Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/4f9de4ab-dc51-3248-959c-22abaf144d60.roa
File:                     4f9de4ab-dc51-3248-959c-22abaf144d60.roa (raw, json)
Hash identifier:          bsI8Tm8vULXlLgTjdRZ9pwuGvV5wKA1qTn8PtVM1h5c=
Subject key identifier:   1B:7B:BC:47:83:80:7C:7C:00:A3:8F:3F:54:85:43:96:E5:68:3B:D7
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584E6144A285601370E1E32649A0
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/4f9de4ab-dc51-3248-959c-22abaf144d60.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     11776
IP address blocks:        2606:f407::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:a2:85:60:13:70:e1:e3:26:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=83556c46-9b19-4784-90fb-07a173e34328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:cd:3f:7e:9c:db:69:3f:0e:23:da:86:12:
                    ba:2a:a9:98:2f:d1:74:6a:83:a1:01:47:d2:65:13:
                    81:b9:15:f2:da:56:eb:46:5e:d1:8e:80:72:a8:3a:
                    1c:fe:67:23:4d:97:6b:a2:cc:a2:9c:9a:bc:a4:02:
                    1b:2b:84:35:64:0f:1b:f1:f3:00:09:f9:2e:18:9c:
                    db:49:96:2a:0a:5b:6f:e0:e2:a2:c0:02:be:35:f1:
                    07:45:a5:2a:11:1c:57:c3:f9:31:a0:99:2f:a8:25:
                    0f:16:7b:fc:94:56:e7:71:98:30:e1:1d:bc:00:49:
                    80:e4:a5:20:6c:97:3c:67:e2:70:1b:08:4d:af:92:
                    6a:30:18:fb:40:fb:8d:26:49:15:b4:37:ba:55:ba:
                    83:0e:fa:ba:39:cf:a5:75:19:a6:da:dd:f9:19:10:
                    23:85:09:11:93:64:a6:1c:01:5c:42:16:4d:fb:aa:
                    c4:15:f1:79:9c:7a:f4:d6:8e:78:8e:0e:6a:4b:13:
                    68:5a:a3:1a:10:09:46:34:7f:c1:e7:cd:d4:66:bf:
                    1a:de:59:bf:49:ef:d1:7b:67:78:1c:ed:96:72:94:
                    5f:e2:d8:df:55:b2:cd:73:ff:01:e4:2f:6d:6e:71:
                    33:12:c0:d3:5f:f6:67:0f:9d:c1:64:f5:ff:1a:1e:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7B:BC:47:83:80:7C:7C:00:A3:8F:3F:54:85:43:96:E5:68:3B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/4f9de4ab-dc51-3248-959c-22abaf144d60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f407::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:da:6a:a7:b6:f1:d1:3b:49:ce:2e:c5:ed:b0:11:7b:ab:
         7e:f8:00:39:89:f0:96:0f:93:0b:af:c7:89:e0:ef:94:5b:84:
         a7:a9:89:a3:d7:80:86:8e:f7:ba:36:f8:43:f2:fb:1e:41:26:
         4e:06:29:50:77:fc:c0:a1:24:8d:ec:8d:6b:42:e0:5b:21:3d:
         cb:34:86:97:9e:a8:bb:b7:70:34:c6:cf:99:e0:13:e0:cc:93:
         65:ad:f9:32:19:57:c7:cf:4b:2e:0d:c8:66:75:34:65:f5:ad:
         2c:c4:7b:7a:32:7d:94:8a:35:f1:e2:58:d0:ff:3a:1c:e1:57:
         d4:ff:76:90:4f:fc:11:34:1f:60:4d:fe:b3:24:c6:61:58:17:
         b5:ac:dd:0e:cd:a4:ed:bb:bf:11:09:30:07:06:3f:8f:a7:a3:
         ab:c8:2e:a8:2c:25:a3:3d:7a:05:9e:ea:e6:7c:fe:81:0c:28:
         3a:e4:02:49:9b:7f:27:15:54:da:d2:b1:e7:6c:94:8c:a0:8c:
         45:8e:0a:c5:e4:0f:f4:f4:f6:ef:36:e8:c0:e3:e7:c6:f5:04:
         54:d1:5c:da:9f:68:f0:e5:90:ec:4f:91:01:b5:8e:bc:fa:63:
         11:f0:61:58:98:e7:46:7b:80:c7:5a:be:5f:30:9f:d5:61:31:
         bf:46:da:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:04:18 2026 by rpki-client