Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/fc3d0f13-c0d4-3b87-b892-d7646f06bbe4.roa
File:                     fc3d0f13-c0d4-3b87-b892-d7646f06bbe4.roa (raw, json)
Hash identifier:          CkFmQHGwjF+cUmDd/mV+xo97eV1qwYVqQZt9Wl64NoU=
Subject key identifier:   FA:D1:8C:CC:98:52:A8:0C:A8:5B:1C:EA:13:A2:E3:9E:0C:25:69:21
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F4E48D5504E57B8F762E00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/fc3d0f13-c0d4-3b87-b892-d7646f06bbe4.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     16509
IP address blocks:        2620:147:c43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e4:8d:55:04:e5:7b:8f:76:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=9287ce08-4701-411c-82c8-73b180f879ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:a3:77:f0:b8:b4:66:56:83:27:57:23:62:
                    83:7d:43:60:b9:eb:d8:06:a5:10:f2:c8:26:40:10:
                    bf:9f:57:f0:c5:40:35:ec:40:33:8b:36:66:e2:3d:
                    9b:e4:04:b4:31:6d:b4:9c:50:43:51:f7:7c:e3:4b:
                    08:a5:3b:f4:4a:98:1a:ea:3c:fd:f5:09:db:66:a3:
                    94:c3:01:ec:a4:07:d3:6d:d7:dc:db:8b:4c:f5:82:
                    a1:5c:96:9e:9e:c1:20:05:c4:6b:2b:e4:64:1c:4d:
                    46:a6:65:ca:bf:45:e4:42:24:39:81:19:ea:34:f7:
                    ff:f7:e9:28:5e:51:f6:18:63:a4:ab:71:51:3f:76:
                    14:ef:e8:19:8a:56:2a:25:e5:ca:f6:47:36:da:3f:
                    c7:c0:fa:69:5b:1a:d3:85:41:68:39:76:2f:5b:00:
                    f2:fe:83:35:88:5a:47:cb:f2:2d:a8:df:9a:9d:14:
                    91:95:fd:b4:cf:c6:9f:ac:96:e2:90:5d:42:17:5f:
                    2d:5b:40:e5:44:74:4d:a3:1c:41:a7:8b:50:42:47:
                    ad:b8:b2:17:86:0b:76:f9:b9:10:0e:81:00:ef:73:
                    77:28:e8:8e:f5:0d:bc:a7:b4:b7:1b:56:63:3f:02:
                    12:fb:3b:fd:d8:37:d6:83:28:4f:c7:8b:87:28:4d:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D1:8C:CC:98:52:A8:0C:A8:5B:1C:EA:13:A2:E3:9E:0C:25:69:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/fc3d0f13-c0d4-3b87-b892-d7646f06bbe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c43::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:47:2b:17:eb:6f:2c:4a:ba:2a:10:a5:5a:d4:8c:c8:98:8f:
         c9:e3:78:c6:6f:6a:2e:78:b8:cb:3a:cd:2a:3d:1a:4c:97:d1:
         6c:f2:ad:a4:e2:bb:23:1c:59:32:24:43:15:b1:04:2e:a2:6e:
         ec:9b:aa:77:ec:03:e2:3b:ec:0a:cd:dc:c3:e5:6d:8b:0f:6a:
         13:f1:3a:10:da:97:bf:79:44:c9:c7:52:d1:76:82:03:eb:0b:
         40:fb:03:51:11:83:0b:b6:9c:be:c9:d5:25:fd:74:e2:e9:ad:
         2b:e9:89:20:71:8d:31:96:a3:32:1b:6c:4d:4c:58:fa:87:31:
         c5:d4:f0:63:05:0e:c9:38:3e:b0:7e:1e:60:0d:91:bd:ab:09:
         b9:11:78:a5:3a:eb:a0:5d:df:fb:17:de:76:0c:b0:41:8d:49:
         67:e7:73:04:34:ca:e0:f3:ea:f9:8e:bd:1b:dc:8d:9b:dd:a3:
         5b:15:0d:d3:3f:81:b1:37:d7:6e:6a:b6:db:f6:e1:5d:86:a0:
         cb:c5:c9:96:7a:d5:7e:e9:c6:bd:19:bf:33:e3:58:2b:c0:be:
         8d:80:16:99:54:58:b4:ef:ed:02:29:77:39:9d:7b:a7:a7:48:
         c3:0a:d8:95:bd:5f:8d:d4:96:e9:70:07:f8:b1:a1:43:90:45:
         99:b6:63:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:58:33 2026 by rpki-client