Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2/751e0759-1e4e-316a-8c3a-e220ef790127.roa
File:                     751e0759-1e4e-316a-8c3a-e220ef790127.roa (raw, json)
Hash identifier:          g/p90J9IbLJ4VvzrjhKEXWrFrAq5IPO3gumesVgTOWM=
Subject key identifier:   05:08:1F:82:A0:48:3E:24:F3:D3:4C:3A:D0:5A:7F:C2:CB:A9:CB:93
Certificate issuer:       /CN=f9e333a2-1669-498a-b785-6f851848eeb2
Certificate serial:       010D0C9F4328584E5FDF5D023D2AA6C507C61DE0
Authority key identifier: 91:A7:53:FF:9A:69:5F:C6:2D:E5:66:9C:72:89:81:51:28:4D:8F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2/751e0759-1e4e-316a-8c3a-e220ef790127.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     14048
IP address blocks:        2620:33:4000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2/f9e333a2-1669-498a-b785-6f851848eeb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2/f9e333a2-1669-498a-b785-6f851848eeb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5d:02:3d:2a:a6:c5:07:c6:1d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e333a2-1669-498a-b785-6f851848eeb2
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=8e142f3d-84a0-40d5-95df-ce6dcba05618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:11:24:37:f4:c3:d3:cc:df:e0:01:ca:b3:
                    85:b7:cb:cf:00:30:f2:ef:2b:75:d4:2c:3c:d0:6b:
                    16:b9:60:68:3b:5c:c8:b3:e5:18:a4:20:9f:20:9a:
                    e6:da:17:79:dc:19:19:19:c4:09:58:33:79:5c:01:
                    eb:71:ca:d9:ac:d7:04:86:6f:e0:f4:a3:b4:d0:bc:
                    cb:6a:87:6c:86:18:96:25:93:3a:df:cb:4d:e7:a6:
                    5a:c0:7b:d2:67:15:02:16:24:99:f1:2a:be:4b:bb:
                    f5:97:b7:7b:c6:75:76:fd:8e:1b:1b:6d:f2:05:4f:
                    12:23:00:35:fa:3a:d1:91:9b:45:92:c9:90:70:c3:
                    89:6f:8f:9a:f5:93:27:a9:50:e3:fa:b8:8d:53:eb:
                    c0:43:ca:0e:de:3d:e3:92:6d:e9:ec:2c:33:ee:cc:
                    50:de:2b:fe:81:ac:71:45:ab:47:f7:c5:c0:1f:6a:
                    3f:34:95:4e:3f:0b:b3:82:73:5b:4f:fa:99:15:e3:
                    94:48:7e:30:9d:97:3c:39:e5:31:74:c5:13:07:c3:
                    3f:8d:87:d1:85:c2:5c:fe:1b:d9:56:68:13:8a:c7:
                    09:31:ce:9b:b4:13:71:44:33:e7:d7:3a:26:67:bd:
                    9c:df:21:10:3c:b3:45:05:4e:38:4f:db:4e:69:e7:
                    d8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:08:1F:82:A0:48:3E:24:F3:D3:4C:3A:D0:5A:7F:C2:CB:A9:CB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2/751e0759-1e4e-316a-8c3a-e220ef790127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2/f9e333a2-1669-498a-b785-6f851848eeb2.crl

            X509v3 Authority Key Identifier:
                keyid:91:A7:53:FF:9A:69:5F:C6:2D:E5:66:9C:72:89:81:51:28:4D:8F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9e333a2-1669-498a-b785-6f851848eeb2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:33:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7c:8f:ee:f7:5c:1e:4a:0b:b0:d2:a7:44:15:7d:24:9f:25:
         e0:f5:c9:8e:ef:6f:8d:25:73:93:81:4d:bb:d4:4c:74:c5:f3:
         7e:00:d7:61:47:97:e3:bf:b2:48:33:c8:b3:13:1a:a9:21:3e:
         1b:0a:12:18:a5:87:ae:dc:b1:54:5a:49:38:b2:89:25:91:ac:
         0b:29:b1:dc:3f:01:7a:e8:c9:bb:75:54:23:8e:bd:45:0e:20:
         0a:3e:de:ee:43:0a:e8:a5:45:73:a9:f3:84:ac:bf:f0:93:bb:
         d2:58:ab:08:d7:59:a6:59:c8:81:6a:58:c9:13:84:ea:09:8c:
         de:91:ea:7a:13:13:d5:80:34:eb:f1:2d:64:71:16:a4:31:42:
         7d:60:2b:df:57:c2:75:6d:0f:56:30:24:bc:6c:a9:9d:4e:57:
         fd:5c:32:18:a4:11:88:96:33:a4:82:dc:d2:8e:c3:fa:d8:57:
         2c:94:2f:c0:59:b1:34:f7:eb:61:4b:ad:6d:42:9e:40:c6:ae:
         f7:b1:2e:9e:de:79:0c:f3:54:36:9e:02:43:6b:18:2d:ab:57:
         0a:0a:69:28:6d:87:02:b6:7d:5f:b5:b5:28:44:6e:25:f9:8d:
         ac:77:07:fd:91:df:00:21:4c:97:df:cd:e6:4c:79:2a:6a:2e:
         90:9f:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:09 2026 by rpki-client