Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa
File:                     71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa (raw, json)
Hash identifier:          j6xfnq/hpNJb8bSDSUbW/vqeHtSm+LWMyXd/NlGC+68=
Subject key identifier:   43:EC:3B:34:AC:8C:9E:C3:05:43:61:3A:B8:CC:2C:0F:B2:17:C3:F9
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584E7204C91334C1A83B3DF61980
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     36829
IP address blocks:        2602:fc64:a000::/48 maxlen: 48
                          2602:fc64:a001::/48 maxlen: 48
                          2602:fc64:ca00::/48 maxlen: 48
                          2602:fc64:ce00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c9:13:34:c1:a8:3b:3d:f6:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=5bcca4aa-408e-4742-bd02-90e1183ee09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:69:d4:14:5f:49:35:59:d0:4c:27:41:8e:e8:
                    96:94:01:ae:51:2e:4f:42:d7:3b:94:ba:52:60:aa:
                    d8:6a:a4:bf:b3:95:c8:30:11:96:1a:d4:68:02:a6:
                    79:19:92:fa:04:e7:ff:af:57:52:d1:f2:3f:83:28:
                    c6:50:0c:cf:af:7b:ee:a4:2f:8e:9e:bb:26:5b:1b:
                    6d:3c:d5:7e:46:70:ba:68:07:45:e3:e9:80:da:5a:
                    a4:ab:7e:42:80:2c:81:54:b5:84:4e:a2:06:7c:8a:
                    a5:31:e4:74:97:ca:54:99:b7:b2:5a:56:b3:7d:69:
                    6d:bb:bd:a7:ac:13:05:6d:c4:4d:15:5f:f0:d8:74:
                    15:fb:50:2d:fc:27:3b:14:af:5f:96:13:55:f7:11:
                    d5:e0:3e:3f:0f:d8:25:c5:4c:a9:27:4d:24:91:d6:
                    aa:92:0e:93:c3:0e:2e:e0:23:fd:9f:73:03:d4:db:
                    e9:b1:1b:76:d0:67:9c:45:0c:17:dc:08:38:00:9a:
                    d9:e3:ee:5c:7c:c7:4c:ca:a7:4a:95:16:af:8b:c5:
                    c5:10:40:27:15:9b:03:9c:c0:eb:27:58:70:7d:94:
                    60:d9:fb:12:ce:a1:40:a7:00:24:06:28:d6:9a:0c:
                    18:c9:ef:58:5b:bb:7c:12:6b:a0:7d:2f:bf:43:b2:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EC:3B:34:AC:8C:9E:C3:05:43:61:3A:B8:CC:2C:0F:B2:17:C3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc64:a000::/47
                  2602:fc64:ca00::/48
                  2602:fc64:ce00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:0c:f1:e1:02:b1:f7:79:16:62:32:21:cd:3a:2d:08:37:
         96:a2:73:44:07:43:f5:f3:3b:c1:cc:ef:cb:be:71:1e:ff:3f:
         d7:87:75:59:dc:e7:96:ef:65:cf:a3:49:c1:5e:7c:ed:76:6b:
         20:05:34:4e:59:e3:81:5d:49:9c:ec:6a:29:cf:be:b2:e0:7a:
         57:ed:5a:3a:0f:64:2d:28:da:7e:8f:04:e2:a5:ce:23:1d:e0:
         8e:1e:23:75:ee:cf:55:05:00:40:68:de:95:95:93:12:91:d4:
         f8:e5:ee:aa:58:db:29:7d:b7:cb:74:f1:9b:a2:cd:33:48:bd:
         99:45:59:3c:de:9b:db:be:c2:20:9b:0c:f3:f1:e0:d5:db:3c:
         5c:6b:c3:84:3c:94:68:8b:d0:8b:70:e9:6d:d1:b3:7d:b9:be:
         47:c0:16:99:90:fa:17:6a:03:d8:0b:31:10:d0:10:49:c5:53:
         92:fb:c6:01:3e:9d:ac:95:e8:06:e6:4e:48:f4:d7:18:42:0b:
         e8:6b:e9:47:54:16:8a:5a:e6:5d:e9:fd:f6:1c:9a:a3:54:c4:
         bf:25:29:8c:f6:bd:88:bb:36:cf:ea:a6:b6:e3:5d:90:1d:4b:
         06:ea:3e:ab:6f:97:ce:67:b2:39:46:b4:91:74:03:1b:85:f8:
         b0:0a:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:00:22 2026 by rpki-client