Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/92c2d829-aae6-35bd-9781-4ca9315bb3a4.roa
File:                     92c2d829-aae6-35bd-9781-4ca9315bb3a4.roa (raw, json)
Hash identifier:          avnFxzAee8dOQtFHwvt1dNLe8YbsLqGoqKJkjoFgYqQ=
Subject key identifier:   D4:41:55:83:14:2C:27:33:67:80:D0:3C:8B:8B:09:9A:56:28:A4:D9
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E94EA4C13E9A8C9C05FB0CD80
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/92c2d829-aae6-35bd-9781-4ca9315bb3a4.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     63023
IP address blocks:        2604:86c0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:4c:13:e9:a8:c9:c0:5f:b0:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=cbdd4c53-b4c0-405a-87f1-ad48d47a7f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:9b:43:5c:34:f9:cb:7d:bc:6c:4d:59:e4:
                    d3:69:9a:28:09:d9:ca:22:ca:93:f6:2e:c0:b2:36:
                    1b:cf:7a:3c:f9:c9:15:00:c1:c1:44:90:5e:6f:8a:
                    1a:f4:b2:1a:f7:c2:f9:13:79:ed:4b:b0:e4:07:97:
                    b2:1a:e2:8a:11:9d:9f:ce:ed:f1:4c:15:96:5d:e0:
                    00:2a:ba:f7:6f:b1:60:18:9f:a7:28:e3:90:c3:72:
                    2c:7e:27:0e:54:cd:68:42:82:42:d7:69:cb:92:7c:
                    55:88:66:54:10:fa:00:6d:e1:8b:dd:d9:c4:70:eb:
                    72:9c:65:18:59:d8:e2:a3:17:b5:9c:ac:c6:57:ca:
                    6d:76:fd:0c:15:5f:3c:a6:76:8b:4d:7e:a3:82:1a:
                    33:bb:d8:f2:8e:ce:3d:57:9c:12:3c:0e:a8:a3:a8:
                    5b:85:f0:74:b7:5f:fd:6a:ef:02:56:41:34:d8:18:
                    a6:ff:87:b0:05:8e:98:a9:62:52:86:ab:2d:98:93:
                    07:83:d2:b7:f6:e8:bc:30:36:d7:96:43:83:aa:4c:
                    74:81:e4:13:f7:70:1a:58:b5:6f:c5:e7:6c:b9:34:
                    56:0a:b8:ad:0e:1a:1a:7f:52:6d:32:f2:c0:1a:9c:
                    9a:10:0a:1b:16:ea:5a:7b:b5:be:8a:37:1a:9b:74:
                    11:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:55:83:14:2C:27:33:67:80:D0:3C:8B:8B:09:9A:56:28:A4:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/92c2d829-aae6-35bd-9781-4ca9315bb3a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e7:c1:eb:79:70:f0:71:7c:c3:78:55:97:34:d1:15:c0:8f:
         5b:21:c6:8b:9e:9b:25:5d:3b:32:b5:13:17:74:3d:38:d2:50:
         a8:91:a1:0f:2b:64:d2:3d:99:6c:42:d4:ce:e3:8f:55:70:9d:
         3c:e8:ad:c7:66:a9:ff:77:95:b7:44:b4:63:3f:40:91:c1:d9:
         18:97:c8:7c:c9:0a:40:3a:74:df:45:21:c5:c8:1b:66:8a:e1:
         a1:a1:d3:ce:9b:a4:73:fa:54:cd:03:24:1f:9a:4c:8e:1b:fc:
         cc:80:05:f3:bd:46:8d:de:93:f6:86:64:3c:29:52:c3:f5:76:
         06:90:5c:97:0e:b9:ad:7f:92:e8:bd:16:4f:c2:e0:cc:97:c8:
         6d:ff:b8:ca:1f:81:25:30:bc:9e:7a:dc:fa:2a:d0:c0:f0:07:
         53:6a:6b:23:9f:73:c1:44:74:7d:73:72:6f:9f:05:49:a1:3a:
         55:14:62:f5:64:1d:df:09:dc:58:f6:82:08:86:cd:5a:e0:a1:
         bf:71:86:c0:ae:56:6c:f5:ae:eb:29:9f:c6:fb:f6:31:9e:92:
         0d:47:0e:da:3f:19:86:21:34:0d:f7:f9:35:6f:90:2a:ae:83:
         5e:85:d4:95:ef:44:b5:a9:9b:87:19:1a:d2:5c:6d:65:5d:b5:
         cf:5d:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:26 2026 by rpki-client