Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/561afe3d-9b91-3f87-95ed-4f4066246455.roa
File:                     561afe3d-9b91-3f87-95ed-4f4066246455.roa (raw, json)
Hash identifier:          EiqwvuQ7IcrwCQAuQUlc1PJZTI1OH4st+WvOD8QFvkw=
Subject key identifier:   D4:4D:B4:48:19:E9:75:CA:63:4A:B9:FD:C7:BE:45:E8:F1:9B:E1:5D
Certificate issuer:       /CN=7da5f50d-c4e5-46cc-ad95-7464c9f481c1
Certificate serial:       010D0C9F4328584E3B947ED316CF2BA76D695780
Authority key identifier: 08:03:CC:E5:0B:8F:FB:4D:38:99:1F:C1:B4:E5:FB:E2:FD:19:36:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/561afe3d-9b91-3f87-95ed-4f4066246455.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     401534
IP address blocks:        2602:f77d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:7e:d3:16:cf:2b:a7:6d:69:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5f50d-c4e5-46cc-ad95-7464c9f481c1
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=982b64d0-cd19-4673-a415-01569a8ad248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:e7:f4:38:d1:ec:dc:cb:70:ad:38:c6:d4:
                    82:af:08:5f:ee:d1:41:fe:bc:92:3d:72:e6:63:b0:
                    29:fc:e6:c4:d8:83:ed:7a:70:33:ea:4f:44:98:54:
                    0d:1b:ca:f4:6d:ce:64:77:ba:5f:83:b2:c5:82:be:
                    07:96:fa:a6:f8:ff:f6:91:16:1b:1b:2b:10:78:86:
                    50:a3:13:99:3f:ce:9c:01:ac:9b:3b:e2:cc:6b:e1:
                    6e:fb:dd:fb:d8:6e:2c:a2:be:02:62:72:eb:86:13:
                    c4:1d:75:0b:43:e3:b1:69:37:31:72:16:a6:54:15:
                    f1:52:3f:ad:bc:b3:04:c1:52:df:d6:3c:62:03:e8:
                    27:65:49:5d:a5:46:21:ce:de:a9:40:a0:0a:f6:c0:
                    4a:be:e6:ab:7a:1f:4e:8f:c9:a3:99:83:13:70:b0:
                    ac:51:30:30:c4:38:12:ac:41:d8:a4:2d:95:f0:89:
                    a2:d1:95:23:01:09:3a:0a:bd:f2:75:da:86:f3:af:
                    53:71:d9:bf:92:2e:fb:ff:53:2d:ec:eb:11:fd:a6:
                    54:30:53:a2:78:e5:03:a9:70:33:20:19:b0:ea:36:
                    50:da:89:19:7c:58:7c:96:e7:e1:b1:4b:ae:2b:50:
                    b9:fa:b7:f5:19:8d:fc:84:cd:8b:a4:71:f5:d3:cc:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4D:B4:48:19:E9:75:CA:63:4A:B9:FD:C7:BE:45:E8:F1:9B:E1:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/561afe3d-9b91-3f87-95ed-4f4066246455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.crl

            X509v3 Authority Key Identifier:
                keyid:08:03:CC:E5:0B:8F:FB:4D:38:99:1F:C1:B4:E5:FB:E2:FD:19:36:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f77d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f1:ab:c2:bc:53:2e:d7:20:76:64:87:78:b7:a5:37:ff:84:
         ca:c0:f8:95:0d:36:21:57:9f:59:68:e4:ee:0d:a5:fc:c1:72:
         85:24:b0:b6:98:12:e0:cd:61:fa:90:88:58:57:bf:d9:2c:51:
         24:0b:b4:b6:fe:6a:86:68:0e:3c:ef:e5:e3:33:f2:72:49:80:
         c3:ec:70:55:6b:d1:c5:f4:fe:fc:76:dd:70:b8:16:ea:37:34:
         30:40:8c:d2:90:8d:af:3f:fc:ff:09:fa:69:97:07:d3:bf:fc:
         e3:27:68:a5:bf:f0:79:92:dc:3f:16:0e:71:da:c9:0b:90:db:
         68:03:84:3a:9c:90:2b:12:a1:5b:20:fb:34:80:4f:e6:78:21:
         53:d6:f3:2d:c4:72:f3:d1:e8:d9:b1:d6:b9:e2:03:d3:15:ba:
         a7:77:0e:7b:89:ef:45:40:f0:18:20:1a:83:fe:9f:d4:83:f0:
         b7:98:b7:26:48:ec:a8:24:bc:b7:56:37:07:e0:a1:1b:70:2c:
         df:9b:21:95:4b:5e:ba:e4:28:3a:51:70:ec:b3:c3:c3:ae:9e:
         15:b9:96:25:ba:61:7f:1e:5d:15:4b:f4:39:43:31:20:b6:cf:
         05:6d:d5:11:8a:52:41:1e:51:8c:a8:7e:1e:6c:e1:1c:6d:39:
         2f:f1:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:48:39 2026 by rpki-client