Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa
File:                     b573f29f-c08e-304d-92b2-cd55eb7addda.roa (raw, json)
Hash identifier:          06aoML0e+ZfevLEM+6m+2O9zMuVDTXRuQK3misHD740=
Subject key identifier:   BE:DA:91:23:4E:C7:41:A2:7F:76:90:EC:C5:91:B5:86:FA:03:B5:CA
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F4328584E6144BCCC5A52EA453737FD80
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     40244
IP address blocks:        2604:7c00:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:bc:cc:5a:52:ea:45:37:37:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=71492a23-d4cf-4741-85d5-716db6225a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:07:cf:e5:d4:27:fc:cd:0f:9d:f6:7f:41:
                    a0:56:ca:c0:ac:4a:bd:e8:68:bc:3f:ff:b0:35:fb:
                    50:b6:e8:ee:07:ab:6e:a1:2c:4f:f5:8d:24:bf:d9:
                    18:b0:76:62:e8:2e:d6:41:52:53:11:4d:42:c0:f7:
                    cd:6d:e3:ab:9e:22:f5:cb:b9:87:d4:ed:ce:8a:80:
                    c6:43:f5:74:fa:52:49:e2:d0:ab:c7:c4:a4:ac:89:
                    b0:05:d3:f4:92:7a:ea:ff:fc:28:82:bd:c2:c6:7e:
                    f1:0b:97:87:a4:83:cb:82:89:21:3e:a0:c0:1a:8b:
                    e0:13:e0:39:59:1e:5e:ed:ea:e5:f4:e1:5e:c3:7c:
                    ab:1c:96:5b:a9:17:78:65:5a:f2:9a:3a:bf:10:bd:
                    54:8a:d9:46:8d:36:f7:0d:62:2b:5f:b8:c2:52:28:
                    ed:de:38:c5:cc:66:d0:50:44:22:93:99:78:4f:58:
                    a8:65:f0:94:62:d3:9f:e4:2f:6e:e6:2d:86:f2:12:
                    f3:51:de:f7:a5:2e:dc:de:6e:2d:2c:9e:fc:f7:48:
                    e1:67:de:53:df:df:1e:fc:ef:64:d1:3c:70:20:c8:
                    0c:fd:7f:51:d3:07:0f:d6:f3:f4:7d:b1:72:27:2b:
                    b8:54:d8:df:47:23:c8:17:da:a3:c1:3a:df:f4:24:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DA:91:23:4E:C7:41:A2:7F:76:90:EC:C5:91:B5:86:FA:03:B5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7c00:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:86:2d:e7:c6:7a:7d:33:f2:73:c6:1d:62:98:b3:29:f6:
         85:c1:2a:57:56:31:27:90:63:cb:36:d6:62:a7:17:19:2a:f7:
         26:29:51:7c:d4:48:ab:25:63:02:c0:f7:e6:1f:eb:f5:25:4c:
         b2:d1:b1:fd:15:ef:2c:d6:84:51:ee:9a:71:6b:7e:b9:eb:42:
         d8:1b:b8:6a:2b:0e:c0:a4:b8:74:dd:98:c8:d8:62:ff:b7:69:
         84:c3:8c:7f:0d:b8:fb:8c:20:7f:36:fd:ef:93:2d:dc:d4:f3:
         0c:25:53:54:3f:94:06:54:43:ae:97:1b:ac:de:0a:40:c0:c1:
         18:01:26:e7:f2:de:48:1f:8c:7f:32:c7:83:b3:e4:bc:9a:e5:
         8b:1c:fe:6e:2c:be:81:18:64:17:e2:d4:ee:12:41:54:0c:83:
         bd:df:81:64:3d:bc:21:f3:af:45:f3:b8:0e:42:ca:6e:af:8b:
         c7:77:ec:ee:60:f4:4c:12:28:d0:db:19:7b:bb:00:4f:a0:1f:
         d7:e8:e0:b6:01:8a:2b:e6:64:94:36:6b:9c:4c:9a:10:46:4a:
         2a:7a:31:94:a8:b0:16:10:4d:75:13:50:d5:3d:66:65:a5:1f:
         9e:82:1c:68:e0:a9:a2:4b:df:fe:02:42:8a:a6:f3:68:5f:da:
         dd:db:45:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:58 2026 by rpki-client