Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/dbc561d9-034b-30a7-9ba6-10729ea6ad3c.roa
File:                     dbc561d9-034b-30a7-9ba6-10729ea6ad3c.roa (raw, json)
Hash identifier:          u02+lgWIemozzgzKVma2rs7FZIMGV8CKUUm2XnYRtiI=
Subject key identifier:   6D:2F:A3:62:20:A9:D6:36:3E:D5:B7:60:65:DE:5D:E1:71:BE:0C:FB
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F4328584E94EA86267802497D408C5920
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/dbc561d9-034b-30a7-9ba6-10729ea6ad3c.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     402106
IP address blocks:        2620:6e:a0a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:86:26:78:02:49:7d:40:8c:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=57d68f9c-8e14-424c-a777-a1899953f75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:6c:b6:d3:7b:57:39:18:14:4b:ca:c0:9c:
                    39:48:97:58:75:e5:6c:fe:07:d6:6e:f8:7f:3b:5c:
                    ab:d6:ce:49:c3:6d:dd:e4:67:37:80:38:f9:3c:ca:
                    8c:60:2d:a6:d0:ba:a5:60:a0:21:30:31:e8:af:01:
                    b4:6c:5c:57:76:0b:ab:c5:db:2c:72:5e:4e:60:bc:
                    d3:d1:38:5c:dd:36:fd:1c:9e:22:78:96:8c:b5:10:
                    30:91:06:d7:58:b2:20:e8:38:a1:fd:7a:cc:28:4f:
                    78:5f:91:81:71:e0:4b:41:63:0e:5f:52:a8:4a:f7:
                    f1:76:93:e1:24:9a:66:90:ad:db:5e:bf:43:5b:62:
                    71:a7:40:75:2c:f4:b5:a8:63:dc:bb:47:51:fb:43:
                    14:52:78:a0:59:64:92:66:80:e0:45:38:0d:ac:a0:
                    7d:fa:82:7d:28:d5:0c:0a:d2:81:2b:e7:e0:9c:5f:
                    37:35:9d:76:ce:87:f1:3b:68:5a:a5:f9:9a:a6:d2:
                    b4:bf:d6:ab:00:1d:05:7e:c0:e7:87:d3:80:bb:79:
                    42:bd:c9:35:b3:47:cd:e5:03:a1:85:66:fa:6d:ae:
                    3c:0d:9c:d6:f8:6a:79:c9:4a:51:a4:69:1b:e1:cf:
                    9e:87:81:ce:f5:38:79:cd:21:e4:f4:7e:28:a9:a5:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2F:A3:62:20:A9:D6:36:3E:D5:B7:60:65:DE:5D:E1:71:BE:0C:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/dbc561d9-034b-30a7-9ba6-10729ea6ad3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6e:a0a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:55:e9:ab:7f:ae:75:22:53:90:00:c7:ac:3e:59:99:4f:d0:
         e2:61:6f:e8:78:5f:b3:b8:be:21:25:ac:09:75:cd:61:fd:32:
         4c:96:f7:1e:1d:5a:27:fe:47:9e:93:4f:53:8f:58:76:7a:9a:
         d5:9e:1e:1f:6c:3a:85:bc:b1:c6:03:2a:55:b0:9f:9a:63:a9:
         15:4c:eb:65:74:fd:62:5a:b5:3e:2e:be:33:a7:d6:91:1e:45:
         89:44:01:9b:3f:8b:90:04:88:91:fb:71:9e:f6:30:16:f1:b1:
         65:61:79:fa:3a:42:74:8d:c5:e4:9b:a9:76:70:d0:a7:c1:03:
         31:ec:e6:58:9c:1b:09:46:22:cd:59:84:ce:87:01:10:15:d5:
         8d:a2:fc:ec:60:91:09:5c:1b:6e:f5:e7:d9:bb:b5:f4:eb:02:
         ad:90:3d:d8:b4:4c:b6:ef:15:fb:ea:f1:fd:ac:89:bc:0c:c9:
         43:ff:61:9b:6b:fd:ad:ca:a9:48:02:25:4a:26:74:59:b4:9b:
         1a:c6:34:2d:19:41:10:26:f4:89:5f:d6:34:59:22:25:16:57:
         cb:26:35:7e:d4:d3:37:55:32:90:20:f7:6f:74:41:99:27:75:
         79:96:2a:3d:46:b5:46:2a:b9:88:45:dc:ca:21:1d:b1:82:f4:
         cc:09:0d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:06:13 2026 by rpki-client