Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/57f110ed-f008-3eec-b552-2f4d0d56eb0e.roa
File:                     57f110ed-f008-3eec-b552-2f4d0d56eb0e.roa (raw, json)
Hash identifier:          nLALAJnXvvziMlNUwRJ4SXCtpYZ2iMxHzeTFjMG8cfM=
Subject key identifier:   C8:AF:88:C0:EE:4F:F4:77:21:46:8A:9A:08:0B:BD:40:83:AA:C3:DB
Certificate issuer:       /CN=94468bc3-3532-4788-950a-08cd97f124e9
Certificate serial:       010D0C9F4328584E37646FA5C0065AE76E4C0180
Authority key identifier: C7:EF:7E:0C:8D:4E:2A:91:B5:9C:90:61:7D:B2:44:35:50:4E:D5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/57f110ed-f008-3eec-b552-2f4d0d56eb0e.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     402065
IP address blocks:        2607:8cc0:2333::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/94468bc3-3532-4788-950a-08cd97f124e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/94468bc3-3532-4788-950a-08cd97f124e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6f:a5:c0:06:5a:e7:6e:4c:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94468bc3-3532-4788-950a-08cd97f124e9
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=37a5b8e5-6c9f-4ac6-a425-b3b9d26182ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:74:13:89:88:f6:e0:43:6e:81:09:9c:02:
                    47:7e:ef:b6:6e:60:ce:95:35:1f:40:14:1d:eb:6e:
                    ce:ae:0c:dd:f5:19:e9:49:2c:15:61:36:7e:88:61:
                    e3:c2:31:3b:cb:61:f7:77:5e:fa:7c:99:fb:d6:b1:
                    65:ba:e0:90:7a:9a:ca:d4:8a:86:9e:37:c8:6d:17:
                    ee:16:48:02:f5:fc:80:53:d9:93:32:68:93:79:a6:
                    c4:cb:9e:1d:66:02:19:06:55:1e:7e:fe:90:b5:85:
                    27:bb:fe:79:f5:5f:b4:9d:ca:b7:6f:c9:59:ff:eb:
                    ed:fe:90:34:4b:12:25:02:05:74:79:23:fd:03:a3:
                    38:af:f7:45:27:b4:c9:b6:b7:97:4a:ec:b3:c8:28:
                    1c:15:43:d4:9d:3e:d8:80:6f:da:bf:dc:98:7f:28:
                    26:5d:22:9b:be:1e:6d:d2:26:c2:47:c1:48:a7:62:
                    52:2c:74:d0:df:ab:dd:44:6c:8b:55:55:69:33:e5:
                    27:f9:81:e3:58:cd:38:f3:31:f3:8b:5a:5a:a1:de:
                    3b:4b:4b:00:a8:a4:6c:5c:98:d1:96:7a:96:d5:fb:
                    32:55:6e:3c:f7:eb:8b:f4:28:b0:e3:51:e0:a3:7b:
                    17:4e:db:b5:6e:78:5f:fd:d1:c1:48:bd:fb:b7:b0:
                    e2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AF:88:C0:EE:4F:F4:77:21:46:8A:9A:08:0B:BD:40:83:AA:C3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/57f110ed-f008-3eec-b552-2f4d0d56eb0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/94468bc3-3532-4788-950a-08cd97f124e9.crl

            X509v3 Authority Key Identifier:
                keyid:C7:EF:7E:0C:8D:4E:2A:91:B5:9C:90:61:7D:B2:44:35:50:4E:D5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8cc0:2333::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:cf:c9:0a:92:b1:10:6a:b8:0b:09:a0:42:67:f6:3f:46:70:
         18:c7:c0:24:f4:5b:e0:2e:e3:76:22:90:d7:34:7e:d7:9a:3f:
         f7:ab:40:30:01:d6:3e:cc:dc:ae:19:1f:17:b0:0b:3e:c2:98:
         cb:b6:2e:67:d2:99:2a:70:16:86:5e:7b:f2:f6:00:db:13:14:
         67:90:18:8b:bc:c9:32:c0:fa:87:3d:eb:db:c6:cb:05:03:27:
         ce:bc:78:a8:b3:29:1c:1b:4d:19:2b:65:1a:d6:78:5e:28:27:
         f5:74:58:d0:2e:d2:0c:38:15:50:c2:f3:eb:f2:58:5a:6f:ef:
         a3:0f:f8:c4:7f:cc:d7:a3:df:7d:c3:6b:4d:d6:9d:b5:e4:c3:
         65:df:10:23:34:07:22:e3:07:71:14:f5:7a:e8:d7:f4:c2:51:
         5f:fa:2e:85:3e:be:df:db:11:0b:78:48:65:d8:d5:e3:47:71:
         be:20:de:23:f3:8b:ee:29:ea:e3:72:95:dd:72:15:a3:ec:67:
         49:e8:80:2f:0d:fc:21:b1:3a:f8:a8:5a:9b:57:71:09:e7:be:
         58:3d:63:30:72:a7:f9:45:2a:5d:11:c8:1d:35:68:c0:ad:f5:
         7b:7d:a8:5b:2a:0d:3e:2d:6e:00:a9:2f:24:67:d1:be:28:24:
         5b:40:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:09 2026 by rpki-client