Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa
File:                     8adc4655-3460-3e0a-8189-0755d0475618.roa (raw, json)
Hash identifier:          I8tvUVOKEZ/XCfSS4Kt8qcvBKSTO/kNZyYuloybbg4w=
Subject key identifier:   FC:53:6A:3B:7C:7D:AA:EA:52:00:87:47:09:70:39:46:5B:91:37:BF
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F4328584D91C00DEC9C142FD0FFA78300
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     12213
IP address blocks:        2600:cc00::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0d:ec:9c:14:2f:d0:ff:a7:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=43c9dc01-1d8f-4453-b103-a89583552cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8c:c0:f0:96:64:bc:92:8a:c7:f8:ac:d0:f3:
                    98:3a:eb:56:89:b6:3d:2c:78:33:fa:e3:48:aa:cb:
                    1d:e4:32:f0:3d:78:21:91:67:bc:1c:1c:c5:fa:30:
                    9a:00:21:99:f1:fc:d1:a9:aa:a6:5d:9e:d3:d2:3c:
                    ad:02:b1:ba:61:85:c8:3e:4e:20:96:5a:d2:8b:fa:
                    6c:c5:0e:26:15:b8:a0:78:77:74:3d:36:e0:7e:80:
                    60:82:8d:53:c2:cb:e8:60:35:b3:af:9b:7f:a2:00:
                    51:7b:1e:01:99:28:f3:b6:c3:c3:0d:16:83:ba:f3:
                    2b:71:c9:26:61:9a:dd:c6:27:74:01:c6:22:2a:ab:
                    8c:e7:e2:cb:d2:61:74:89:e3:a2:0f:92:c4:1e:dd:
                    8d:79:be:60:bf:ed:f3:cb:40:ed:96:d0:d6:4c:5e:
                    22:af:d2:c2:01:42:63:7c:5a:0f:56:f3:58:fb:9d:
                    be:93:4d:9b:8a:61:b8:d8:7f:7b:14:f4:9b:c1:ca:
                    16:77:b5:a9:ce:db:fc:21:2a:e6:8b:20:b1:73:78:
                    40:a4:26:5c:73:ca:dd:e3:9a:30:fb:59:69:0e:72:
                    21:49:33:87:ee:ad:ff:27:7b:b1:76:c5:02:01:47:
                    cb:6a:62:ba:ef:01:f7:c5:c6:65:cd:fc:e9:57:d0:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:53:6A:3B:7C:7D:AA:EA:52:00:87:47:09:70:39:46:5B:91:37:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/8adc4655-3460-3e0a-8189-0755d0475618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:cc00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e1:c2:bd:6e:43:c9:43:63:e5:3f:9a:41:58:20:b8:51:e0:
         81:4b:0e:4c:7a:b4:78:d7:be:af:06:39:aa:7c:b9:f1:a9:01:
         a2:2e:07:e8:76:94:51:59:c5:2c:7b:ac:47:ab:9d:94:3f:63:
         e7:a4:14:8b:da:28:c5:d9:a6:11:db:d8:7e:4c:fc:e2:0f:22:
         9c:b0:17:59:55:ca:45:4b:61:46:dd:f4:e4:0c:29:de:24:01:
         35:66:a8:9e:22:0a:4c:2a:48:15:52:79:a9:eb:55:cb:57:ce:
         28:b5:58:49:a8:1d:2f:a2:e9:f7:e9:10:99:fe:75:89:39:3e:
         df:3c:83:ef:76:a7:90:25:41:87:03:cb:7d:d8:02:6c:82:aa:
         7c:5c:ab:ec:7e:7f:aa:67:15:ca:1a:7c:1a:05:69:27:87:0e:
         8a:77:43:44:c9:69:75:d6:4a:3a:ce:08:d7:fc:f4:c9:7f:e9:
         05:a7:50:20:c3:bc:4c:76:b9:dd:91:d2:5a:10:ff:78:f3:90:
         16:09:eb:fe:83:33:65:d3:0c:19:3e:49:8d:bb:e7:59:f4:97:
         f4:2f:39:c7:e6:b6:52:3d:93:e4:1a:ea:39:41:61:3e:85:95:
         3d:08:46:c3:87:1d:f8:7e:8f:b3:b3:b6:31:84:ed:90:d6:e5:
         d2:0d:5e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:11:54 2026 by rpki-client