Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/fef7214e-f414-36ec-a40c-e83a4182b0b7.roa
File:                     fef7214e-f414-36ec-a40c-e83a4182b0b7.roa (raw, json)
Hash identifier:          5Z2E7pxIXnGLz53BmywY4xzUd+UotKESUemVKxCOzSc=
Subject key identifier:   3B:AE:24:CE:C0:5B:1E:39:DC:D5:B6:1E:B7:3C:C3:D5:37:A3:FD:20
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F4F874844B5C333132AA40
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/fef7214e-f414-36ec-a40c-e83a4182b0b7.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     14618
IP address blocks:        2620:147:c44::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f8:74:84:4b:5c:33:31:32:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=f0cf64b3-9736-4da2-8982-3e4d36f7f8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:1e:5f:c2:c6:cf:35:c9:4d:35:22:cf:78:
                    13:47:ce:2a:45:8f:fd:41:b0:71:80:95:c5:93:f4:
                    cf:de:ef:b5:86:d4:2c:50:04:8b:47:cc:81:d6:da:
                    e0:0b:b1:3e:e2:de:20:84:de:d0:12:a3:f9:d5:33:
                    5b:73:53:38:c7:66:67:28:5a:9a:de:c2:91:9a:f5:
                    06:0f:c9:3f:83:1e:d0:f3:00:e3:07:b7:dd:47:32:
                    bc:ef:f5:be:f6:bf:02:33:9a:6a:07:bc:c8:21:96:
                    76:47:4b:fd:2a:e7:23:3a:2f:c9:91:ce:3f:f7:fa:
                    6b:09:96:c5:de:83:c5:72:b1:2f:31:f7:e5:b9:76:
                    fd:27:cb:7b:11:73:26:8f:a8:0b:7a:39:80:c1:57:
                    11:1b:01:b9:07:2e:8e:0e:77:a3:0c:f1:2c:ac:7e:
                    c6:03:c1:88:73:3e:ab:7a:0d:53:56:b0:6f:85:0e:
                    d7:02:f9:d3:4e:f8:70:98:17:4a:fd:7f:66:0e:a8:
                    60:f5:eb:47:cd:a6:b3:e9:04:06:18:5d:22:7d:ba:
                    95:5b:11:c6:7c:63:bc:37:ce:5f:53:34:87:81:69:
                    99:6c:54:57:76:c0:42:16:8d:e4:0a:9c:33:a0:e7:
                    3c:12:fc:d6:06:e8:0c:fe:55:62:27:c5:4c:65:d2:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AE:24:CE:C0:5B:1E:39:DC:D5:B6:1E:B7:3C:C3:D5:37:A3:FD:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/fef7214e-f414-36ec-a40c-e83a4182b0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c44::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:9c:69:5f:1f:59:f5:c1:0a:18:ed:37:b5:2a:da:20:df:a4:
         b3:f3:e9:65:8f:20:e2:8c:f9:03:be:d0:8d:32:80:ad:24:ed:
         5d:f7:15:27:42:73:98:f2:12:e8:b6:a4:75:6d:a0:f9:a4:3a:
         a2:cf:82:4a:b2:99:00:b2:c3:dd:b6:de:c3:38:7c:b7:0d:61:
         ec:4e:5d:6d:56:95:68:62:05:39:b2:5c:fa:bc:47:5f:58:08:
         d5:1b:27:b5:9a:31:2a:8b:a0:ff:f6:fa:32:5e:82:40:40:dc:
         b2:eb:bd:b6:aa:d4:56:da:12:b0:a7:e9:04:70:87:02:c7:99:
         1e:a8:23:1b:3e:8e:e1:8c:0b:6e:2d:cf:ec:39:23:ac:16:dc:
         ba:20:04:69:50:d8:18:70:7a:68:a4:94:8f:72:18:d3:52:aa:
         e3:e4:bd:cb:0d:6b:ac:ae:47:62:fa:a8:6f:52:6d:c2:84:c3:
         5b:de:82:bd:ff:79:1b:c0:3e:97:15:2f:07:a1:de:b4:38:33:
         9d:38:dd:eb:23:61:67:16:48:ce:b1:bd:46:6c:de:ee:8c:a4:
         4e:5e:16:f4:81:32:cc:b7:f4:f3:03:31:0f:59:ab:8d:c8:0f:
         cd:2f:2d:6a:d6:9b:51:43:a3:87:a1:ea:57:7d:cc:db:b1:e0:
         dd:db:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:59:44 2026 by rpki-client