Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/be756b92-6acc-3494-9eeb-3de9866cb967.roa
File:                     be756b92-6acc-3494-9eeb-3de9866cb967.roa (raw, json)
Hash identifier:          1kJoHy2iU4sw8sDIHAZVpkKDSYTCsvF58md+mAMNTTY=
Subject key identifier:   6C:63:1C:18:CB:5B:5A:4D:A4:D5:A5:0F:B5:40:27:E0:1C:DF:53:AE
Certificate issuer:       /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f
Certificate serial:       010D0C9F4328584E86F4F7C793E977FA7310D110
Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/be756b92-6acc-3494-9eeb-3de9866cb967.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     212071
IP address blocks:        2602:faa1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f7:c7:93:e9:77:fa:73:10:d1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=b1a47119-dbc5-46db-b597-fca715854cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f6:54:77:49:74:24:dc:8c:64:75:36:1e:86:
                    a6:79:f0:d9:14:a9:d3:15:84:02:7f:eb:b1:2c:1d:
                    c9:ed:ab:13:c9:1e:fd:7f:d3:2b:c9:cf:9e:51:9d:
                    f7:83:09:f7:22:b5:ce:c5:4a:12:5d:bf:1b:e8:a8:
                    00:53:22:a3:28:d1:e9:77:39:b9:12:54:0c:d0:3a:
                    db:c4:fa:e1:a8:1f:07:f6:ac:08:58:d2:4f:59:9f:
                    80:ce:89:46:b5:a3:a8:d1:98:24:80:b9:de:33:f4:
                    f6:68:2d:e8:ea:ad:59:9b:16:88:63:74:3c:1e:7e:
                    2b:f4:5e:2c:25:95:e9:16:5d:2f:49:e8:25:d2:97:
                    0e:f1:24:55:12:da:fe:b4:04:3f:9a:8a:e4:73:c6:
                    a3:7e:bb:08:07:98:4f:c3:4f:09:d4:71:fd:f7:61:
                    32:04:23:f0:c8:8e:f0:d2:74:c2:47:bd:a8:60:5c:
                    3c:fa:f8:06:8a:82:15:44:20:4b:82:12:50:2f:a3:
                    9e:ae:b9:2b:40:20:0a:5f:b6:4a:1d:77:d7:aa:a7:
                    67:b1:b8:e7:18:58:af:c7:0d:32:19:1c:29:d2:28:
                    f0:4f:f3:7c:45:4b:55:3c:a1:73:e4:6c:b0:2e:f5:
                    7c:6c:ee:ac:ba:96:4d:ec:6c:e1:df:45:b1:73:f5:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:63:1C:18:CB:5B:5A:4D:A4:D5:A5:0F:B5:40:27:E0:1C:DF:53:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/be756b92-6acc-3494-9eeb-3de9866cb967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl

            X509v3 Authority Key Identifier:
                keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f2:bb:c8:88:31:b5:30:7b:3e:8a:74:b0:6f:81:c4:a0:b1:
         1c:ad:b0:d4:6c:07:c9:b2:c4:28:1a:59:29:08:1a:33:7e:1d:
         16:e6:07:87:82:39:68:a1:e9:08:6d:6d:92:6f:25:50:04:89:
         91:d7:9d:65:1a:cd:3e:a8:12:4a:23:69:9f:9e:00:5e:14:40:
         54:f4:f1:da:23:9a:e7:34:26:82:f0:c9:29:d4:31:b5:b2:47:
         36:cf:5b:27:36:94:ca:06:5e:d1:fc:27:a5:79:58:76:0b:b8:
         09:a8:fc:14:3a:54:36:78:fd:83:d2:36:22:ea:40:a0:c1:59:
         58:1b:39:ed:47:03:f3:5b:a4:f9:23:f0:8e:5c:dc:7a:42:b5:
         47:14:92:21:3d:38:90:3a:c4:9c:31:58:ef:10:e2:bb:57:31:
         9e:d0:bd:a2:51:03:f4:90:e9:a0:a7:18:19:f1:3f:71:f6:3a:
         2e:bf:10:36:9e:9c:42:ee:51:54:7f:1b:2d:23:44:1b:03:15:
         5b:62:e3:39:08:13:74:03:5c:77:36:0b:1f:0c:35:c8:d6:a1:
         60:1c:57:c7:23:35:a8:6b:8a:27:2b:20:e5:60:bd:a7:64:2a:
         c3:0c:f8:07:61:b6:4a:ef:a6:8e:83:64:35:ff:3e:f6:2f:bd:
         91:38:3d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:28 2026 by rpki-client