Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/54c86c97-24e0-393e-a6fb-f9df3edddee8.roa
File:                     54c86c97-24e0-393e-a6fb-f9df3edddee8.roa (raw, json)
Hash identifier:          u7UaNuF+nl6KbHgG9JbmTVbgaP1Y954niOTlVk2u/zQ=
Subject key identifier:   7E:9F:AF:5E:D0:4F:70:68:8D:68:95:52:EF:EF:49:17:E6:A5:AC:05
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584E2D9F234F40670D3F2CD84E90
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/54c86c97-24e0-393e-a6fb-f9df3edddee8.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     397423
IP address blocks:        2604:7580:f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:23:4f:40:67:0d:3f:2c:d8:4e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=1b9a55c5-dc29-4a92-96fd-11588bf6f19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:b6:b9:30:5a:0b:f1:9e:4b:bf:43:4a:20:
                    79:ea:a5:57:90:12:a9:28:cd:85:97:09:ea:1b:e3:
                    f8:90:aa:31:9b:6f:5b:1e:c2:0f:be:e7:ae:94:b8:
                    47:89:56:74:72:dc:e5:7a:24:cd:3c:1c:c3:6b:6e:
                    4f:da:54:52:c3:28:be:12:07:38:f3:c7:14:cf:fd:
                    24:4b:1a:a2:c4:9c:fe:65:5a:0c:e5:3f:1c:da:36:
                    bd:d5:27:8a:7d:3d:c7:07:d5:a3:d6:7c:18:b4:60:
                    64:2b:37:71:20:4e:e8:5d:5a:9e:8e:c4:2b:42:f8:
                    64:7d:90:da:2e:c4:5d:53:e5:5c:2c:c0:f4:d6:8b:
                    cb:19:af:18:29:e2:2d:af:59:cb:28:52:29:74:66:
                    1f:f3:c8:0d:f7:68:64:55:6d:e2:fd:f8:dd:7b:54:
                    c8:88:97:91:54:9b:50:88:26:d1:44:49:44:85:88:
                    0f:61:86:16:11:50:fb:08:0d:b1:17:bb:71:c2:15:
                    e8:ad:0d:0e:07:af:17:d9:ce:43:5c:86:0b:81:a6:
                    7d:2b:7b:11:b5:fa:e8:59:54:22:77:62:ae:e0:09:
                    50:8d:a5:d9:24:ba:3f:70:ad:ba:3d:83:0c:80:b6:
                    72:53:4a:03:14:54:71:ac:d6:7a:27:99:43:70:bb:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9F:AF:5E:D0:4F:70:68:8D:68:95:52:EF:EF:49:17:E6:A5:AC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/54c86c97-24e0-393e-a6fb-f9df3edddee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7580:f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:44:41:8a:5a:69:e6:b5:c3:1a:d0:8e:02:d6:3a:ce:49:d1:
         84:cf:e8:1b:3b:0a:18:97:39:36:78:88:fe:61:3f:1d:1b:ed:
         ce:2d:75:48:48:d0:3f:38:17:b1:69:e3:c3:99:51:29:23:d5:
         32:57:b7:09:8e:4e:17:3b:f5:6f:a3:a1:b4:2e:2f:49:33:d3:
         18:a2:c7:a9:7b:93:35:0d:d8:ce:19:fa:d3:df:97:a8:a5:6a:
         7b:16:da:5a:86:cb:90:d6:7d:6b:15:b0:e9:22:89:28:75:54:
         28:30:f0:c8:7a:ea:15:44:5c:50:2c:36:b7:b5:e6:49:bc:ba:
         ce:85:b8:94:71:96:49:be:de:ce:58:9d:f9:d8:d5:93:0d:de:
         57:f1:33:18:f4:94:80:7e:d5:31:c2:24:bb:5c:ba:1d:7d:5f:
         b6:b9:28:c5:a7:d2:b1:83:d3:85:06:17:b1:3c:a7:8f:e6:04:
         b2:99:82:dd:1b:34:39:56:5b:86:9a:6a:3d:93:f8:8f:34:9c:
         dc:46:e0:a6:24:58:a8:59:e5:3b:57:10:fd:3d:66:a6:49:fd:
         dd:1e:b4:4d:fc:1d:1b:1f:d0:b9:42:99:83:09:e2:f6:a1:ff:
         8a:9d:75:50:28:ac:73:f1:3c:fd:4b:e6:92:9d:ff:a3:b8:fa:
         b9:f9:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:01:15 2026 by rpki-client