Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa
File:                     af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa (raw, json)
Hash identifier:          nyZW6CmY4G61NURgFsYGHc0P06ye1+Xe1JFHmn7HIxQ=
Subject key identifier:   6E:F9:3B:2E:F6:C9:F9:13:8B:D0:6C:C8:2E:E4:7E:DF:5F:0F:AD:C0
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F50A169C80A0C46FB25200
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     16509
IP address blocks:        2620:147:c33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:0a:16:9c:80:a0:c4:6f:b2:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=cc333ffb-6839-4fc7-acef-8de8c2093909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:94:05:d5:a1:f1:57:34:7f:cd:ae:5d:1b:95:
                    08:b8:23:e1:b9:a0:26:33:29:9f:03:e8:be:1f:a3:
                    76:e3:26:ba:0f:e1:01:a3:e7:ef:72:d0:cf:a7:d1:
                    ea:be:05:a0:88:8c:1c:e3:f9:f5:60:a0:1a:fa:ca:
                    d7:99:ca:e8:46:ed:cc:ba:52:4b:63:2e:74:80:f5:
                    11:d3:08:45:16:72:6f:4f:e5:74:8e:cc:86:95:8d:
                    f0:5b:59:e0:7b:23:f0:4f:51:55:f5:2c:2c:19:65:
                    dc:e5:9c:3d:be:54:cf:6d:74:af:00:83:0d:32:91:
                    43:8a:f7:10:66:8d:be:49:a0:fc:8f:ab:63:b2:ab:
                    41:d3:e5:e3:67:d6:25:f1:41:b8:cd:36:ad:6e:fa:
                    3d:5f:7c:f5:fc:e4:ba:03:c1:f2:eb:8c:f4:91:d9:
                    05:76:08:51:61:73:ad:e6:0d:a3:d6:87:ca:dc:14:
                    a9:c4:26:b3:13:2a:12:33:3c:62:aa:3f:31:a4:f8:
                    e3:5a:b6:d9:a1:16:95:7d:98:f1:9e:95:22:37:91:
                    28:04:bd:d6:e0:14:2b:60:b1:87:56:d0:3c:b8:6e:
                    65:d8:a4:9e:ea:5e:8f:3b:9a:83:82:36:0c:d6:59:
                    16:e6:d7:42:f0:6b:13:4e:1a:6a:be:7b:16:c8:2a:
                    22:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F9:3B:2E:F6:C9:F9:13:8B:D0:6C:C8:2E:E4:7E:DF:5F:0F:AD:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c33::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6f:58:bf:88:1a:ba:ea:20:11:96:a5:12:bb:06:eb:bb:36:
         d2:24:90:d7:10:c1:64:0f:8a:c8:05:a3:0e:05:12:05:f3:3e:
         b9:52:df:59:d3:ec:d3:22:d4:95:e7:36:c7:0f:41:92:4a:ab:
         8d:c1:d6:fd:cb:be:d1:e5:4d:e3:da:ba:78:60:ec:21:2e:f7:
         c8:a7:fe:4e:f8:f6:b6:05:12:45:84:f3:7c:0d:f5:1c:d2:d6:
         df:51:39:f1:c4:5e:f5:dc:78:e0:84:8f:31:e8:fb:61:a2:99:
         ae:61:7c:b8:79:b3:ca:ad:26:4f:bf:a2:77:0b:fc:55:04:ff:
         30:79:6c:53:ef:86:5b:c0:d1:41:5b:12:d0:35:69:08:f4:ea:
         b3:3d:dc:38:47:b0:29:e9:10:86:ad:9a:49:ba:85:e7:94:05:
         25:86:5d:a5:5a:d9:63:b9:59:e1:8d:ec:44:c2:fc:35:51:5e:
         0b:99:ea:2c:e5:60:24:97:a2:37:87:9e:60:44:97:9e:09:7b:
         03:e5:aa:9f:26:25:2e:5b:ad:78:5b:29:30:a2:62:76:79:22:
         eb:41:89:0a:02:dd:49:24:b7:86:ea:d8:2a:24:0d:94:41:1a:
         6e:c5:35:63:a1:29:0f:0e:f9:1f:69:ca:45:bd:89:d8:a2:c3:
         14:01:1d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:59:44 2026 by rpki-client