Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa
File:                     985c170d-dbb4-389f-8f2f-9ee25de080e6.roa (raw, json)
Hash identifier:          XWLgGRVntIh3YlRM0WplUvtSF2qsTjwonmcZrBxbG88=
Subject key identifier:   9A:0E:2A:C8:0B:CD:74:17:C0:6B:DA:37:DA:84:85:4A:83:44:3D:6B
Certificate issuer:       /CN=76b8b138-986a-4190-a7a3-3625b5f70769
Certificate serial:       010D0C9F4328584E5084AF75E37CA5CE6614E780
Authority key identifier: 39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     21981
IP address blocks:        2604:5c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:af:75:e3:7c:a5:ce:66:14:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b8b138-986a-4190-a7a3-3625b5f70769
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=5b4cab4a-ddd8-4b87-b70e-da8f3ce2499b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:d7:28:c5:79:17:52:53:9c:e3:4b:9a:4b:
                    de:13:72:28:f4:78:5b:32:b7:23:bb:44:4b:2f:eb:
                    7b:86:47:a0:ac:b5:7c:cd:ba:bf:28:b1:88:95:00:
                    f8:34:16:2b:d9:8e:d6:26:ee:74:45:be:3e:88:ab:
                    45:f0:bf:74:65:5b:68:93:70:7d:28:1b:00:f5:f5:
                    54:e6:b1:5b:64:d3:62:df:88:89:90:21:2a:45:f9:
                    64:41:13:e6:1a:77:b3:fc:87:14:8b:08:e7:e6:59:
                    22:6e:15:9e:bc:5f:73:6a:cc:58:e6:c6:f9:48:37:
                    0d:ef:41:6f:eb:c4:4a:08:2c:f0:94:c0:2b:7f:6d:
                    7f:b7:7a:98:6b:f4:d1:90:38:d6:ff:6c:fe:66:c9:
                    14:35:84:3a:7b:79:a0:55:e3:e7:e4:5e:e8:15:63:
                    f7:c8:0b:cd:37:41:78:2c:55:06:ff:34:df:f8:22:
                    b9:15:7b:9d:16:18:7f:b2:23:c0:db:b8:35:d0:6e:
                    c4:8e:28:26:da:61:e9:6f:c5:4d:62:09:11:22:82:
                    b9:25:0c:e7:6f:77:08:02:3e:06:ed:fa:23:1d:a4:
                    9c:0b:ac:91:2a:5c:dd:05:b0:29:48:2e:72:08:71:
                    04:cb:ad:34:8d:2e:34:14:27:8e:66:b7:39:13:a2:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0E:2A:C8:0B:CD:74:17:C0:6B:DA:37:DA:84:85:4A:83:44:3D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl

            X509v3 Authority Key Identifier:
                keyid:39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:14:fc:75:fb:32:7d:27:dc:18:95:df:cf:f4:1f:c1:92:45:
         d3:e4:d9:17:c3:5e:fe:2c:49:2b:c4:9d:07:9c:02:23:0c:21:
         19:b0:3f:54:9e:34:f7:db:e7:44:89:07:24:08:36:fc:2c:37:
         bd:48:38:5c:3a:73:0d:4d:b3:0c:41:a2:ec:6a:af:8c:d8:eb:
         f0:83:96:1a:a4:31:07:f6:66:93:c4:f1:da:f5:1c:57:3c:d3:
         8b:e1:54:d9:d5:4c:dd:0e:1e:cd:32:09:c9:75:11:56:d5:c7:
         29:37:db:13:b0:2e:33:c7:08:0f:78:14:00:4c:b9:ab:be:db:
         96:e2:3e:19:34:c7:21:90:c9:9b:e5:23:7b:33:a9:22:4a:f7:
         e0:c7:bc:a8:94:23:fb:64:06:8c:25:ee:18:9d:d7:50:2f:04:
         bd:9a:aa:e3:06:a2:fe:76:fd:e5:69:12:25:6b:32:da:14:4f:
         82:ae:31:42:d3:14:96:d1:78:8b:b9:70:36:16:6b:2d:ec:88:
         dd:c0:aa:3c:87:dc:61:32:5b:31:e3:4b:df:2b:e9:e4:db:d9:
         9f:c3:87:00:98:3a:70:2e:90:8a:bc:90:da:d2:18:1d:c8:46:
         89:bf:13:20:65:ef:81:2f:fc:90:39:8b:a6:21:5e:c4:c2:f8:
         38:e2:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:26 2026 by rpki-client