Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa
File:                     628493d1-603c-3129-8b8d-fbf6af96be8e.roa (raw, json)
Hash identifier:          52zsMoL7VLkdzlU6J3YmV9h1WQPVsrcGowiIQAhEeG8=
Subject key identifier:   30:FC:FA:21:3F:3E:D7:A2:D0:44:26:27:C9:A3:A2:A6:48:AB:E5:B9
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584E90BA4CAD3D36667DA24C6CA0
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     53727
IP address blocks:        2602:f982:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4c:ad:3d:36:66:7d:a2:4c:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=81d8bad1-4911-40be-9425-56edb34e9fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:1b:6f:da:62:26:b4:b5:cc:cd:af:ec:ad:
                    34:03:1b:3f:c5:56:d2:80:6f:ad:40:29:53:0e:be:
                    0a:5f:4a:8a:61:2a:d0:24:46:bf:e1:6b:08:04:0b:
                    d6:05:bd:bb:b1:b9:24:71:c2:e2:01:f1:75:b6:38:
                    e6:1e:31:ed:e7:24:3e:06:2a:0a:83:f7:cc:b9:d4:
                    76:8d:bc:27:b6:29:cb:95:a3:89:b2:15:85:bc:a8:
                    d1:23:9b:4c:85:e4:00:d8:88:86:8e:96:fd:94:c3:
                    c3:38:a4:c1:db:45:b8:24:07:69:b7:51:e6:82:d5:
                    7f:e1:fe:c5:ea:5b:38:3a:52:96:45:5f:f5:59:cf:
                    fa:22:d9:61:ef:f9:54:12:f2:2c:6d:86:73:b8:9d:
                    3b:31:d5:53:dc:fd:a1:d8:90:10:3c:e9:4e:80:da:
                    58:12:63:50:3c:bd:33:8a:77:65:f6:98:81:30:da:
                    36:a5:01:75:6b:1b:86:a6:52:3d:a7:41:fe:d0:3d:
                    54:7c:eb:81:3b:73:cc:39:5f:76:00:0a:4c:48:d8:
                    c7:0b:9f:11:1a:11:59:b4:c1:ae:b1:1b:0a:2e:1d:
                    7b:d8:2b:01:12:d3:28:78:eb:45:47:12:e4:7f:47:
                    a1:5a:3d:15:b3:2f:a2:fe:04:24:95:ee:dc:75:b5:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FC:FA:21:3F:3E:D7:A2:D0:44:26:27:C9:A3:A2:A6:48:AB:E5:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:31:3c:d6:f2:81:d1:e4:78:a1:6c:39:4c:89:6d:81:64:c4:
         94:9d:71:0b:e7:9d:ac:07:90:7f:56:e6:5f:c4:67:f5:c3:8f:
         37:d8:71:59:1c:54:c3:bd:64:0a:5d:c8:e7:b6:b9:b9:ed:e7:
         c7:26:31:df:d7:55:51:cf:30:6b:8e:77:1e:3b:08:c3:1a:2b:
         f3:e5:98:e7:fe:21:34:8d:4a:02:b8:f5:ef:90:78:09:3f:55:
         12:ec:e5:9d:fc:87:60:e5:ec:69:5e:6d:bc:e1:4a:33:c9:1a:
         c6:99:31:cd:55:97:6d:e4:47:21:52:c9:e8:6d:41:95:33:d3:
         bc:b2:bc:47:d3:56:97:92:44:55:05:48:dd:1f:f3:ee:8b:af:
         17:0b:25:cc:c4:fe:f9:16:6c:13:f2:ad:17:9c:3f:97:b1:f8:
         10:45:4b:2e:e1:c6:a7:d5:a5:6c:a3:c4:09:e8:2d:a1:d6:72:
         1d:aa:6a:84:40:f2:4d:7b:92:1f:61:c5:d5:b0:85:b3:a4:18:
         70:7f:2c:3d:01:cb:a6:2e:b0:d6:07:0f:6f:d4:c0:5c:0b:6a:
         5d:e5:db:21:e5:99:c3:80:a5:4d:5f:68:1a:05:76:21:60:ee:
         68:2c:c1:ff:19:8e:1e:f2:a5:89:0b:4a:1d:a8:67:d5:e3:05:
         bf:dc:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:58:58 2026 by rpki-client