Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa
File:                     a34bb302-49e0-3e41-8a06-b70ec4051c38.roa (raw, json)
Hash identifier:          mKD82wXPzMTM4JZnBnrTSij0M21nc4wctbrS+QZ0TbI=
Subject key identifier:   4D:F6:83:B5:30:5B:8C:C0:14:F8:D0:33:0E:FB:15:74:7D:B4:05:46
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584E86F4ECC27AF454C367359CB0
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     13807
IP address blocks:        2604:c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:ec:c2:7a:f4:54:c3:67:35:9c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=9669e7fd-2e99-4127-93e9-fb31f18aa45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:74:02:53:38:eb:97:dc:a3:e8:2c:8a:8f:
                    fe:4c:ff:3d:f0:33:7b:fe:6d:44:6d:b9:aa:f2:fb:
                    63:50:2a:10:49:79:3c:b2:cd:43:06:4d:0b:65:12:
                    5a:64:44:e7:32:cb:3d:c0:c7:04:e4:a1:b4:01:b3:
                    4b:bd:49:8d:68:4f:0d:bb:ec:ca:cc:fa:34:be:58:
                    7a:12:88:c6:67:45:3d:27:62:6b:18:65:73:fb:88:
                    99:15:3a:25:bb:0e:71:8c:81:df:8a:f3:a1:ae:f9:
                    47:19:25:7b:be:bc:2e:bf:2b:1a:26:45:78:d1:bc:
                    c1:bb:99:07:11:9f:77:c3:b8:ac:37:c6:03:08:24:
                    b4:be:b8:2f:77:de:af:eb:c0:27:32:2d:4d:3e:e6:
                    88:5f:11:02:d5:27:71:ae:c2:14:e0:ba:b8:3c:c4:
                    b5:f9:7c:c1:dd:19:ae:f7:e6:bb:ef:c0:b4:c7:c3:
                    a3:3c:16:32:10:91:81:2b:63:ae:7b:aa:db:c8:c5:
                    b5:70:b9:43:ef:f9:62:a5:c5:cd:d2:7d:4b:cf:f5:
                    f7:ea:b9:4f:53:25:7b:de:8b:72:7d:21:f3:48:70:
                    20:82:ee:1b:d2:6b:c5:d3:fe:06:7c:98:d9:83:b4:
                    45:a6:8f:de:04:c2:1a:79:f2:63:61:bd:fd:f0:b5:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F6:83:B5:30:5B:8C:C0:14:F8:D0:33:0E:FB:15:74:7D:B4:05:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:08:59:98:a1:8d:bc:a4:66:80:6b:d8:6f:54:17:d2:c8:0b:
         29:15:47:46:b7:ba:f6:d9:de:8c:a6:62:ae:5b:7e:87:cf:c8:
         df:35:d8:cc:fa:c5:b3:36:86:62:c2:5d:d1:5d:ed:75:8b:32:
         3c:9d:2c:a3:4b:f5:f4:f5:14:77:ab:77:f6:8f:ff:a9:f1:6e:
         aa:0b:ad:b7:b6:82:f7:00:d9:83:c8:cb:8c:67:29:84:1d:20:
         f0:ca:c1:cf:2a:a0:e2:42:b8:c5:44:e9:a0:0c:51:b8:81:7c:
         7d:9c:e1:01:c9:57:80:c4:93:74:72:8e:4e:81:8f:c1:bf:1d:
         83:2a:30:d6:8e:4e:51:c0:d7:5e:53:1e:36:6a:ef:27:df:a0:
         01:c7:b2:ce:a3:2b:c2:9d:64:fe:42:3b:f8:7e:ac:6b:ca:0c:
         a7:cf:bd:90:1b:0d:7b:38:77:ed:0d:43:b2:f8:95:f6:99:52:
         ea:cd:68:c3:39:64:4f:6a:09:2f:b4:cf:a1:f3:f0:b8:df:f6:
         d7:90:fb:f5:d1:f9:ec:b3:23:f1:38:74:66:0f:49:88:ac:dd:
         ba:32:79:e2:39:f5:b7:6d:9e:1d:fe:9b:b6:25:a9:73:2b:49:
         ae:45:bc:c6:a9:1f:d2:07:e5:8d:2d:f2:90:48:cf:91:07:b0:
         72:e7:99:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:53 2026 by rpki-client