Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa
File:                     8adc4655-3460-3e0a-8189-0755d0475618.roa (raw, json)
Hash identifier:          PYjxHX+yFmJ+svpVLiuSCdVGQU6HD3toLrp9fxgwSzM=
Subject key identifier:   5B:EB:FF:39:39:D5:54:FA:19:D6:DC:50:A2:B5:80:AA:AB:0D:0F:FF
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F4328584E7204CFBC116AA7F3DE0C8E04
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     12213
IP address blocks:        2600:cc00::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:cf:bc:11:6a:a7:f3:de:0c:8e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=db6bf1cd-1eb1-4e27-a1f5-8d2b4b084bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:5f:cc:0c:3c:f7:ad:34:5c:d3:d8:87:07:
                    a8:35:6d:62:32:24:10:07:dd:a5:fb:2a:14:10:96:
                    2a:59:be:8d:6d:f6:0a:db:c4:0b:97:82:50:65:72:
                    3a:cf:c7:e3:d7:b9:4b:08:ac:3d:dd:88:64:ff:7d:
                    32:3f:28:39:99:ae:91:cf:cc:8e:f6:3a:b5:88:cc:
                    33:06:26:f6:54:21:95:ed:d8:68:dd:48:60:8d:aa:
                    d8:dc:6d:c7:1e:0a:f8:85:f4:8c:bf:2b:2c:4b:4a:
                    46:af:4d:e1:34:ed:ed:9c:73:a7:11:dc:5f:d9:82:
                    1d:72:f0:9a:1e:37:6e:e9:6e:ea:ac:45:27:59:a5:
                    fd:74:9a:39:c9:76:cd:e0:af:56:2a:11:a8:a1:5d:
                    64:b1:ed:85:93:f0:96:fd:ce:b1:3d:05:5a:69:a8:
                    e4:2a:97:d4:10:13:69:62:93:4e:a1:36:b5:3a:4c:
                    4b:b8:17:14:11:60:f0:43:fd:93:d2:fa:e1:3c:97:
                    9f:45:f1:36:ba:6b:ea:51:07:2d:f5:ea:d8:a9:26:
                    8f:f7:ca:d8:a4:b1:aa:27:a9:0c:a7:a7:06:d0:fe:
                    4a:66:de:ea:5a:03:49:1b:76:fd:b8:db:a8:6a:4c:
                    00:af:48:93:01:59:9d:07:75:d6:f8:f8:ff:89:de:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EB:FF:39:39:D5:54:FA:19:D6:DC:50:A2:B5:80:AA:AB:0D:0F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:cc00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:69:91:f5:34:43:0f:99:dd:9c:5a:de:1f:ae:8b:8f:4f:49:
         45:29:31:03:89:7f:53:4b:cf:e8:cb:2f:eb:c8:78:0c:59:be:
         78:29:6d:73:9d:63:ab:11:8e:75:4d:75:e1:2f:02:40:1a:3c:
         ee:c1:db:d9:e0:91:9b:b4:72:a8:b6:bc:04:95:e5:18:67:41:
         f1:00:92:22:e1:93:9b:b6:79:b6:f6:3c:8c:5d:bb:5d:9e:b9:
         d5:04:dd:da:dc:57:e2:db:61:b0:00:d4:bf:6f:ea:b6:80:e3:
         d5:b8:56:ea:70:9d:42:b6:df:52:54:16:b4:83:2b:8e:ff:a5:
         88:5c:da:eb:66:47:93:59:13:35:54:0f:71:4c:3d:14:79:87:
         01:60:21:09:94:5a:4e:d2:f5:60:4c:04:87:2d:c3:2c:d2:1f:
         e7:d8:2e:40:e4:08:da:fb:8e:7f:1e:ae:d0:0f:cb:dc:bd:35:
         83:9c:e2:bb:80:c7:06:80:c3:0a:af:1f:9f:1d:07:83:1b:c5:
         8f:c9:66:db:40:6c:96:20:72:06:56:25:81:e7:18:82:e3:85:
         f1:a1:16:fb:bc:01:db:16:c1:b7:c0:78:37:f3:c5:2d:6e:4e:
         d6:b8:b5:f2:91:8c:8f:fa:b5:91:f0:12:da:f2:90:42:91:2e:
         0b:3e:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:02 2026 by rpki-client