Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/248a2e95-2e14-37da-95b2-fd2655abd5d8.roa
File:                     248a2e95-2e14-37da-95b2-fd2655abd5d8.roa (raw, json)
Hash identifier:          8lG7AhXqPx0UIdhrucWfBkYXbBenx9tJeT6ARk0zEfg=
Subject key identifier:   89:94:E9:62:C1:40:2D:C6:08:A7:81:80:75:EA:E4:5D:2A:96:E7:AE
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F4328584F86DDA67B3F509BAC9C9A4D80
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/248a2e95-2e14-37da-95b2-fd2655abd5d8.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     7859
IP address blocks:        2607:f440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:a6:7b:3f:50:9b:ac:9c:9a:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=82b4c797-fc22-496f-8629-f4c8622b6e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:83:b6:df:16:27:8f:32:c5:70:b0:68:af:d0:
                    96:a8:f7:0a:84:4a:0f:2a:be:cc:c2:e0:e3:11:18:
                    ad:7d:26:46:4c:ae:6a:52:e7:4f:f0:1a:23:d8:b9:
                    2d:87:21:d2:1c:42:7d:42:71:d2:1c:99:f2:18:34:
                    88:cf:42:4e:26:e5:b8:fa:00:b1:4d:75:17:39:0d:
                    08:a6:e3:04:0c:f4:a5:b0:f7:7e:a3:05:d9:f9:47:
                    28:4b:92:e5:23:07:82:10:c0:36:67:6c:f6:b2:f7:
                    9c:f2:14:76:48:37:cc:92:7c:00:21:d8:f5:a6:d5:
                    56:86:e0:2c:c3:d8:8f:c2:bc:d9:25:66:da:56:18:
                    b3:ff:5b:cb:76:02:f0:ed:a1:77:4c:bc:ef:eb:66:
                    eb:d0:b4:d4:c0:1e:6d:d2:c4:83:35:06:ba:0b:f3:
                    86:81:2d:55:8b:11:0a:c6:47:b7:94:f7:86:b3:7f:
                    f8:69:b0:0b:dc:6f:b4:79:56:db:44:d1:ca:a1:d6:
                    75:1d:07:33:3e:0b:da:75:3a:c1:e3:f3:84:f3:4a:
                    fb:f5:c7:04:c2:0c:7e:9d:61:5d:d0:c3:c7:e1:df:
                    60:7b:24:4f:0c:e7:bf:7f:90:ff:d3:dd:d3:0c:c2:
                    db:7e:9a:0c:ee:d3:33:c3:17:c8:3f:d4:2a:54:ff:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:94:E9:62:C1:40:2D:C6:08:A7:81:80:75:EA:E4:5D:2A:96:E7:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/248a2e95-2e14-37da-95b2-fd2655abd5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9f:e7:81:27:93:c3:8a:82:ba:71:d3:13:9e:c1:13:c6:09:
         f3:57:fe:33:01:89:ae:dc:97:21:bc:b4:64:b4:8c:4e:1b:da:
         34:c2:1b:cf:d8:a6:5f:b1:25:b7:79:04:83:67:bc:81:76:04:
         19:28:c7:87:1b:91:55:8f:7f:eb:3f:c8:84:63:a5:cb:85:50:
         72:53:1c:36:be:8b:68:88:d2:86:4e:94:63:03:52:2e:b9:44:
         12:82:8a:a3:83:59:65:24:8f:d6:51:aa:4f:10:04:e1:14:8d:
         e1:32:1a:0b:93:6f:07:7e:af:b1:37:b0:4e:55:2a:20:38:5c:
         c8:0a:14:f6:88:5b:4e:ce:44:5a:a4:e0:d1:5b:56:61:a0:87:
         fe:6b:01:b7:9b:79:e1:97:fc:e1:1b:9a:9c:8b:a4:0d:fa:ab:
         9d:57:c2:df:6c:39:18:25:f2:05:45:93:97:8e:cf:bf:3d:bf:
         5e:b8:d0:8b:27:d1:9d:e9:47:40:fd:09:8e:a4:f4:14:35:93:
         7b:96:93:b8:c7:3f:a7:85:dc:92:73:e0:96:cc:d9:bc:ec:22:
         4b:2d:d7:98:d8:03:91:af:58:13:25:28:5d:4b:8e:27:3d:1a:
         4f:40:41:2e:69:fd:61:7e:0e:4d:25:ae:eb:f2:b2:5a:3f:03:
         7e:29:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:19 2026 by rpki-client