Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/f63d3a03-da41-32c6-a664-041678577cb0.roa
File:                     f63d3a03-da41-32c6-a664-041678577cb0.roa (raw, json)
Hash identifier:          D36L30jKpf330klfxEFtVdMtnpYjIuN/2IjXs88exE0=
Subject key identifier:   EA:18:19:7D:EB:1E:70:FE:A5:8D:29:80:11:76:90:F1:47:D0:67:1E
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584E94EA5B7756CAF9D38D29EBB0
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/f63d3a03-da41-32c6-a664-041678577cb0.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        2602:fa28:6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5b:77:56:ca:f9:d3:8d:29:eb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=be5b4c7e-eaa3-4c86-a695-4c2789e7dbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f6:cb:a4:c3:e2:db:71:b3:ef:5b:90:40:9e:
                    9e:4e:54:3a:7d:6c:de:5b:62:29:37:c1:e3:13:ee:
                    cf:a6:17:48:ca:bd:e1:49:cc:a5:f4:18:ea:b3:8f:
                    b0:e1:b6:6b:79:7c:4f:a4:95:d2:a1:fd:12:e0:e2:
                    82:19:c6:6d:f1:af:67:61:03:3c:6a:46:9f:d4:7c:
                    df:2c:ac:45:49:d1:40:a7:55:2c:14:ee:f0:b8:b1:
                    d0:1a:ef:0b:34:e5:b5:5e:79:cd:c2:70:69:e0:9c:
                    2a:ce:cf:15:fd:69:26:f1:ec:94:44:41:59:11:d7:
                    78:3b:55:57:24:c1:c6:a9:81:97:bd:ff:f5:11:97:
                    76:a5:89:ec:5a:6c:44:6e:93:c3:6c:7b:1d:a4:e8:
                    3a:c1:5f:4a:0e:3e:09:2b:ef:28:3e:a9:09:72:79:
                    15:1d:64:e6:2e:6f:a8:e4:f9:42:75:dd:16:82:d4:
                    c5:c1:11:fe:9a:58:3e:a4:3e:b6:8c:0f:9e:cf:bf:
                    1f:8c:59:3f:df:f9:c4:68:49:0d:17:e7:d6:40:e2:
                    26:3e:2e:3c:80:85:78:0b:18:08:23:07:02:f1:33:
                    10:6a:84:d9:7a:66:33:82:8c:83:cc:16:1a:b8:e8:
                    c2:6c:d4:c0:13:6f:59:d2:9c:e2:2e:19:ac:aa:be:
                    05:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:19:7D:EB:1E:70:FE:A5:8D:29:80:11:76:90:F1:47:D0:67:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/f63d3a03-da41-32c6-a664-041678577cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e6:66:84:a5:d4:43:ba:8e:a9:e2:38:20:db:e9:3c:27:7b:
         ca:b5:14:f9:79:02:b4:d9:eb:67:35:bd:b0:01:93:d1:e0:94:
         dd:6c:34:f3:9c:91:53:77:95:55:a5:9a:e4:fc:0f:71:24:f1:
         cc:1a:14:93:e9:4f:df:f5:c5:8a:3a:1e:c1:b8:c3:39:6d:3d:
         18:3e:6d:bd:59:eb:03:0c:b6:fc:73:e4:1a:0c:2a:50:18:82:
         1e:26:3f:fe:01:1a:5e:42:1d:1d:aa:e7:30:24:02:6c:68:89:
         66:8a:2a:89:f1:44:83:b1:6f:28:f4:22:1a:6a:aa:33:77:08:
         bf:68:5e:42:2e:e5:81:88:51:51:bb:1b:58:f5:03:d3:e9:15:
         3e:23:56:54:88:d3:60:07:86:6a:73:03:73:d4:9a:e0:2d:b3:
         14:3d:a2:3c:ca:6d:c1:26:5d:fd:3b:39:a5:e2:a4:94:08:07:
         1d:0f:e9:c4:a6:d7:53:c5:93:b0:a3:40:ae:a3:a0:55:b3:1a:
         bb:e8:02:ca:33:54:15:48:15:d6:3c:c3:a4:ad:ff:7b:37:30:
         4f:44:d3:c0:11:35:dd:02:a3:7d:d2:f3:27:47:b2:ad:ea:1e:
         57:69:ea:26:55:46:50:10:d5:01:10:6d:21:f9:13:7e:81:b1:
         3c:d8:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:24:01 2026 by rpki-client