Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
File:                     d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa (raw, json)
Hash identifier:          f4W5T/hbKo/BRkRjwlYjTJjQm9Y7C3wMKXu9voDRo3Q=
Subject key identifier:   EC:C7:DA:77:8B:A0:ED:67:E1:AF:62:87:12:7E:F7:0A:79:2C:25:8E
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584E7A64DEC043033339681D7AA0
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     396416
IP address blocks:        2602:fb78:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:de:c0:43:03:33:39:68:1d:7a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=f5aee743-472a-42fc-a281-0984cd41fee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:e9:b9:7f:7a:0c:9c:84:22:c4:0b:d9:98:
                    c2:fc:58:d5:2d:2e:e0:61:93:7e:9d:8f:b3:41:77:
                    d7:8c:b9:3a:37:03:01:b0:4c:9c:af:5a:4c:c8:2a:
                    5f:a8:53:ba:1e:5d:1f:5c:a5:e6:b8:00:4f:4e:aa:
                    f0:77:bf:9f:25:97:f5:56:7f:27:82:24:c0:9c:cc:
                    83:2f:cc:b0:86:97:8a:03:e0:6f:42:9f:b6:2a:9e:
                    fa:4e:a9:c0:dd:b6:7b:80:33:67:25:03:5c:93:c4:
                    ab:54:c5:f5:2e:c2:b0:fe:20:97:97:38:9d:03:ae:
                    48:eb:56:88:f4:47:fe:bc:86:18:b7:17:6c:1e:5f:
                    8a:27:8f:0d:a1:79:94:82:54:1b:69:37:10:9b:17:
                    6f:be:76:38:7f:57:4d:d7:86:85:24:1b:1c:42:55:
                    91:1a:05:bb:3b:82:32:2c:72:fe:a9:49:85:c0:16:
                    d4:16:55:0b:3b:ba:a2:55:60:7d:e5:89:94:3f:68:
                    7d:c4:32:9a:fb:56:79:49:74:48:75:ad:9f:a4:ba:
                    eb:5a:2b:52:4f:cf:b3:83:d9:60:71:fd:62:9e:47:
                    bc:ce:55:cf:7a:ae:63:ee:8d:87:11:5a:dc:fd:1c:
                    c3:a9:5c:00:07:15:72:24:78:49:8f:24:46:ed:67:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C7:DA:77:8B:A0:ED:67:E1:AF:62:87:12:7E:F7:0A:79:2C:25:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1d:f1:a0:5b:e6:f1:65:68:d0:6e:87:5f:56:74:97:25:17:
         19:e6:aa:6e:e7:27:bf:95:6f:63:9b:06:b6:c4:ad:7c:99:b5:
         62:7f:f2:a3:25:38:37:37:cc:d2:d7:10:22:ac:18:3c:17:53:
         89:af:93:94:1a:02:7c:74:05:e4:a6:ef:73:c2:49:f2:4e:66:
         e3:8a:3d:73:5d:6c:55:6c:c3:75:48:62:c5:10:f4:6f:44:40:
         1d:8e:96:c3:ac:63:e1:5d:07:37:5e:9b:53:e3:7b:c6:ff:3f:
         b3:cc:03:84:84:d6:44:0d:65:3d:0f:5d:09:06:5e:09:9d:45:
         da:8c:38:f3:58:59:20:db:ad:51:f3:bf:70:84:24:9a:08:03:
         95:3a:d5:b8:8a:0c:ad:2c:11:9e:48:85:31:cd:49:06:7c:ab:
         06:3a:87:8f:33:cc:b3:65:6e:9a:b5:92:b0:3e:c1:58:0c:04:
         35:8c:02:a7:e2:6c:1b:49:9c:47:27:71:97:c7:f2:80:43:b8:
         3d:3b:9f:07:6a:89:7f:cf:5a:21:a7:d9:7b:29:74:a7:30:31:
         23:3d:12:a0:12:1d:cf:e8:88:10:de:ff:f3:82:81:2a:b5:b6:
         7e:36:bb:96:cf:dd:db:e8:bd:c6:78:5e:aa:d7:38:d9:4b:2b:
         ea:6e:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:33 2026 by rpki-client