Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa
File:                     11869df8-11c1-3bf1-903f-f89a2a459e6a.roa (raw, json)
Hash identifier:          784mC3en+MqMfaWlIT6c/lKrxAtTdW4oJL0/+3WpksI=
Subject key identifier:   18:F0:1D:CD:17:C8:8A:09:A4:60:46:E1:49:18:B0:83:97:5D:2E:57
Certificate issuer:       /CN=378928e8-c134-40aa-9858-3838053cbbe9
Certificate serial:       010D0C9F4328584E8C8A43EEDA51D2ED3C320080
Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     12261
IP address blocks:        2606:900::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:43:ee:da:51:d2:ed:3c:32:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=7822ca50-e5a7-454b-b495-3dfc34968e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:64:4b:5b:f8:8e:05:a1:14:b0:14:b5:b2:
                    b1:98:b3:36:a2:c9:dc:f2:5e:92:8b:21:5a:50:ae:
                    32:aa:23:b2:e1:61:83:5e:93:44:d1:a6:f4:7b:42:
                    60:18:db:fa:a8:64:e8:ee:1f:0b:b5:5d:9c:e4:5c:
                    0b:2b:45:97:80:a1:7a:97:cc:79:e8:13:61:ab:f6:
                    1a:9f:b5:53:f0:6f:d1:22:90:81:b2:c1:1d:5a:8f:
                    30:d9:b3:3f:fa:18:ce:fe:e3:03:df:54:6a:20:5d:
                    f6:f8:99:b4:2d:03:40:94:1d:74:cd:3d:5c:3a:fd:
                    19:06:9a:f3:27:b8:20:ab:cd:46:c9:f2:7e:ff:40:
                    ab:ac:a1:a0:86:a9:89:a2:bb:47:8c:1e:8f:0a:2b:
                    a8:0b:2e:da:0c:8e:58:90:d0:e9:e5:b6:5e:28:f5:
                    f4:45:4c:a7:0b:88:27:bc:95:c0:d1:c9:f2:ba:99:
                    86:f1:09:4f:6d:7d:24:a2:d4:fb:7d:94:c6:87:5d:
                    0f:77:e5:cf:29:3f:5b:dd:9c:05:fb:bf:d7:2e:93:
                    ba:a6:51:e5:62:35:78:ce:9b:34:d6:68:f3:2e:73:
                    2b:0b:f5:6a:be:ca:58:a0:62:c0:a0:ce:a3:c1:0d:
                    87:b3:1a:a7:b0:49:72:0d:9e:c0:50:3f:a2:6a:e6:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F0:1D:CD:17:C8:8A:09:A4:60:46:E1:49:18:B0:83:97:5D:2E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl

            X509v3 Authority Key Identifier:
                keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b7:a4:ac:ef:d7:a3:de:d4:ff:dd:cd:58:e7:96:ca:52:71:
         84:57:24:89:d7:26:d8:6d:8d:b0:24:44:4a:78:28:8d:2a:cd:
         f3:95:d9:0d:76:e2:8c:59:5b:64:51:5f:22:a2:b5:02:a9:39:
         36:80:de:ef:85:80:a2:4c:22:08:22:28:10:95:00:b6:95:6b:
         e2:30:01:cd:09:06:80:66:55:d8:c8:72:00:c9:e5:ec:96:27:
         2a:31:c5:51:4d:3b:06:56:9c:8b:7f:54:86:b4:6c:b9:7b:57:
         ff:70:08:7b:2a:47:ee:f1:37:49:45:01:b0:c5:e4:3e:61:4a:
         69:eb:36:87:03:53:1f:08:aa:ca:9b:71:83:c1:77:63:85:21:
         56:2b:6a:8a:53:a8:db:44:a6:96:ed:53:2b:b1:42:8f:97:4d:
         b8:52:e9:66:32:04:f4:d1:b1:42:cc:94:db:73:1f:9b:e7:01:
         df:92:11:6b:1c:e4:34:ee:83:11:dc:0f:2e:25:0f:f9:12:6e:
         52:73:72:a3:bf:a2:22:75:ab:f1:e1:f4:bc:c3:85:22:48:d3:
         48:41:5d:5b:98:29:8c:03:cb:e6:9b:91:c9:5f:ac:24:75:77:
         c1:fe:8e:ff:7f:49:f4:5c:18:02:0c:2c:32:7a:89:41:9f:20:
         9a:51:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:55 2026 by rpki-client