Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/6b2c34de-3bb8-3abb-9623-16170e866694.roa
File:                     6b2c34de-3bb8-3abb-9623-16170e866694.roa (raw, json)
Hash identifier:          2377Q6GAWunrWMETUqfHjwuYtREHy82PKWYAwRGn89c=
Subject key identifier:   A5:0F:F7:EC:1F:1C:4B:7E:D3:22:0C:8A:16:B0:16:36:7D:68:1B:DA
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F4328584E2D9F1D84162FD4D158869300
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/6b2c34de-3bb8-3abb-9623-16170e866694.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     7794
IP address blocks:        2607:6500::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:1d:84:16:2f:d4:d1:58:86:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=c99b2b39-ea6a-4e9d-b818-e326e9be2bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:21:1f:c1:cb:84:24:7e:10:6e:98:98:96:
                    1c:10:35:be:ed:d2:56:6e:f5:87:d1:f0:a0:c6:49:
                    9b:ae:bf:b2:d1:ce:31:0e:9f:0f:04:a2:7e:ed:08:
                    68:7a:c1:7b:b6:20:33:b2:6f:ad:81:6d:6f:d9:7d:
                    47:9b:6d:43:eb:00:bf:63:bf:18:02:d8:2f:71:d0:
                    ee:96:c4:f4:06:c1:e4:25:d8:f8:27:bd:96:de:18:
                    2b:56:1d:ff:f8:e9:4f:33:27:54:8d:b5:a6:00:eb:
                    e4:5a:6b:bb:68:1e:db:45:9c:94:62:6b:a8:91:aa:
                    51:fd:77:29:70:32:49:80:0e:af:81:66:43:d9:1d:
                    99:62:5a:88:ff:d1:71:27:0b:b4:e8:12:2b:ab:e2:
                    f9:55:7d:8f:04:1f:59:79:de:13:1a:2a:a2:49:77:
                    f9:78:ff:7c:d5:59:b7:c0:d2:49:b7:74:4e:b0:3d:
                    18:99:fb:6a:13:10:a8:55:4e:ac:1d:ee:b7:32:9e:
                    2b:e9:80:03:97:41:04:8d:f5:3d:7f:4a:7c:54:43:
                    61:ae:fe:6f:27:10:26:27:47:3f:31:64:23:9f:44:
                    cf:ab:05:e8:9b:5f:a8:76:19:86:e7:08:fa:6c:62:
                    ec:85:a5:0e:54:bd:19:84:72:94:cc:3c:62:14:41:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0F:F7:EC:1F:1C:4B:7E:D3:22:0C:8A:16:B0:16:36:7D:68:1B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/6b2c34de-3bb8-3abb-9623-16170e866694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:1e:2b:5a:69:45:51:90:e3:e9:e4:c7:5b:0c:12:26:17:26:
         a2:7d:e3:0c:47:fe:ce:6a:62:0c:ae:cd:f7:7d:84:a4:96:90:
         07:88:e5:64:6d:b6:50:84:b5:c6:a0:b0:ad:d6:f0:df:ae:56:
         f3:34:36:17:f6:fc:3d:67:a5:8e:10:12:f0:32:d7:9b:4c:bb:
         75:a5:96:c9:20:aa:48:d3:28:ea:92:57:83:27:65:61:7e:12:
         26:ab:76:b2:ca:e0:e4:0d:77:0a:10:c6:f7:7b:c5:a7:f3:72:
         3e:0a:d0:fe:0b:77:0b:0e:4b:71:d5:a2:c0:f5:1f:02:09:29:
         0a:99:8f:16:31:5f:b8:b2:0f:f2:5b:4e:9c:81:a3:c1:fb:65:
         eb:ce:d9:93:2b:b4:b0:73:66:b2:aa:62:d1:11:7d:23:2d:47:
         24:fa:ce:00:11:9a:2d:c3:1d:f0:2e:41:ca:74:92:00:07:11:
         3b:43:e2:3f:65:f4:13:50:12:f4:4d:e4:74:d5:5b:1d:4e:bb:
         43:c8:82:f1:b0:a5:5f:7b:63:6d:4f:d6:e4:b3:cd:17:a6:53:
         79:9a:0a:9a:0b:35:c4:d6:50:17:9e:2f:d2:a4:20:73:2f:92:
         87:80:d2:44:7c:2a:c5:9f:08:d8:90:78:88:49:73:88:0f:71:
         91:02:f1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:32:23 2026 by rpki-client