Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/8b17801e-5dcf-3256-a442-419728b5417d.roa
File:                     8b17801e-5dcf-3256-a442-419728b5417d.roa (raw, json)
Hash identifier:          zKbz/RWNb4LjTnJAJ0VMS6Gc62vaWtsexTUHRph63DY=
Subject key identifier:   F7:39:C7:D8:2E:3F:7A:1F:F3:29:79:45:C2:A1:F6:DD:EA:F0:9D:49
Certificate issuer:       /CN=f18acb70-b579-4682-adfb-f098ad50b263
Certificate serial:       010D0C9F4328584E9A7FE5713CFE2DFE366E6380
Authority key identifier: C7:95:C4:DD:6A:65:10:37:37:20:28:6D:FB:9A:7B:04:1A:54:8F:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/8b17801e-5dcf-3256-a442-419728b5417d.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     23546
IP address blocks:        2606:edc0::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e5:71:3c:fe:2d:fe:36:6e:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f18acb70-b579-4682-adfb-f098ad50b263
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=b3b3e9cd-1d61-4dcf-9bd3-8bd6a54dd4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8a:f5:49:7e:11:22:de:6f:d8:e7:97:01:28:
                    42:7a:0e:c9:7e:c7:49:dc:75:84:04:74:5c:05:e7:
                    8d:58:77:f6:df:2d:4a:26:bb:ef:b2:12:34:24:3d:
                    47:a5:a4:a6:5f:97:56:50:66:56:d8:1e:1c:ed:f6:
                    d2:ac:26:50:d5:bd:ba:05:fe:3f:72:54:e3:a9:3e:
                    82:19:5e:9b:df:f5:50:08:ac:a8:49:75:bc:f1:89:
                    dc:1b:c1:08:71:52:84:80:5f:db:b0:87:7e:85:cf:
                    07:60:6a:54:fe:e5:25:a2:07:74:82:9c:18:df:df:
                    a2:83:c3:70:25:5e:6d:44:f5:93:77:ae:7a:8b:2b:
                    ab:d8:8b:0b:5d:3c:7a:75:1c:cc:fd:86:a4:a7:4f:
                    07:6c:e2:c9:f4:28:9d:ec:fa:37:b3:3b:be:22:1d:
                    47:d6:93:4c:73:74:3b:a8:37:26:01:46:31:92:ca:
                    fb:2c:2d:3b:62:77:26:3c:d6:03:5b:f2:a8:ee:00:
                    06:51:24:84:f0:4c:4b:a5:0a:ac:9a:eb:3e:b3:3f:
                    83:6a:76:a0:07:99:61:43:b8:6a:b6:03:8e:e8:11:
                    1b:fc:43:be:51:72:18:50:4b:d9:17:98:94:f9:5a:
                    b3:ef:ed:29:f5:d3:96:74:31:58:f4:0d:7a:8f:d4:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:39:C7:D8:2E:3F:7A:1F:F3:29:79:45:C2:A1:F6:DD:EA:F0:9D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/8b17801e-5dcf-3256-a442-419728b5417d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.crl

            X509v3 Authority Key Identifier:
                keyid:C7:95:C4:DD:6A:65:10:37:37:20:28:6D:FB:9A:7B:04:1A:54:8F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:edc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:57:f1:e9:a9:02:81:83:d1:74:f2:2b:37:65:15:d8:85:71:
         16:76:c8:d9:d1:d6:69:8b:62:39:7c:7f:e6:46:24:5d:76:85:
         6f:ae:50:3d:0d:05:58:15:a7:d8:c1:42:5e:c2:c2:4b:25:9b:
         fb:d8:9e:18:e5:b4:57:50:56:ed:26:91:10:11:2f:24:35:82:
         91:bb:a3:96:84:ea:b5:b1:eb:59:67:27:b1:17:78:ee:db:57:
         d9:83:5c:46:65:fb:19:d7:5b:62:5d:f2:fd:4f:3e:16:40:88:
         cb:68:de:6d:79:04:af:46:ce:e3:b4:55:e9:65:67:3f:cf:c6:
         82:e2:55:01:5f:c5:21:0f:b4:29:ed:fd:69:e4:90:a6:11:f1:
         e8:bc:66:45:07:87:1d:c7:7d:1d:11:06:f1:2f:89:8c:f1:b6:
         e5:e9:19:f1:d1:5b:7c:71:42:11:61:8e:e7:d5:c9:62:f9:44:
         f7:16:8c:42:8f:6e:94:6d:db:b6:77:c7:eb:b2:a6:b1:aa:fc:
         d6:dc:57:db:dc:cb:47:47:c6:a1:66:b3:c0:fc:a3:f9:d3:95:
         99:d4:c6:10:96:5d:8c:15:f7:2c:4b:12:fb:22:3b:7b:23:75:
         eb:f9:23:c8:40:e4:c2:6b:e4:06:8d:4f:c8:8a:9b:64:17:1a:
         e8:ac:91:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:20 2026 by rpki-client