Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/18a2abe9-0941-3fe0-933e-c68e06b13e12.roa
File:                     18a2abe9-0941-3fe0-933e-c68e06b13e12.roa (raw, json)
Hash identifier:          nZ8llLBmYnnlxvY1KkbyYz7m62+iCANhWhRt+XWGe5o=
Subject key identifier:   1D:33:C8:C3:73:E3:23:14:77:E0:CA:A0:E7:3B:50:71:69:13:DB:78
Certificate issuer:       /CN=fb0c6bb6-abf6-474d-8547-2975efaf35e7
Certificate serial:       010D0C9F4328584E78FF87B6B3184F2C54396F40
Authority key identifier: 60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/18a2abe9-0941-3fe0-933e-c68e06b13e12.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        2604:12e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:87:b6:b3:18:4f:2c:54:39:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb0c6bb6-abf6-474d-8547-2975efaf35e7
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=6b41029c-8a82-4b50-bb78-0f3c3a57b7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:56:4b:2b:0b:62:7b:b9:b5:e4:58:70:e5:
                    cc:22:f3:2b:6d:a2:af:d4:67:a3:b5:e4:24:05:3d:
                    11:e6:b4:ad:99:b6:db:55:06:09:6b:f4:a4:ad:c5:
                    dd:ee:13:27:89:cb:df:96:7e:5a:9c:13:6c:7a:0c:
                    dc:af:76:ac:46:16:fa:f0:e5:ca:b6:23:ed:60:24:
                    49:31:ae:f1:39:93:01:3a:cb:e7:51:f7:bc:22:a7:
                    a7:e5:79:86:ae:24:64:e7:22:3e:15:c7:44:98:93:
                    e2:4a:45:c0:14:e1:90:ac:a5:1d:25:b2:cb:f4:ea:
                    f1:a8:c0:4b:75:b5:22:45:6e:cb:6c:b1:3b:23:4d:
                    75:fd:54:a3:9c:66:fc:39:73:b7:14:11:7e:4a:42:
                    a5:91:b0:9e:08:ee:5f:2f:01:76:64:de:f0:de:0f:
                    39:91:96:62:04:d6:8a:ce:53:09:5b:ff:83:84:a3:
                    cd:0d:94:7d:29:f7:c1:a2:05:ec:b5:9e:18:00:59:
                    26:4a:92:90:7b:e0:1b:f8:ea:89:72:d5:61:e9:8b:
                    68:2e:25:78:c5:32:c0:55:bf:87:88:9c:5a:0e:b8:
                    12:85:d9:15:5f:c3:68:bd:da:7b:62:87:2c:26:55:
                    39:13:78:cc:a9:0b:2c:de:7d:a2:52:34:bd:54:aa:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:33:C8:C3:73:E3:23:14:77:E0:CA:A0:E7:3B:50:71:69:13:DB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/18a2abe9-0941-3fe0-933e-c68e06b13e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.crl

            X509v3 Authority Key Identifier:
                keyid:60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:12e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:53:34:bc:a2:0a:ae:f3:16:47:4f:03:91:e9:40:29:97:
         0d:68:9a:a4:64:af:0d:e9:0c:5a:67:c3:c6:23:e6:a0:a6:96:
         99:ad:8c:cb:ee:59:2d:4c:15:cf:71:68:a7:65:99:f1:e0:93:
         68:d6:7c:c7:2c:10:dd:9e:f2:42:70:5d:b4:e2:86:4a:0e:71:
         37:5d:a8:8b:68:ef:74:1e:26:1b:7b:05:fc:b4:70:9b:da:eb:
         46:7f:e4:68:1a:93:45:ef:65:e4:4e:56:d4:a1:31:bf:11:f5:
         6a:3e:3f:d8:e3:cb:9d:7c:c9:29:3e:3a:23:24:6f:9d:0d:30:
         a2:33:5a:4c:27:e6:9d:7b:8e:19:bf:05:dd:43:d7:39:f4:67:
         1f:d6:80:99:48:28:aa:bb:9d:8d:58:38:38:44:2f:b0:70:37:
         6d:11:ce:ad:1e:8b:a4:8a:f5:1c:80:d5:da:67:5b:da:76:d1:
         99:1b:f9:1c:6e:46:76:74:49:db:ad:cd:2d:e6:10:5f:36:38:
         4a:49:fa:6f:c7:f0:d4:33:1e:37:e7:fc:ca:91:7d:01:f5:a1:
         65:cc:d6:cc:27:b0:7c:ff:d7:37:1a:da:64:df:cb:a0:09:5b:
         f3:fd:1c:97:1d:be:ee:d1:ca:02:ed:12:37:03:4d:92:86:01:
         20:b0:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:01:43 2026 by rpki-client