Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa
File:                     e50dcace-be5f-3f1f-9cfe-4047144e8682.roa (raw, json)
Hash identifier:          mG6ppNTD+CYx8aenv86kox+HBuOT0jtHfpLITDme0F8=
Subject key identifier:   45:EB:61:6C:FB:96:68:68:9C:71:87:4E:4F:E2:4F:BB:85:AC:68:18
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F4328584E7634F32A0F4408E8B000DC40
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2620:8:4300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:f3:2a:0f:44:08:e8:b0:00:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=9ff83e63-eca8-4e77-ace5-53b010922b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:ee:64:03:63:2b:e3:0f:2b:30:12:7e:20:
                    28:1f:a8:2e:09:fe:68:24:f5:4e:cb:fb:9e:fe:77:
                    f7:7c:9a:ca:c6:1f:dc:8e:4a:85:af:bc:b0:51:0e:
                    91:7c:3b:d1:03:95:32:76:7e:85:22:3a:4c:45:0b:
                    b0:0b:0e:50:0a:f7:cd:90:23:b4:ad:bd:16:ad:54:
                    f2:c2:79:78:d2:fb:da:cb:5f:fd:df:11:a1:18:aa:
                    cd:bf:73:71:c3:ab:ba:7a:e4:f2:d6:ea:67:90:03:
                    27:31:44:6e:81:79:42:a3:82:cc:73:db:08:8e:4e:
                    0f:d2:fb:00:29:65:f8:92:5f:6b:15:18:6c:93:79:
                    c5:2f:7b:e7:8e:08:2a:1b:a9:03:43:30:18:d0:5d:
                    98:e0:85:e5:c2:90:e2:00:7b:d3:48:b2:cf:00:29:
                    20:9e:73:a3:ea:bd:01:9e:c8:49:4a:b8:1e:92:17:
                    94:95:0a:d9:4c:cd:2c:ae:d3:6d:cc:d6:f5:7c:b3:
                    08:9e:8f:f5:39:7a:fb:4a:c2:0b:e1:88:8e:8a:41:
                    c6:f1:0d:88:54:c2:98:33:d8:7e:c2:01:2e:a4:3c:
                    45:9e:c5:39:07:b8:7c:55:63:54:ae:16:67:1a:8a:
                    f5:65:f7:65:27:53:18:2c:98:f2:98:ff:ff:2b:b4:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EB:61:6C:FB:96:68:68:9C:71:87:4E:4F:E2:4F:BB:85:AC:68:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:4300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:f9:ca:83:3e:7c:88:37:97:0a:a7:27:99:de:99:d8:5d:
         eb:0c:5b:d2:a0:6d:b8:d8:fe:c4:1e:91:37:6c:bb:0d:2a:3d:
         74:d9:a9:b1:ec:b8:bb:be:ac:f8:83:1b:50:13:2c:c7:34:8d:
         11:6f:ea:16:28:0d:7a:af:75:ce:a6:e8:a7:e8:e6:56:b1:14:
         e3:e2:96:75:9a:df:a3:c1:de:c1:3a:c6:c1:79:cc:db:41:f5:
         a9:e2:d3:bc:8a:62:a2:6e:7c:ca:0d:28:dd:86:d8:e2:d0:00:
         24:26:f7:c5:0a:ab:88:f8:8a:90:81:44:ad:39:2f:b4:df:2c:
         a5:f1:ba:1f:b6:c3:3c:56:67:e8:f3:94:da:22:c4:5c:49:0a:
         11:17:fd:12:55:d9:cc:03:9d:2e:23:1f:3a:6d:a2:2f:d3:7d:
         38:6d:19:0d:e0:70:2d:03:ae:d4:12:2e:1b:70:ac:8d:0e:12:
         ab:fa:29:f7:53:62:a6:da:71:29:af:f1:11:2b:08:23:35:db:
         28:a1:30:e7:27:06:74:41:95:27:e9:ee:1f:46:16:53:7e:e8:
         cb:24:51:a7:89:bd:41:5e:27:cf:a3:d4:5b:66:bb:0b:52:3c:
         fd:9f:df:d7:d6:a2:f2:ef:37:f9:78:49:5c:5a:7e:6f:83:b5:
         34:2a:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:44:11 2026 by rpki-client