Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa
File:                     99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa (raw, json)
Hash identifier:          8i2YgomaGUPTnuWwqLAy/NWt+Ctlv2/bEn3UJ2/1Hro=
Subject key identifier:   25:14:1E:E6:F8:6F:30:13:31:4C:26:77:09:CF:71:2C:4D:EA:29:DE
Certificate issuer:       /CN=cbf89b78-1e86-4629-abdd-682f04ffb165
Certificate serial:       010D0C9F4328584E4824B8EE9098EE08DF124780
Authority key identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     975
IP address blocks:        2602:f989::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:b8:ee:90:98:ee:08:df:12:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf89b78-1e86-4629-abdd-682f04ffb165
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=862209ca-b356-4da7-a548-d1e85e755828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6f:f9:32:6f:24:0e:70:58:c9:d4:c1:74:97:
                    5c:d8:4e:25:0d:72:e3:32:a0:f5:0d:53:17:b5:2d:
                    ab:17:fa:7f:a6:a4:90:af:4f:b6:54:f3:8b:6f:d6:
                    d3:15:85:2f:20:20:7a:43:1f:14:e0:28:59:03:4d:
                    8b:3a:e4:b2:0d:39:d0:e4:c9:f3:39:74:47:a5:1f:
                    d7:f2:fa:35:7a:f5:f1:af:f9:73:6c:f2:6a:52:1f:
                    27:ae:d9:f4:f8:ae:cb:b9:aa:7a:26:63:08:e8:3b:
                    09:3e:fe:9b:91:89:b6:93:eb:56:5c:35:42:c3:87:
                    a7:26:c5:c7:bc:11:46:26:a1:20:03:05:f6:8d:37:
                    30:5a:57:ae:80:43:3c:a6:fc:3a:cf:b8:94:4c:1a:
                    77:a3:d8:9d:66:9b:44:ee:a8:4e:86:79:eb:96:69:
                    6e:7d:85:70:03:b2:ef:1e:52:93:43:88:5b:be:ca:
                    b3:c3:12:de:61:5b:2e:ff:cc:59:26:c1:f2:ab:ae:
                    67:68:67:f8:05:33:a7:4a:c9:52:0f:61:32:11:ca:
                    3a:4f:5d:fe:2f:12:fd:e7:be:54:cc:23:f3:28:dc:
                    83:c1:a2:d5:50:28:ba:69:82:ca:26:68:14:90:c9:
                    0a:f3:a2:78:d0:79:8e:38:9a:4e:e3:68:50:fe:81:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:14:1E:E6:F8:6F:30:13:31:4C:26:77:09:CF:71:2C:4D:EA:29:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl

            X509v3 Authority Key Identifier:
                keyid:84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f989::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7c:0a:48:8e:2e:bb:86:13:45:43:f0:4d:26:72:85:e1:c1:
         09:e0:13:46:77:59:ba:e8:06:8c:16:0d:43:34:ac:9f:c5:40:
         ea:84:54:85:9a:39:4c:3b:de:b2:ba:f1:3f:f3:24:20:90:7c:
         08:c6:99:38:ed:91:bd:b6:36:13:58:e0:ab:2d:c6:c8:e8:72:
         58:90:d6:ab:5e:18:87:a1:6b:bb:16:23:f4:f3:66:65:30:d0:
         f7:f4:66:ab:71:9f:27:a4:c0:d2:21:02:ec:cf:bb:23:4e:cc:
         77:ed:3e:cc:7f:23:7c:fe:b5:9d:98:3c:41:2e:bd:0d:91:fe:
         ff:43:b9:74:ea:6c:f9:75:7e:25:b5:c0:51:c4:75:72:ef:de:
         37:af:ae:6d:f2:0b:7f:fa:2b:f0:54:5e:40:59:88:65:3e:a0:
         34:23:aa:ec:9b:9f:de:af:57:98:8b:b2:db:72:06:ad:c8:61:
         d5:46:5a:2d:3d:09:97:16:60:8e:02:0c:1d:a1:34:6a:1f:d0:
         2a:42:da:d8:39:e6:f8:c1:8a:f2:18:48:f2:61:8c:03:d9:d3:
         70:28:a6:f7:f0:f9:68:c7:e8:3f:db:a1:b5:18:ba:f2:a1:ca:
         b3:fc:31:44:6d:42:bd:e6:dd:4c:85:e5:59:d1:23:ec:fb:80:
         7f:64:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:34:26 2026 by rpki-client