Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/155a6452-86ab-3797-b141-df30cc5c28ef.roa
File:                     155a6452-86ab-3797-b141-df30cc5c28ef.roa (raw, json)
Hash identifier:          7O4OzKPn1PUgHf5gy+mr/SrEy7D63n4mXQPPSxkH5jw=
Subject key identifier:   4E:20:5F:4D:69:A8:97:D5:FA:22:DE:F1:D8:24:7F:BB:89:B4:1C:D0
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584E7204D4C0DCA8392773A31180
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/155a6452-86ab-3797-b141-df30cc5c28ef.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     62989
IP address blocks:        2607:2240:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d4:c0:dc:a8:39:27:73:a3:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=9704db83-790a-4219-ac4f-cec8b0a7cb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:02:fe:2c:5a:fe:e4:93:b4:dc:a8:2a:7c:
                    a9:36:6f:16:9e:7d:c0:9c:e2:d1:1b:fa:cd:0b:d9:
                    b6:03:ea:b4:0d:c9:99:eb:58:29:91:93:5c:ab:f9:
                    48:ce:95:a3:61:a2:7a:0c:3e:6c:c6:f1:d0:b2:6f:
                    d6:4a:62:c5:74:b5:a0:78:3e:60:79:e9:88:b5:4e:
                    8d:07:d2:24:4e:94:b2:60:dc:1b:d8:91:d8:39:13:
                    d0:13:b0:a5:d0:1f:c3:ad:ea:f7:e0:36:0d:4e:21:
                    8c:af:90:9d:ca:02:22:01:0a:10:46:3d:60:74:41:
                    47:dc:61:55:10:e4:b5:bf:0d:75:b0:d0:e8:26:1d:
                    0a:69:f5:8f:74:50:d4:16:8d:5f:ef:24:82:d1:cb:
                    12:40:82:08:5d:00:53:b6:4a:c7:4f:ad:e6:61:13:
                    c2:04:be:b0:88:83:b0:9c:59:37:76:b2:59:cc:96:
                    14:a1:48:5c:e4:1a:e9:f6:75:7f:22:21:a4:23:02:
                    f1:28:54:65:5f:b6:dc:58:74:74:b3:7a:07:b1:12:
                    3d:45:e6:ae:3c:c6:c8:73:52:23:a6:f5:11:93:85:
                    41:bf:19:53:74:37:c5:89:da:76:88:5d:85:3e:f2:
                    cc:4a:2f:f4:8d:33:d6:40:27:54:ad:3e:8f:0a:e8:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:20:5F:4D:69:A8:97:D5:FA:22:DE:F1:D8:24:7F:BB:89:B4:1C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/155a6452-86ab-3797-b141-df30cc5c28ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9f:99:66:a2:aa:c2:4d:97:93:a3:48:b7:04:da:2f:d4:14:
         f2:5f:3a:16:ce:7c:4e:90:89:2a:77:10:29:26:93:2c:a5:33:
         2f:cb:b6:ca:73:97:40:17:b3:9f:ae:c1:0b:c4:b0:01:84:73:
         4e:69:c0:b7:e4:bc:ae:a9:3c:8c:7a:65:f7:6e:aa:6a:0d:74:
         dd:3b:a1:ef:bd:f1:6c:c2:29:85:a2:fe:58:a8:9a:dc:ef:dd:
         5c:16:73:4d:7c:f6:3f:75:3c:f6:02:d7:17:eb:e7:c5:cf:a5:
         7a:a9:12:aa:32:b9:fb:d8:67:f5:3f:b7:e2:99:35:1b:84:db:
         37:c2:a0:11:62:4f:16:7e:60:28:06:cc:a1:47:c2:70:ef:88:
         37:47:c3:09:b7:5a:2e:49:aa:49:79:99:24:90:20:e0:8a:f5:
         5f:d6:8c:1d:12:6e:75:90:ac:05:96:48:b1:8c:e0:e7:0c:93:
         bb:d9:a8:2c:82:17:19:25:b0:4b:a3:fb:b8:59:e3:2e:11:58:
         5e:d6:5a:83:31:ab:72:86:b7:35:ae:c8:30:fb:ef:b9:c3:5c:
         2b:88:62:0e:6a:e5:58:b2:63:81:59:a0:a2:4a:79:c6:de:3d:
         43:89:ef:a7:e2:ad:76:81:38:f4:5d:f8:a7:da:ce:f0:a2:66:
         60:33:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:24 2026 by rpki-client