Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
File:                     7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa (raw, json)
Hash identifier:          8PowpF+GhuI2v0gSWSmaVcgbdqMXxw18Qap0tP5QOhI=
Subject key identifier:   16:0E:85:23:7E:2F:F7:13:DA:3E:15:38:F0:66:DA:34:06:9C:FC:A8
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F4328584E8DEFA8FB779E09CFE2F1C3B0
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     3464
IP address blocks:        2607:f808::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a8:fb:77:9e:09:cf:e2:f1:c3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=9ad7b379-83ac-4d77-8895-17d27ee33efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:45:9c:1b:c0:8d:1c:5f:e4:d0:8c:9c:1a:d1:
                    c0:c3:9e:87:a3:6b:d2:72:03:73:66:fb:74:97:98:
                    77:0e:65:94:59:49:08:30:11:fe:38:4e:66:13:c3:
                    e7:cb:03:c8:c7:10:5c:21:1b:35:26:9c:79:46:eb:
                    15:84:d4:b8:94:82:ab:2f:e5:3a:cb:af:38:95:c4:
                    cc:b8:de:5d:86:f5:ed:1d:c1:c2:28:e3:e8:21:73:
                    f4:02:fb:55:a2:30:c7:99:bb:23:f4:b8:9e:6e:c0:
                    ef:a2:83:b7:8c:82:2d:e1:a1:e6:af:64:6b:da:81:
                    15:f8:2b:1d:1b:29:e2:09:78:ba:f0:66:f5:1a:f0:
                    24:97:57:e5:34:5f:fb:97:79:05:60:b8:68:35:33:
                    9c:bc:13:bf:7f:9c:fb:94:41:0a:ab:fd:7b:5c:f1:
                    12:b3:e4:99:22:bb:d2:a7:6a:0e:7c:94:84:c4:a2:
                    79:fb:dc:2b:22:4b:bc:46:8b:19:3c:ac:17:15:bf:
                    12:72:55:f4:3d:f3:ec:a6:3a:95:4e:9d:34:d2:87:
                    2f:8b:0c:78:2d:84:66:47:43:a2:47:39:6c:b5:38:
                    51:2e:25:aa:47:59:1c:06:a4:a9:fb:3f:10:3c:f0:
                    2d:cf:a2:d3:17:30:61:a6:c5:f7:c8:ec:d8:2e:80:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0E:85:23:7E:2F:F7:13:DA:3E:15:38:F0:66:DA:34:06:9C:FC:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f808::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2a:29:c5:fb:26:51:48:cf:48:95:37:8b:0d:aa:9f:de:e4:
         96:3d:98:7f:4a:58:19:e4:3f:7f:89:6f:c3:6e:a9:6e:38:aa:
         ea:3c:7b:cd:84:d9:fe:f0:73:bd:28:60:a2:c5:8b:95:77:b7:
         f1:f6:f0:fa:6f:93:25:cf:ee:ac:d5:ea:b6:6e:f9:99:86:57:
         bf:f7:f7:62:26:a1:69:b9:78:74:36:67:be:5d:e8:fe:89:8e:
         73:77:a1:b8:1e:05:a1:b9:69:6c:6f:8b:40:22:14:e9:be:87:
         10:30:79:5e:2a:22:09:2e:e1:0b:ed:db:96:f4:c2:b6:8c:a4:
         ea:7a:20:df:74:91:e2:a6:ff:e0:ea:ab:2e:65:1c:95:6d:ca:
         9e:ad:5e:13:5e:95:89:2b:5b:00:05:d9:f8:20:42:57:4e:a0:
         d1:14:cf:1c:23:2c:ac:31:3c:a9:c6:11:b6:57:3a:77:87:48:
         68:7e:63:36:57:7f:e5:87:97:39:dd:ba:00:97:4d:7e:b1:0d:
         57:40:12:f9:27:ff:a2:e0:4b:76:71:31:96:a3:8e:5d:50:08:
         47:44:0a:98:d0:18:41:dc:6e:4a:46:77:a6:40:b8:62:97:d5:
         9b:58:13:c5:96:d0:54:49:1f:8c:79:4f:a9:09:c1:73:b4:63:
         45:4a:13:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:00 2026 by rpki-client