Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/88fb9755-82b7-3ae1-ba93-50184ee39f48.roa
File:                     88fb9755-82b7-3ae1-ba93-50184ee39f48.roa (raw, json)
Hash identifier:          gM0bqAhX8wNckvaZMVAc8NPtTyCuMSqugtSp3CqwxJE=
Subject key identifier:   F7:2D:FD:16:2C:C0:4F:F5:B5:51:58:6C:7F:37:A9:69:F7:78:C0:E5
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F4328584E5A49EFC173D2536F3F17AA80
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/88fb9755-82b7-3ae1-ba93-50184ee39f48.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     11550
IP address blocks:        2607:7800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:ef:c1:73:d2:53:6f:3f:17:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=4af48ab9-1b39-486c-bd4e-d9f2e25289c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:cf:1c:4a:d1:dc:7c:a8:fd:39:eb:8c:27:
                    7e:20:bc:19:fe:b3:8d:b3:1f:bd:39:14:27:ca:b0:
                    12:ed:9c:90:fe:3a:13:7d:ba:3f:a9:95:b5:b5:3f:
                    da:62:0c:da:1e:ff:c9:70:47:11:e7:8d:41:2a:e9:
                    88:e7:f4:77:fb:0e:81:94:52:6f:7a:ca:a4:47:69:
                    cd:74:7f:ea:09:62:8e:b8:54:dd:9b:29:79:53:28:
                    c1:b5:9c:96:b6:a8:12:86:1f:df:31:fb:f9:6c:45:
                    10:f7:76:a7:60:9b:ea:d1:36:8f:05:be:b7:94:67:
                    a5:33:5f:15:15:c7:41:e8:01:0b:d6:ab:f2:34:ed:
                    c6:b2:de:40:63:62:e6:7c:93:b8:04:1a:39:99:a0:
                    2e:90:c0:a8:dc:2c:14:da:cf:03:a6:6e:a8:4a:4d:
                    73:b4:fa:97:8a:f9:18:9e:d2:54:8d:7d:21:51:11:
                    78:c2:00:47:9f:f0:dd:58:5a:81:18:e6:06:50:bd:
                    c7:89:f5:21:ce:eb:9d:f2:3a:e6:bc:8a:62:d1:e8:
                    0d:e9:50:82:35:b5:d5:c5:75:b9:bf:38:55:6f:0a:
                    44:00:07:fb:50:5a:fd:5e:92:58:f5:b4:7f:03:69:
                    d8:4f:7e:a9:e7:e9:41:84:0d:08:90:63:e4:be:46:
                    d9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2D:FD:16:2C:C0:4F:F5:B5:51:58:6C:7F:37:A9:69:F7:78:C0:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/88fb9755-82b7-3ae1-ba93-50184ee39f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:cd:b2:af:ac:33:b6:e4:7b:d1:0a:43:01:0a:c4:15:96:e0:
         8b:26:c1:17:38:4d:a2:1a:d4:db:39:e0:00:67:d7:b6:75:be:
         ff:03:65:ef:7b:bb:84:4c:71:72:2a:5a:85:23:b0:dd:a5:d7:
         8f:d9:ce:fb:5d:68:2a:02:3e:e1:1f:4b:9a:68:7d:cc:15:28:
         f7:b9:28:a5:a4:29:d3:c3:ac:1d:b8:ca:01:ac:1c:ce:d2:27:
         a0:ea:aa:39:9b:25:81:6f:e2:ac:3a:5a:7e:04:de:68:e3:08:
         24:8f:4b:65:ed:46:1a:63:05:05:a4:aa:cd:64:76:ce:ce:9b:
         f2:8e:c0:7f:aa:da:ac:10:df:87:47:e0:ed:43:3a:94:03:3b:
         8a:9c:10:a2:3a:71:c4:a7:01:07:6d:25:74:d0:29:ba:2c:24:
         5f:54:df:e9:62:f9:67:24:ca:88:cf:7d:15:c6:fe:69:a2:a1:
         3e:94:5c:0d:0b:be:01:c9:d9:bb:58:93:d8:b1:7a:94:da:1e:
         bb:cd:87:97:12:10:c3:a5:0e:fa:70:c7:8c:99:90:db:4b:9b:
         e7:56:51:1f:e5:c9:5f:e5:52:52:ea:1f:74:f0:9e:e1:ee:fb:
         72:9a:c9:fd:68:f2:c1:a1:22:ce:ed:dd:f0:3a:3d:e0:bf:55:
         4c:38:26:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:28 2026 by rpki-client