Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ea5defa7-f620-33f1-a6bb-4b6281bf2511.roa
File:                     ea5defa7-f620-33f1-a6bb-4b6281bf2511.roa (raw, json)
Hash identifier:          j/OKX7kvWIp3i71T3UiKH3YH5wdt9cUrxDh9n98GGlo=
Subject key identifier:   63:67:34:9D:FD:54:EE:ED:A0:D6:F5:02:5B:33:B0:D8:40:47:9F:24
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584E6C6F6A68E0F36BC505E0F880
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ea5defa7-f620-33f1-a6bb-4b6281bf2511.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     396982
IP address blocks:        2604:b040:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:6a:68:e0:f3:6b:c5:05:e0:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=18df33fa-7fac-47e3-aecb-8975b211bcbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:27:7e:d4:f6:be:05:2d:4f:1e:56:22:e2:e9:
                    fb:74:6f:fe:6a:39:62:dc:b9:ad:0b:2c:80:e3:7f:
                    1f:a8:10:f2:83:97:bb:5b:1a:26:50:b5:b0:a3:5d:
                    8d:19:82:df:ae:94:7f:a0:1c:8b:1b:82:f3:cf:53:
                    23:c3:25:fd:a0:f4:9d:d1:b6:43:8c:21:d9:36:5e:
                    74:a7:80:6b:1f:2b:0d:b2:53:fb:46:90:05:7f:4b:
                    56:cb:e3:af:bd:93:0e:b7:0e:a7:47:12:54:14:a4:
                    05:a0:47:61:35:63:62:fc:a8:d6:d9:24:d4:be:b4:
                    80:9a:c9:ec:22:42:aa:65:8f:60:eb:67:eb:c7:40:
                    c7:1f:5d:52:92:95:6a:4c:92:0f:73:b5:c0:75:ee:
                    5b:92:11:19:cf:51:2a:8e:0f:bd:41:c1:4c:53:89:
                    5e:22:24:8c:0a:44:2e:ad:d4:8b:da:8f:74:22:b3:
                    07:fe:37:e9:f7:63:1e:a2:80:e8:ab:4f:f7:7c:5f:
                    68:56:2a:00:6d:43:78:f6:96:91:db:09:41:ed:34:
                    a2:74:19:4e:ed:59:98:c4:55:be:e6:2d:f5:0f:80:
                    31:4b:55:13:01:b1:63:6c:fe:90:2c:75:a1:20:ea:
                    c7:0e:36:c8:d9:fc:41:b4:bd:58:85:d4:ba:51:0e:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:67:34:9D:FD:54:EE:ED:A0:D6:F5:02:5B:33:B0:D8:40:47:9F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ea5defa7-f620-33f1-a6bb-4b6281bf2511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b040:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:2c:df:4a:b4:6c:d8:de:53:38:b1:c0:6c:bf:0d:2a:50:
         a6:b3:27:55:04:de:ed:ea:30:b5:8c:68:71:c6:97:a5:1f:a3:
         21:1a:e7:1c:2b:51:58:d9:c0:59:0d:e5:e2:4b:53:b1:5b:3c:
         0c:36:ce:db:65:b5:07:85:f4:ef:88:c1:a5:b7:16:19:4f:33:
         43:65:37:31:2a:59:97:93:db:a5:fa:95:48:76:00:eb:50:5a:
         e4:05:3f:15:31:45:65:39:c2:45:31:b4:7d:eb:9c:31:4e:d5:
         d8:4e:db:04:22:a0:48:f3:6e:d8:87:80:c6:9c:a7:80:18:24:
         05:98:67:16:b5:32:38:9c:95:da:92:ce:4a:85:c6:6f:1d:50:
         0a:f0:ea:73:8e:d8:b7:d9:42:08:c9:dc:a7:2c:76:b9:43:4b:
         cf:99:02:dc:4a:9a:5d:de:4a:d9:9f:1f:52:83:55:8a:8d:6a:
         80:57:b9:c3:87:47:34:ec:06:dd:af:88:6a:95:f2:7e:cc:d6:
         a3:a4:ad:67:f0:9e:d5:9d:5f:dd:7d:95:46:9c:23:25:7f:39:
         5a:dd:ae:68:45:f2:18:95:02:f5:c1:36:8a:c7:5d:e1:25:6b:
         17:aa:72:4a:93:97:5a:2f:fc:62:98:f7:b3:01:af:cb:d5:6a:
         dd:b2:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:37:11 2026 by rpki-client