Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa
File:                     9897673b-da30-342e-a2ae-a0611cdcd3b3.roa (raw, json)
Hash identifier:          uu9O3C8Sn4HLOwB8SSqDjtn2OIioeh4jDWDz/zpJm4k=
Subject key identifier:   42:07:3B:71:13:6E:C2:12:AF:7A:D8:DE:A1:FB:0C:23:D1:16:A4:B1
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584E3A2F3770B02B5930EB180830
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     27419
IP address blocks:        2606:2f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:37:70:b0:2b:59:30:eb:18:08:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=5bb2b496-f995-4135-8dc5-bf6d680f3c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:a6:30:f0:1d:bd:ca:b3:84:2e:a4:72:a0:
                    98:d9:3d:c3:24:0d:f2:d4:e0:12:39:09:c2:b5:f6:
                    df:37:03:25:2c:ff:16:47:91:c0:7c:a6:21:4a:0f:
                    cf:70:85:e4:dc:6a:4f:57:e1:43:c6:83:6f:d2:26:
                    1b:5b:15:eb:02:4b:75:34:3f:dc:60:a7:f0:55:dd:
                    fa:7b:a2:58:56:b6:28:32:03:06:b5:85:94:89:9c:
                    82:a0:8a:db:05:b8:bf:88:e6:3c:57:9b:fd:2b:d0:
                    ec:02:92:be:b2:e3:cd:07:36:39:d4:8a:0c:e1:15:
                    f6:ba:37:e4:2c:b7:95:24:8c:d2:a0:21:55:e0:5a:
                    3c:8a:d7:06:f1:56:43:bc:c2:4a:f9:63:ab:48:38:
                    db:07:db:0c:a3:ce:d7:b9:b3:5b:5c:f7:36:0b:99:
                    5a:d4:bd:20:b2:82:b5:5c:29:09:bc:b2:73:80:b2:
                    bd:3f:d0:3b:26:da:d2:55:ab:07:fb:c6:d4:2e:a4:
                    72:51:fd:95:81:7c:27:07:b5:da:e6:03:41:5c:58:
                    82:b0:12:b5:5f:a9:e6:25:ff:c6:e9:cb:a5:76:39:
                    9c:b3:23:95:90:30:b4:fb:77:12:49:70:db:d4:39:
                    fa:f0:74:e1:06:40:48:f9:29:61:a6:cd:f7:0a:d7:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:07:3B:71:13:6E:C2:12:AF:7A:D8:DE:A1:FB:0C:23:D1:16:A4:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a6:1a:a2:77:5b:72:9f:fa:7f:6b:fc:d8:3a:25:29:27:e1:
         f3:9a:93:63:81:a1:73:78:7b:1d:b8:d6:47:79:a9:a2:d8:9b:
         d0:1b:9c:62:2c:d6:61:f7:47:a7:81:5c:b3:4c:90:fc:ba:0c:
         85:c6:51:74:02:95:66:d2:55:4a:7e:80:fa:97:b5:65:d1:fb:
         b4:69:5c:a3:db:85:6d:b7:93:b8:1f:8c:8b:37:c9:e0:e8:2f:
         67:18:e3:6e:a3:19:d9:94:ee:d7:78:0c:28:2b:58:88:48:04:
         fa:e5:15:88:f8:23:b2:23:be:8f:f3:65:1c:c6:d0:d8:b8:ce:
         06:e6:20:4f:1b:5b:66:c9:7a:cc:03:43:d5:07:dc:28:fa:55:
         ea:25:27:a5:1c:1b:c3:12:3c:c0:40:5e:f9:83:8d:2a:b0:b9:
         78:e1:3b:d6:12:6d:2a:fa:e3:2d:f2:e5:c1:56:11:d5:83:e4:
         14:c8:ea:97:78:56:47:ea:e2:42:b6:ac:a1:11:da:cf:b9:4b:
         72:d2:47:36:3a:bf:b1:d6:d6:89:4c:da:af:5e:93:12:e6:59:
         75:f8:51:10:90:f1:24:db:e5:62:67:4d:98:d9:d4:e9:b4:50:
         b6:10:3a:6b:9a:02:eb:bc:7a:c9:e2:2e:f9:37:51:82:0e:2d:
         f6:dc:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:44 2026 by rpki-client