Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa
File:                     b3b3910d-a610-3b46-a9cb-c5249e265700.roa (raw, json)
Hash identifier:          Xdpghhjax4L7kU9weNWeBYEgmvT0ijWio0DPmLTgH90=
Subject key identifier:   D5:B8:06:DB:60:5A:02:E8:24:AE:2E:F8:93:CD:42:89:3B:ED:F5:E0
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584E8DEFB22CBD9D28A4636EB3A0
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     21947
IP address blocks:        2607:f8e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:b2:2c:bd:9d:28:a4:63:6e:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=8e905f59-e8dd-49a8-bd1f-a4d67a6761f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d0:cd:65:ac:01:a3:23:9b:c6:b2:63:30:31:
                    d1:5a:06:99:0d:f7:7c:5a:b7:33:16:64:92:1a:b8:
                    6f:5b:c2:49:b9:1f:cd:09:20:2d:dd:8e:17:9a:0b:
                    6e:47:c7:13:a9:68:45:b2:34:0a:69:95:44:c0:06:
                    57:30:19:99:03:09:32:26:0e:a0:04:96:2e:ab:a2:
                    16:37:03:c7:da:46:d3:63:87:dc:2d:8e:de:9d:29:
                    4d:d1:1c:40:35:b1:57:60:c9:2f:f7:4e:d3:ed:92:
                    c7:20:00:97:8e:3d:68:35:c7:8d:24:08:f4:f2:05:
                    42:6a:e1:ef:12:8a:28:2f:be:4c:4d:c2:04:17:02:
                    35:75:1a:09:2e:f4:58:4e:f0:dd:b7:d2:46:5a:68:
                    80:d7:59:76:d9:ac:5b:4c:d8:c4:9f:51:82:a5:bd:
                    94:e3:aa:45:db:ef:28:8c:ce:1a:65:bf:4e:2d:6f:
                    45:e7:ee:bc:3d:0a:f6:d3:40:3c:59:a2:3c:a5:c3:
                    e4:75:16:64:ca:25:94:66:f0:2e:3b:af:bd:79:27:
                    2a:3d:da:65:b2:ee:91:e6:15:f6:1a:7f:c9:9c:36:
                    39:1f:40:05:bf:62:15:02:29:cb:de:d2:c2:4e:00:
                    f7:f9:38:ed:9d:76:e0:ea:85:79:ae:51:ce:40:56:
                    16:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:06:DB:60:5A:02:E8:24:AE:2E:F8:93:CD:42:89:3B:ED:F5:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:82:95:9b:db:ec:16:17:24:58:ea:45:4d:0a:68:9d:37:35:
         44:ba:d5:e6:37:9b:57:4a:a9:87:8d:c0:40:1a:db:9e:cd:24:
         ca:61:90:2a:9a:bc:dc:45:d7:e1:d3:c8:97:3b:55:f4:fb:bc:
         aa:63:f4:cd:72:ab:02:4b:33:a5:2d:b8:e4:93:5b:e6:e0:b8:
         16:bb:d7:8a:69:2d:85:69:87:48:2c:15:01:16:12:6b:ed:4d:
         bf:70:60:2b:52:9d:2d:cd:f9:3f:dd:a1:b8:11:81:a5:5b:dd:
         87:96:89:4b:20:29:31:66:ee:e7:15:3a:5c:b0:07:85:c8:10:
         fe:cf:a4:0c:95:f5:aa:ff:f7:33:95:4b:f9:d7:6a:c3:d0:c1:
         6f:63:66:d5:4d:7d:8d:6d:ff:e6:24:f8:71:40:40:dc:15:c5:
         96:04:96:ed:eb:0d:b9:35:0c:9f:95:8b:a4:9c:6b:db:e0:b7:
         eb:56:3b:d5:71:f3:91:bc:04:06:87:b0:f8:bd:02:c7:50:82:
         d5:c7:89:26:1a:78:14:bb:32:ce:6e:43:7a:3b:45:86:c4:49:
         49:4d:49:4b:1f:80:28:49:6e:c6:43:c7:0a:06:af:f2:4f:2f:
         ee:4d:5f:6e:1c:58:ea:3d:d3:32:71:e2:cc:29:c3:65:cb:9c:
         a2:4d:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:21 2026 by rpki-client