Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/8e440638-41c4-3921-b00c-ee8f0abf82b6.roa
File:                     8e440638-41c4-3921-b00c-ee8f0abf82b6.roa (raw, json)
Hash identifier:          n54f4JvQ3ubpaoZJZU4bmW5+CjrJnrxFq2Xg5KH/VLw=
Subject key identifier:   F4:45:AB:0C:56:FA:FB:29:5A:55:53:17:C0:F3:EC:53:F6:62:BF:91
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584E709F6F310EBA6511BD1DA800
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/8e440638-41c4-3921-b00c-ee8f0abf82b6.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     271
IP address blocks:        2607:f8f0:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:6f:31:0e:ba:65:11:bd:1d:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=d71b19ff-b4a8-4929-95a7-db214a72b6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:44:55:27:9d:8e:95:a9:ad:ac:fd:ed:cd:
                    86:a2:5a:2c:ec:27:ee:e5:7b:40:65:28:42:cd:b2:
                    fe:0b:ea:17:f1:34:42:63:ce:1b:e0:08:05:42:ac:
                    08:a5:71:4e:1f:06:4c:ce:f9:f0:dc:61:8a:00:b8:
                    35:71:56:53:0f:27:73:d0:63:20:76:f4:ed:42:41:
                    fd:ec:97:b4:da:8e:a7:e1:3c:70:2e:41:67:56:2a:
                    8f:ea:1f:9f:72:b1:01:9e:4b:9f:75:68:ac:3a:86:
                    c0:61:56:68:a0:df:f0:7a:1d:73:8b:37:de:28:e5:
                    8f:77:83:4f:e0:ff:69:69:aa:ef:6f:a5:78:6e:b2:
                    bd:64:c7:81:a0:1b:fa:ad:a5:1f:e7:eb:9f:b4:fe:
                    81:52:ec:99:c2:56:17:ab:83:82:c1:79:ab:e2:e3:
                    2c:64:68:b5:22:aa:d8:d2:38:bd:b3:c0:1f:35:5b:
                    e5:dd:b5:38:ce:5c:fd:bd:47:6c:d0:95:c8:20:71:
                    73:74:a2:61:d8:c3:eb:44:1b:65:ce:a9:82:2f:9a:
                    b7:26:ff:e5:8b:07:77:db:f5:b7:94:92:b9:92:14:
                    7b:81:df:dc:22:8e:18:a8:ec:d1:84:de:e5:50:63:
                    f2:ad:59:d2:81:0a:e0:02:75:3b:66:94:d5:8a:87:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:45:AB:0C:56:FA:FB:29:5A:55:53:17:C0:F3:EC:53:F6:62:BF:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/8e440638-41c4-3921-b00c-ee8f0abf82b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:6e:5b:bc:02:ed:cf:dc:d3:2a:d9:6d:98:e1:54:91:a9:ec:
         b1:be:79:64:bf:31:a8:ea:b5:7e:12:db:32:62:8d:b2:ae:fe:
         e6:85:0a:ae:9e:81:3d:b4:ee:26:dc:29:e7:cb:04:42:c8:28:
         9d:6a:f3:b3:86:f2:6c:39:43:18:98:1a:a9:2e:4a:b9:35:17:
         2f:47:f0:1f:95:ba:1f:35:85:19:0f:74:28:70:db:48:67:b8:
         f1:c2:ed:06:a1:2f:aa:1b:c5:13:55:b8:3d:11:26:18:db:5d:
         67:48:d2:b8:09:11:08:19:a4:c1:ad:7e:fa:2d:af:52:3a:8f:
         2b:b9:76:d5:b3:91:91:cd:50:25:f1:b4:4d:c2:a3:51:05:ae:
         b8:c4:e4:b6:01:62:80:fd:12:5a:20:e1:3a:55:59:43:63:d1:
         42:4a:d5:92:09:f6:62:65:10:a4:a8:ec:49:2a:09:b4:93:f3:
         da:47:d7:e8:88:48:b6:8d:5d:6d:c5:89:2d:c7:3f:69:6c:dc:
         4b:aa:f3:b6:f2:87:3e:19:19:7c:b0:cd:c2:80:55:c5:47:e0:
         9e:0e:97:36:13:a4:a2:f6:7e:65:af:33:a6:33:44:19:df:82:
         55:f6:7e:af:20:90:00:88:d1:46:63:96:ef:65:b3:de:14:25:
         ca:ee:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:05:52 2026 by rpki-client