Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ae2453d2-b979-33fe-badb-55c4c8aa402c.roa
File:                     ae2453d2-b979-33fe-badb-55c4c8aa402c.roa (raw, json)
Hash identifier:          OT+lktiX4fSaBjwdGD6Uio3vnTk50ZY0SEfSZTLgFgo=
Subject key identifier:   D0:A1:75:AD:A6:7E:55:2E:A8:68:5E:2A:BF:2C:78:74:A9:B9:C9:8A
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584E8C8A3CBA0B765B323098A178
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ae2453d2-b979-33fe-badb-55c4c8aa402c.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     25645
IP address blocks:        2605:8300:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:3c:ba:0b:76:5b:32:30:98:a1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=113484f6-804c-4414-a488-f6ae80d2bcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:67:a5:15:8b:7c:23:8b:f3:be:21:f1:80:
                    10:0c:a9:d0:c7:22:f0:cb:bc:06:2b:33:ed:e3:c8:
                    ba:28:f1:ba:9c:7f:cd:5d:79:04:2a:2a:31:20:a1:
                    a3:76:6f:29:8b:b1:36:61:6b:5c:9d:22:31:f6:e5:
                    86:3d:b7:f7:bb:9e:10:fc:77:0d:93:30:a2:03:98:
                    1f:53:85:31:72:7d:e2:cb:14:69:69:9e:f0:aa:51:
                    d8:34:68:f8:8c:49:4f:f2:54:f3:a2:98:89:19:20:
                    9b:49:fc:7a:ca:85:99:14:5e:88:a6:75:13:fe:4a:
                    2c:05:c9:40:5e:8e:53:db:75:f0:fa:a0:75:58:9a:
                    ab:ac:10:b4:85:ab:37:70:b4:3d:6e:ec:90:94:7e:
                    97:c1:0d:13:b6:0e:ea:8d:d4:0c:9a:2f:8b:cf:ab:
                    37:1d:84:0c:4e:26:3e:d4:1d:66:c4:84:c1:da:83:
                    5d:25:d7:ac:b7:ec:d2:b8:5b:dc:b9:77:d9:6f:45:
                    38:ba:36:dd:d5:1d:76:57:11:c6:dc:80:24:89:37:
                    bb:bf:e2:bf:b0:d5:11:6f:1b:cb:6f:62:a1:79:6a:
                    5d:31:1f:74:43:69:2b:51:3b:a4:d0:8d:c6:dc:56:
                    5f:6a:c9:59:b5:2e:9e:ed:16:ed:94:5e:b0:56:82:
                    41:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A1:75:AD:A6:7E:55:2E:A8:68:5E:2A:BF:2C:78:74:A9:B9:C9:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ae2453d2-b979-33fe-badb-55c4c8aa402c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8300:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a5:66:e1:3e:fc:06:a0:ae:48:bf:66:5d:7c:9d:07:ec:bf:
         72:7d:4c:c2:cc:74:c8:df:77:05:7a:f9:e9:8e:fb:d7:24:73:
         2b:29:4f:14:4e:fa:df:6e:41:d0:19:89:88:5c:38:49:f9:46:
         ce:92:92:85:e6:b2:b8:ec:86:3f:de:ed:7b:48:ed:93:1c:dd:
         0d:52:cb:d0:0e:e7:37:c4:73:4d:1b:62:26:65:04:f6:94:33:
         23:36:d7:a2:38:09:1e:a1:f0:7f:c1:40:b8:84:e2:53:bd:7d:
         fb:37:7f:38:c8:ef:79:cd:da:7b:d1:30:ae:f7:91:89:30:6d:
         76:87:b0:9d:9c:9e:db:09:4d:42:0e:45:c5:9e:62:9f:12:37:
         50:41:8b:92:09:ce:2b:76:ed:bb:32:49:b7:8d:b1:ad:0e:46:
         f4:f2:5d:65:c1:6b:50:cf:4a:a7:f5:69:bf:58:14:08:7c:1b:
         9d:7a:3e:56:8a:46:ea:ce:37:fc:11:5a:2d:08:f2:b7:4a:3f:
         1d:86:01:61:f6:18:09:ab:7c:ee:b2:b1:31:fb:59:80:ec:d4:
         a4:e3:72:9d:88:4e:da:58:11:a9:80:7e:df:55:8f:c2:c3:f9:
         c2:ee:cb:73:12:f3:06:ea:4d:26:63:90:7c:cb:17:1d:3e:87:
         b2:28:d8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:55:04 2026 by rpki-client