Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5847ee66-8b9a-354a-ad79-2150a0f1b7c4.roa
File:                     5847ee66-8b9a-354a-ad79-2150a0f1b7c4.roa (raw, json)
Hash identifier:          fGd4pWcPjJb7g1J9AXgC+6uRg6ytoiiv87IGEpJ0kt4=
Subject key identifier:   75:70:7D:20:47:76:A6:25:34:6E:7F:59:55:4C:D4:A2:8E:EC:9D:5E
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E94EA4BB6A761F707C2C9E540
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5847ee66-8b9a-354a-ad79-2150a0f1b7c4.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     63023
IP address blocks:        2604:86c0:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:4b:b6:a7:61:f7:07:c2:c9:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=69697f9c-106e-448d-8a9d-d3c3f98d2709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:26:94:7c:e7:06:59:f3:14:af:df:37:a7:11:
                    d0:ee:80:89:ce:44:ed:e7:66:8e:da:fd:19:e1:06:
                    fc:e7:4a:2e:a6:22:de:fe:a5:c0:39:37:d6:12:9b:
                    ec:47:b7:66:7c:be:d7:37:6c:53:0b:da:35:8f:ab:
                    8a:14:83:65:66:3b:16:30:34:d3:80:92:4d:67:dc:
                    10:3a:97:06:f1:07:05:5a:b6:8c:85:8c:5f:b7:ce:
                    0a:46:b6:2d:cb:ea:d0:ca:e3:1d:7b:f4:24:cc:67:
                    a4:06:72:dd:78:68:7c:ef:53:10:75:25:27:09:3e:
                    50:c9:0f:ea:44:6d:3f:c7:c4:2c:6f:40:9a:8b:91:
                    43:ce:06:04:61:b2:fe:f9:ac:0b:5f:a6:6b:f4:18:
                    d9:aa:c2:aa:f3:10:61:e0:4c:e9:f8:09:31:8d:91:
                    a9:d0:74:f0:0f:df:77:27:e9:93:3b:2a:d1:34:17:
                    49:53:c6:7f:82:6b:6d:2a:7d:d2:4b:d1:c0:2f:dc:
                    0a:1b:c1:90:54:08:27:20:dc:43:a5:cd:90:7c:4f:
                    b2:56:0e:a5:58:13:eb:ac:ba:b1:dd:f7:a1:c5:7e:
                    c3:64:7e:78:a5:b8:63:23:06:3f:c1:38:dd:9c:0a:
                    90:8c:7d:9f:9e:df:1e:94:7c:d1:71:c2:a5:eb:bf:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:70:7D:20:47:76:A6:25:34:6E:7F:59:55:4C:D4:A2:8E:EC:9D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5847ee66-8b9a-354a-ad79-2150a0f1b7c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b1:ff:78:ff:e8:39:a3:fc:28:68:81:83:4f:a6:8c:8d:bc:
         4d:2d:e5:5a:aa:72:e8:e9:b4:60:ee:f8:87:9c:d5:57:9b:59:
         65:3f:a9:30:c8:16:9b:98:7c:76:6b:96:8b:1d:27:2e:4c:68:
         07:dc:52:cf:7f:f5:ef:74:39:a4:0e:8a:c7:a1:d0:ee:9c:b5:
         a0:b2:66:01:a2:82:1b:f5:da:30:ff:0e:fd:7c:8e:33:7b:81:
         4c:f8:f9:60:90:33:0a:8b:1e:9e:8b:ef:2a:ca:dd:44:b0:95:
         dd:54:2f:cc:72:05:1f:c5:12:8e:ab:09:9c:e8:2a:38:36:ac:
         f4:28:52:f9:fd:c1:d3:a1:f9:63:b9:18:3f:14:56:a1:f2:cc:
         ec:30:ab:f3:ea:14:98:3b:c9:fb:ea:26:de:64:1f:89:9a:f1:
         84:a7:92:0a:9f:b0:1f:3f:34:da:13:7e:66:cf:f8:9e:df:56:
         8b:68:e8:23:6f:65:25:65:53:cd:3d:ac:0f:8c:c5:79:a2:84:
         c5:1d:d7:64:d7:8e:51:bd:47:34:f8:ae:72:b4:23:2f:b5:45:
         02:ca:4c:a7:3f:fa:ae:ed:ae:ee:36:be:21:b4:17:75:11:10:
         8f:93:b4:e4:28:12:7d:d3:e6:6a:cd:bc:46:a6:b7:02:67:66:
         fc:55:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:13 2026 by rpki-client