Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/149c87dd-3033-3f26-9801-2addf822e39d.roa
File:                     149c87dd-3033-3f26-9801-2addf822e39d.roa (raw, json)
Hash identifier:          MZ7FfQVvPVaahQerUxQ/90WjaaZze5zhL5r8TKvfUT0=
Subject key identifier:   41:A9:D8:CF:E0:C7:33:89:C1:1B:B7:23:F0:AE:B9:6F:7D:39:8A:4B
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584E7204D4B57FF11B5CF8F86480
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/149c87dd-3033-3f26-9801-2addf822e39d.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     398655
IP address blocks:        2607:2240:7000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d4:b5:7f:f1:1b:5c:f8:f8:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=7b090820-1ac5-4b17-8616-b8a1e693504a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:a7:10:bb:f9:b6:84:81:8e:97:53:32:92:
                    c9:39:b6:f6:59:4b:b4:f1:d3:5e:d6:08:d8:19:71:
                    79:ee:57:45:3f:bb:1d:ce:31:7e:26:c9:a8:99:cb:
                    9a:3e:ef:39:d0:1a:7d:d9:3b:c8:75:c4:4e:a9:a0:
                    f4:d8:02:2e:f1:57:fb:2a:ee:cf:29:73:f6:bd:d3:
                    0c:ad:4a:f6:0d:67:5f:77:81:f5:6c:09:e3:58:f9:
                    3c:54:23:38:be:aa:51:99:13:96:6f:27:67:09:c3:
                    f0:88:7d:62:95:7b:69:4a:76:28:fd:56:c5:c1:3d:
                    7c:c6:5b:2d:e7:fb:e1:95:95:24:87:0f:5a:3d:10:
                    9e:8e:24:d0:83:24:d2:6c:88:a5:2e:55:6d:a7:b9:
                    01:49:a4:7a:3c:28:0f:1f:34:fb:cb:97:57:fb:e9:
                    59:1f:34:d5:6b:9c:e8:19:85:e7:09:3f:bb:35:2d:
                    53:01:01:16:7c:02:7e:cc:9f:e1:57:86:c0:73:83:
                    ca:4a:5d:ec:c3:0c:2e:63:78:9b:3b:db:e4:e8:41:
                    48:da:8e:10:45:e0:ca:51:cc:49:02:c7:73:a7:81:
                    95:58:8c:46:5e:bc:ef:58:57:87:15:d8:25:1f:15:
                    2e:df:48:92:c6:49:f4:b6:bd:de:c1:5c:cd:47:b7:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A9:D8:CF:E0:C7:33:89:C1:1B:B7:23:F0:AE:B9:6F:7D:39:8A:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/149c87dd-3033-3f26-9801-2addf822e39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:7000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ab:58:8e:44:8c:17:27:4f:e3:bf:4a:0d:14:7b:b8:07:98:
         2e:68:42:ef:4b:21:c8:74:1e:6a:5f:b9:87:59:ba:c2:d1:f4:
         7d:75:ad:a3:48:61:25:a7:92:ce:6c:ff:87:4b:6c:4b:f7:e1:
         94:88:86:78:71:7b:b8:d1:37:22:45:c6:da:24:3a:55:43:72:
         24:34:c8:44:a8:f9:40:da:e0:c3:5b:51:f8:9b:3c:88:c7:a3:
         72:a9:ba:21:98:4b:78:fb:1e:81:12:25:db:c9:87:25:43:9a:
         13:32:46:6d:bb:3c:f0:57:22:aa:4f:e7:72:85:67:f8:aa:23:
         77:a9:0d:25:d5:79:09:e7:cb:ab:cd:84:04:e7:de:5c:ee:21:
         82:dd:41:10:31:8b:b5:49:5a:ee:9e:17:87:d1:e9:12:d3:5b:
         83:5d:c8:57:ff:f8:4e:12:cc:8a:9b:de:c9:d3:33:08:68:59:
         96:ac:86:65:93:32:26:c8:b7:82:21:ef:01:44:cc:97:8c:25:
         22:03:46:d0:36:51:d6:bf:b7:be:45:e1:28:59:9a:85:eb:75:
         0a:b5:f6:91:c2:5d:d5:40:57:ba:e9:2d:f2:b8:6b:f7:a8:cd:
         21:b1:c9:f6:f5:93:3b:a5:08:e6:41:b7:6c:bf:f9:0b:95:fa:
         0c:db:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:54 2026 by rpki-client