Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/dbfd7d45-34ef-35c6-a872-31a8434a60f7.roa
File:                     dbfd7d45-34ef-35c6-a872-31a8434a60f7.roa (raw, json)
Hash identifier:          xj5aGrREwrV+bOcwCg9tPEhwHsrQruhtxFcliwuQdtU=
Subject key identifier:   D3:BB:41:B1:9E:77:9B:B1:75:04:8A:44:7A:34:8E:14:A2:4A:CE:F1
Certificate issuer:       /CN=70a36240-104b-454c-b230-bf415e356e88
Certificate serial:       010D0C9F4328584E640F6BFD29791342575EAA80
Authority key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/dbfd7d45-34ef-35c6-a872-31a8434a60f7.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     215343
IP address blocks:        2602:f7bc:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:6b:fd:29:79:13:42:57:5e:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a36240-104b-454c-b230-bf415e356e88
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=833080f7-2938-42f3-a189-7185f8ad0b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:57:f6:37:2f:4b:ec:92:49:1d:e9:4b:02:
                    42:81:fc:04:41:6c:f6:dd:23:87:e0:38:92:4d:a2:
                    8c:76:81:83:e6:0a:e4:2e:3c:ca:6b:b2:ae:cd:b3:
                    a1:54:04:9b:f0:c4:ef:b1:e9:a4:70:f8:55:4d:e1:
                    b9:2d:31:29:14:fd:ec:49:22:8d:a2:56:d8:44:96:
                    78:d0:18:bf:4f:a4:90:40:7d:9c:93:80:f6:9e:0e:
                    87:1a:88:2d:7c:7d:11:d3:53:15:25:16:9a:90:84:
                    17:d7:cf:1a:8d:b1:10:6f:0f:6e:fc:ae:f0:cf:91:
                    40:ef:c4:75:02:71:9d:53:59:3b:60:60:2d:48:6f:
                    3e:4c:ba:23:01:67:3d:02:34:37:3c:bf:e8:f7:d3:
                    7f:21:a8:b9:70:04:ce:82:61:33:4c:fb:09:cd:0f:
                    ee:71:31:fd:f4:56:f4:71:88:98:5f:e8:a3:2a:12:
                    90:af:77:31:c0:ae:6d:01:bb:32:88:83:e3:c3:02:
                    ff:93:70:79:4d:49:4a:97:ee:2a:45:03:55:21:f3:
                    79:bd:9e:d2:bf:6b:38:83:79:22:cf:80:86:9c:0e:
                    42:2a:48:a2:3a:c0:00:c0:fa:1f:4c:d9:7d:01:c7:
                    75:44:bb:81:69:3f:ec:5b:87:58:66:ad:59:68:e0:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BB:41:B1:9E:77:9B:B1:75:04:8A:44:7A:34:8E:14:A2:4A:CE:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/dbfd7d45-34ef-35c6-a872-31a8434a60f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl

            X509v3 Authority Key Identifier:
                keyid:60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7bc:69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:dd:84:25:2c:1d:bf:5f:9e:4e:ba:25:a7:a9:da:3e:dc:22:
         c1:7c:48:a5:2e:a9:bc:56:d0:75:f8:19:be:82:ae:fc:48:ca:
         3c:aa:0b:a9:a1:b8:91:82:7e:7d:e0:f4:26:d4:b3:77:49:81:
         ee:f6:f3:fc:13:31:70:40:c5:fd:85:e4:a0:fa:ae:7a:33:d9:
         76:d4:e2:d1:50:c7:2b:e9:a4:3b:fb:4f:4c:4c:7c:fc:2d:1e:
         0f:27:d7:b8:8e:40:d8:e6:1c:2a:2c:a4:37:bd:18:13:66:3c:
         ef:9d:a4:84:80:83:b8:51:ce:b2:49:93:23:93:c3:65:f7:0a:
         52:ed:96:b0:8d:23:d6:d7:0c:19:ec:dc:95:7b:52:69:dc:98:
         82:02:6b:5d:b6:ca:af:73:4a:c1:e2:2b:d2:6f:39:7b:49:d3:
         0b:1a:25:8d:ba:5b:2d:d2:4d:a7:be:64:76:f5:0d:3a:8c:a3:
         76:b0:01:8e:bf:2f:e0:ad:7b:ea:0a:da:73:51:0d:b4:aa:12:
         f7:cf:89:db:60:47:0d:5a:39:ff:ad:f7:2c:a8:97:c3:19:2d:
         88:d3:9c:31:47:cb:8d:da:15:50:fe:76:72:b3:b2:58:67:c9:
         18:1d:ec:2c:a9:bb:06:a1:c2:2d:3c:92:7f:f5:b2:e9:a0:95:
         82:f1:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:35 2026 by rpki-client