Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa
File:                     e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa (raw, json)
Hash identifier:          JemPhsJW4PhDPKVDnArFP8lL16KZ6PUL7nb6KoRYMj8=
Subject key identifier:   4C:86:05:C1:92:C6:DA:5D:4F:17:67:7A:62:0B:B1:2A:B6:24:74:9C
Certificate issuer:       /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
Certificate serial:       010D0C9F4328584E66DA177A60CFF4D1B6524080
Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     2572
IP address blocks:        2610:e0::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:17:7a:60:cf:f4:d1:b6:52:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=01bef86d-5f4d-4a5c-a3fd-056751ccbd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:71:12:95:a3:3f:81:55:02:82:a4:17:8d:
                    e0:e6:19:51:4e:8e:a3:4a:df:9b:16:09:e4:15:f0:
                    4a:fb:42:5b:44:29:61:7f:45:43:ec:be:91:1b:72:
                    b4:eb:e0:49:a8:5f:12:90:b1:68:bc:5c:d1:87:6b:
                    ae:53:5f:c5:22:2a:a6:3b:17:57:3b:7e:4d:64:c3:
                    7e:5b:fc:c2:0f:94:12:4b:23:5b:5e:f7:8b:6f:a7:
                    77:e8:05:a2:43:5e:bb:4f:f9:5f:63:c7:e0:9b:79:
                    64:dc:0a:e0:47:3b:7d:35:85:d9:65:e0:1f:58:d5:
                    90:13:8f:d2:ed:74:83:96:d1:69:a9:0d:5e:65:14:
                    a1:af:be:c5:5c:a7:c6:b1:a1:ca:01:ea:d0:e8:e5:
                    8a:50:fd:44:b6:d9:74:11:df:1a:c2:a5:6a:b3:4a:
                    85:62:00:1e:2e:20:1f:2e:f0:1d:75:00:5d:05:a8:
                    19:d0:07:3d:ad:14:0b:17:6c:8e:d5:6d:4c:a9:2e:
                    a7:df:17:e9:27:2b:ea:8d:16:41:62:bc:37:95:82:
                    7f:43:37:80:5b:af:49:c9:a1:b2:63:7b:c3:e1:91:
                    69:1b:1d:90:d6:6e:db:0b:a0:71:d1:72:7d:02:53:
                    6f:db:c5:d7:71:5f:0e:60:69:51:ef:d9:0e:6d:f2:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:05:C1:92:C6:DA:5D:4F:17:67:7A:62:0B:B1:2A:B6:24:74:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl

            X509v3 Authority Key Identifier:
                keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c2:6b:58:81:61:64:8c:51:2f:74:fa:91:bb:9f:a9:5f:e2:
         98:67:ab:23:d2:86:33:b5:29:f4:d3:ba:a4:f9:36:bb:54:e5:
         a1:e9:3c:63:33:1e:6d:85:c0:ab:ec:cb:8d:8b:a5:fe:06:76:
         be:56:15:0d:6d:7a:91:b1:b3:dd:44:99:f6:34:50:b1:71:2a:
         70:35:a1:1d:dd:30:0b:a6:dd:6e:9a:99:5f:48:b8:43:61:ee:
         86:41:c5:33:35:02:62:eb:04:a6:76:d6:37:e8:40:4e:27:56:
         d3:96:0f:b6:d4:27:f4:bc:73:b2:9d:e5:10:38:77:66:a0:ca:
         c4:17:8c:55:4e:79:21:11:70:2f:f6:7d:24:02:e5:4a:99:98:
         a6:04:a7:c2:6b:d8:bd:ec:10:83:3f:e5:d3:dc:b9:25:6b:cb:
         85:27:bc:27:0e:a8:bc:31:1d:71:b7:31:60:66:de:b2:ce:97:
         98:54:a9:81:25:41:38:f1:1d:0c:09:b5:75:09:52:6b:cc:63:
         64:c0:88:be:4a:bb:94:fe:f3:40:66:0a:31:2c:fd:3c:6b:e7:
         b2:89:7f:a3:25:81:3f:fd:4d:77:0d:43:7f:f9:55:5c:81:13:
         95:2e:4a:a7:c8:9f:48:18:29:69:a3:33:00:26:f2:e4:82:75:
         73:15:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:09:15 2026 by rpki-client