cb:bf:
                    75:a8:07:f4:10:48:22:9b:65:43:2e:ed:d2:0d:1f:
                    ce:7c:70:ce:40:7e:3a:95:16:70:16:41:4e:47:43:
                    ab:6c:b6:cf:3f:68:73:ab:70:92:71:6e:fd:32:be:
                    9a:c7:95:6d:2e:77:2f:28:d9:4e:0c:08:45:c2:c5:
                    18:58:4e:ba:54:1b:82:12:50:20:5f:e5:db:38:40:
                    07:d6:9a:49:30:d2:15:ee:d1:4b:42:67:cd:e7:a7:
                    ad:b9:fe:df:55:55:e5:52:10:a0:cf:27:bd:dd:5d:
                    e9:ca:7d:00:92:89:b9:2c:6a:fc:52:80:78:0b:d3:
                    d3:d2:94:d0:76:78:80:1e:2f:c3:c8:45:63:b9:7d:
                    65:13:d3:96:ef:1e:3b:ee:31:85:fe:ac:ad:94:97:
                    18:77:fa:35:35:48:45:6e:56:1e:fc:1c:7e:f0:a5:
                    12:c8:cb:94:cd:d5:73:e8:fa:ff:cd:fd:72:7a:b8:
                    35:71:d0:36:01:26:eb:f5:8d:47:4f:47:82:81:ed:
                    a7:71:e1:e7:83:2d:8a:f4:62:5a:aa:e7:56:5c:21:
                    93:9c:22:27:0d:47:91:c3:43:b1:c5:ab:7a:b2:dc:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5E:F0:9E:B2:03:D3:3F:17:2F:BF:7E:B0:85:B5:4E:0E:2C:1B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/61413741-9901-33ca-be44-090d9830ff16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.crl

            X509v3 Authority Key Identifier:
                keyid:44:B8:D9:FC:45:E5:BB:CC:B1:A4:1C:76:06:E3:87:07:47:3D:94:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:53:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:44:de:da:31:17:ad:7d:32:fc:e6:e3:4e:a7:fe:5f:60:f5:
         b0:97:59:79:d7:69:54:0a:82:96:bd:97:b6:e3:d2:cc:9b:dc:
         0a:a3:10:81:4a:2c:16:3f:46:45:e8:22:05:9d:fd:f9:fc:30:
         5b:c0:2d:00:5c:c2:20:96:31:96:ba:68:96:ab:95:16:4c:81:
         97:39:33:3a:e4:41:51:b8:68:10:a4:58:ca:4e:6b:bd:e0:b3:
         ca:ae:6e:6c:b4:14:60:f3:0c:0f:85:fc:04:c2:9c:19:20:07:
         34:92:71:aa:8a:a6:bf:51:d4:1c:b4:03:e3:71:9e:2e:31:6a:
         8a:9e:16:13:87:b5:51:9c:c9:30:f2:73:64:ff:a8:f9:09:26:
         3d:ef:34:5a:e4:eb:cc:0d:6c:1d:25:42:d3:91:14:f6:62:82:
         0b:6f:8f:d0:63:6e:f7:47:c6:f8:6c:bf:05:7d:af:e3:ea:ff:
         30:64:c8:05:8f:39:72:eb:38:ca:e1:bb:a3:df:52:47:ad:8a:
         81:98:de:69:6c:c2:8d:73:66:41:bf:3b:6a:cd:77:38:2b:52:
         1e:14:59:cf:59:aa:97:a3:a9:51:dd:9e:8e:99:ca:a3:ce:bc:
         9f:98:a8:e8:2b:1a:ac:86:8c:d6:64:76:34:d1:dc:42:0a:b6:
         c1:0b:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:55 2026 by rpki-client