Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa
File:                     06a7945a-0360-3338-a5f2-7799e064b387.roa (raw, json)
Hash identifier:          2b6Hz/oY2DrZ4o4QuUhxBXLlj78bwHfaQ2cFjV5CaPQ=
Subject key identifier:   2B:08:3D:C8:6E:86:39:80:41:C0:26:FE:43:6F:B2:CB:24:6F:34:61
Certificate issuer:       /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Certificate serial:       010D0C9F4328584E4AEF6E1677E64BB9CC0570C0
Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     16557
IP address blocks:        2607:f528::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:6e:16:77:e6:4b:b9:cc:05:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=b85bbb54-fd03-4971-ba0b-de64c8e97378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:cf:e0:42:a8:fb:e8:23:8e:48:8b:86:1f:
                    ed:bc:22:7e:68:e3:cc:80:97:13:8d:88:f6:b5:22:
                    19:cd:99:1b:eb:05:bb:17:64:47:04:9e:c3:f4:bb:
                    de:81:0c:e2:9c:a6:8e:dc:0f:a1:3f:ba:e1:75:ec:
                    89:55:32:03:c3:2a:00:42:96:42:4b:7c:1b:a3:58:
                    7c:41:04:41:18:05:30:37:59:5c:6e:0e:f5:34:74:
                    b3:b5:1a:f1:1a:38:79:b6:92:bf:b4:61:fc:40:fe:
                    12:be:68:bb:27:3e:60:73:db:3d:16:f2:be:84:a2:
                    0b:5f:63:da:78:bf:fb:55:53:d2:1a:7d:53:13:ad:
                    b9:7b:37:88:1b:f3:d9:9a:6a:4d:d7:17:a8:62:5d:
                    e7:c7:fc:ff:d1:d9:2f:68:9c:30:35:40:18:0c:ee:
                    cf:2d:a9:a8:d9:bb:fb:27:84:d8:23:4c:d1:6d:1e:
                    3e:00:2d:f7:a0:d4:8b:d2:74:e3:9d:01:df:fd:b1:
                    ae:55:ef:91:69:dd:2e:9c:57:3d:32:ff:40:2d:3c:
                    e2:d5:d5:72:d7:ed:7e:07:d8:f9:10:8e:df:41:7f:
                    37:78:23:9f:42:12:bd:23:b4:71:d1:7d:4c:92:2e:
                    a2:54:45:b4:67:12:d9:21:a0:b9:0b:d8:6d:cc:36:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:08:3D:C8:6E:86:39:80:41:C0:26:FE:43:6F:B2:CB:24:6F:34:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f528::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:1c:29:03:f5:9a:d4:12:ff:ce:f5:cb:66:a6:37:ff:ac:
         4f:a1:c7:9a:f3:b7:f9:3a:09:01:d6:28:2b:1f:1d:5c:d9:03:
         0c:d9:b4:28:c3:21:09:46:1f:8e:2f:e7:12:a1:8d:d0:e5:60:
         ad:ee:22:37:be:0e:ea:85:ef:fa:7f:cd:b6:4b:ae:65:df:e2:
         68:3a:05:28:4d:5d:62:58:59:e2:77:79:83:9a:ad:c2:2b:d8:
         2b:95:bb:21:53:6b:35:66:98:e9:97:44:59:be:83:eb:cf:ae:
         14:4c:2d:7b:09:79:16:55:55:c1:14:ce:c8:44:3d:22:3c:fc:
         3e:8d:49:87:de:5c:17:4d:ff:32:8c:4a:b6:12:5e:e4:5f:6e:
         01:03:92:ce:7a:35:49:5f:dd:1a:f1:5a:93:42:67:c3:4e:17:
         da:0d:94:65:c6:3c:78:f3:21:05:07:1f:d2:99:56:76:7f:f7:
         33:55:3b:cc:77:5f:9b:b1:08:6a:99:c1:5b:56:40:e0:63:de:
         ed:78:78:54:cc:e1:a1:20:41:49:40:3d:db:ef:45:4a:aa:0a:
         ad:4c:10:c7:c3:e2:f9:08:16:de:7a:16:8d:a3:76:6e:44:0c:
         80:99:c9:18:1b:8d:28:a1:5a:70:7d:fe:2f:18:53:8b:f6:68:
         3f:2e:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:00:47 2026 by rpki-client