Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/fdf255a8-a262-3f43-8b31-c291f0b34ca5.roa
File:                     fdf255a8-a262-3f43-8b31-c291f0b34ca5.roa (raw, json)
Hash identifier:          MJEMHzxSPD+dG1TyHjFam9i6SIosCKPuk6IOqeQJnGc=
Subject key identifier:   65:8F:6B:F5:9A:D7:F8:2D:A6:AA:CE:E2:89:39:F2:8F:27:AE:02:E4
Certificate issuer:       /CN=d295ea86-0494-4e74-88f5-331b8cd3aedf
Certificate serial:       010D0C9F4328584E8D36AD7C5E2AC8A1EA245700
Authority key identifier: 83:74:CA:8C:E7:6B:AB:C7:73:BD:A1:E6:0A:E3:D6:B2:3D:0E:8B:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/fdf255a8-a262-3f43-8b31-c291f0b34ca5.roa
Signing time:             Sun 19 Jul 2026 14:47:40 +0000
ROA not before:           Sun 19 Jul 2026 14:47:40 +0000
ROA not after:            Sat 17 Oct 2026 14:47:40 +0000
asID:                     15304
IP address blocks:        2620:aa:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:36:ad:7c:5e:2a:c8:a1:ea:24:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d295ea86-0494-4e74-88f5-331b8cd3aedf
        Validity
            Not Before: Jul 19 14:47:40 2026 GMT
            Not After : Oct 17 14:47:40 2026 GMT
        Subject: CN=f4684291-b23d-4f4d-b95e-fdbf4490e686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:82:51:21:e3:b3:98:b0:7e:d5:30:d5:7b:
                    32:e2:bf:cf:25:53:45:75:6f:f0:ab:2b:9a:28:ca:
                    a7:b4:66:0e:0d:1b:60:b5:78:72:4c:ad:e3:9c:0c:
                    87:cb:4a:37:d5:8e:ee:1a:cb:aa:b1:ac:6b:d6:b6:
                    51:3a:fb:b7:3a:fb:bd:16:c2:2c:f1:2f:7d:3a:95:
                    55:16:0c:42:93:67:87:bd:b9:c8:02:da:a5:f3:3c:
                    94:b3:37:b2:2d:f2:ae:d6:fc:20:eb:3c:1a:99:23:
                    36:97:cb:fd:d5:82:76:49:20:5d:16:94:cd:15:98:
                    b4:10:f9:01:94:3c:50:5c:d5:84:a1:fb:c9:bc:9f:
                    db:9b:d3:4b:f2:bb:91:5c:3a:a8:b0:5a:2f:20:5f:
                    19:c1:68:92:dc:b3:f7:10:2c:bb:f5:f4:03:6f:52:
                    37:4d:93:4a:1d:ca:97:ae:f3:50:31:fc:9e:c8:25:
                    ad:f0:44:e3:0a:2f:dc:84:38:14:05:13:5d:68:27:
                    c5:e6:81:f2:a2:61:33:30:58:64:96:a5:bc:a6:ea:
                    3c:89:b0:82:4a:63:7d:8b:a3:df:32:7a:65:30:1a:
                    de:da:d1:70:d7:9b:0c:aa:09:7f:18:a8:15:38:5a:
                    bf:94:fd:3e:20:6c:bd:22:44:a7:3e:14:ed:06:53:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8F:6B:F5:9A:D7:F8:2D:A6:AA:CE:E2:89:39:F2:8F:27:AE:02:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/fdf255a8-a262-3f43-8b31-c291f0b34ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.crl

            X509v3 Authority Key Identifier:
                keyid:83:74:CA:8C:E7:6B:AB:C7:73:BD:A1:E6:0A:E3:D6:B2:3D:0E:8B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:aa:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:67:18:01:cd:9a:31:a0:f4:36:ba:d0:f2:89:9f:ec:c9:5c:
         08:0e:a6:9e:42:de:6e:60:2d:fb:73:a6:de:c0:b0:8c:f1:eb:
         18:00:cf:4a:f6:00:db:6b:b2:92:2a:e5:bd:a7:6c:2e:9c:99:
         fe:fc:7e:32:b0:f1:85:eb:d8:b0:d6:d9:06:a9:86:80:df:e7:
         49:bb:01:af:99:10:69:5f:c5:1d:38:c2:04:06:9c:24:ef:c7:
         cd:70:e8:5d:f4:58:c2:77:16:78:dc:cd:b5:20:c2:ba:21:8b:
         96:b0:ee:6e:d6:7c:2a:83:04:fb:22:6c:16:19:d4:c1:19:f1:
         14:ca:3c:70:a3:21:b7:e0:21:65:e2:b3:2d:fa:d8:81:29:5b:
         d8:ed:d4:e7:79:b3:8c:62:da:60:82:db:1a:8c:db:b2:11:9c:
         66:ce:86:ce:65:39:da:99:3b:6c:01:db:72:4b:f1:23:42:db:
         7a:9a:e4:81:9d:c9:dd:b6:90:c9:a8:0d:fa:8f:13:d7:4f:ca:
         73:8f:fd:cf:76:38:8b:f5:20:9d:37:f0:62:25:83:99:9f:db:
         43:ef:bd:f6:65:63:ec:74:f5:c7:ac:d3:d8:18:5f:be:80:6f:
         ef:00:73:96:e8:da:20:0c:9c:2a:63:e1:1b:4f:73:01:36:ca:
         cc:2a:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:33 2026 by rpki-client