Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/81dfee83-ca80-33e1-87cc-87e91050e0e8.roa
File:                     81dfee83-ca80-33e1-87cc-87e91050e0e8.roa (raw, json)
Hash identifier:          jSbnUOz2eFXKdHSKyNL3yc4mP/5fCJadPcunjUQHrbc=
Subject key identifier:   E3:23:1A:DF:64:BD:E8:76:D1:6D:28:64:B8:CE:56:B5:B0:18:BD:56
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584E78FF80301AB12DDF96116900
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/81dfee83-ca80-33e1-87cc-87e91050e0e8.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     30045
IP address blocks:        2620:62:4000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:80:30:1a:b1:2d:df:96:11:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=1356f67a-b5f1-451a-95b1-8f83a08be806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:ef:b7:63:9a:73:b3:bc:66:0b:92:b3:76:
                    78:1d:5d:57:ca:f4:36:f5:2d:e6:23:d9:e2:32:6e:
                    33:ea:54:ab:6d:7b:b5:96:76:ef:49:ff:25:e9:ae:
                    da:6d:3b:3f:5a:5e:f7:c6:57:57:d1:8d:1d:00:81:
                    c9:0c:e4:80:e5:da:73:c9:5a:82:9d:6c:3f:4f:69:
                    a9:b9:26:ee:a4:35:46:9c:e8:25:1f:61:04:1b:02:
                    4a:cc:40:2d:4f:ee:14:93:09:64:9c:10:86:11:01:
                    6c:2e:5c:cc:88:91:25:e1:02:b5:7b:74:e8:64:c0:
                    43:ce:42:eb:6a:ec:11:29:69:08:f1:f0:e3:a9:13:
                    14:3b:83:0b:05:76:88:4c:4b:00:bd:02:b4:11:88:
                    4a:cc:01:57:37:57:14:76:1e:d4:c7:b7:88:76:b9:
                    16:1f:a6:7c:d6:e4:ea:ae:4c:fb:49:43:ae:d0:eb:
                    c1:f3:7a:82:a8:53:8d:b1:62:e7:a8:32:99:fe:30:
                    a7:30:e4:e3:7c:c1:04:4d:8c:07:63:ba:ef:a8:70:
                    9c:b0:fb:7a:0a:9c:fd:8e:e8:ad:c3:12:5b:36:e7:
                    13:b2:b8:7a:35:1b:23:68:ad:9a:eb:03:9b:bb:75:
                    1e:ce:a5:db:93:70:5c:80:e3:9a:fa:8b:74:0c:1e:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:23:1A:DF:64:BD:E8:76:D1:6D:28:64:B8:CE:56:B5:B0:18:BD:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/81dfee83-ca80-33e1-87cc-87e91050e0e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:62:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:9c:24:e9:c7:09:8e:ff:19:1d:f0:27:9f:24:12:47:47:
         dd:6d:5b:24:f2:e1:ec:5c:42:2c:8d:b1:2d:9a:04:d0:4c:3c:
         c5:b6:35:11:31:37:47:c5:8f:19:44:97:df:fe:64:67:7d:b0:
         f8:27:d0:b1:14:74:f1:22:99:82:9b:e0:05:79:d3:3a:e7:6c:
         a7:8d:96:fe:c3:de:fa:ff:97:67:dc:75:30:4a:9b:22:ee:7b:
         da:d7:ed:17:06:83:67:29:dd:f1:ee:31:49:d9:65:c1:0a:10:
         29:94:a3:d3:eb:8e:ec:05:77:d6:92:30:fb:c6:99:ab:e4:b4:
         79:b5:a3:1d:92:69:85:e7:28:6c:34:9d:78:4d:bf:54:cf:74:
         84:6c:6f:ec:1e:25:e0:fd:b3:c6:17:41:a8:f8:ff:6d:de:83:
         0a:34:bd:29:14:3c:20:d6:4e:41:ee:9f:e1:26:91:a1:ed:34:
         e1:69:16:d0:98:96:d5:6b:0b:34:bf:db:8d:23:ba:0d:b9:b9:
         ea:f6:f6:c4:90:04:a1:72:92:de:a0:d7:44:30:0c:81:b8:86:
         53:58:30:3b:e3:f5:4c:27:fc:53:04:24:ff:5c:39:a4:25:cc:
         6c:83:64:1c:78:2d:98:c1:b2:c7:58:6a:d5:ae:60:07:20:65:
         19:59:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:26 2026 by rpki-client