Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
File:                     13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa (raw, json)
Hash identifier:          mX4qUzjVVFK4bPEzAmthN9L4OPHhnx35PFVrNChySnc=
Subject key identifier:   4A:79:FB:E2:F8:60:1B:B9:C8:E5:8B:5E:7F:B7:5D:27:CD:2E:77:F9
Certificate issuer:       /CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
Certificate serial:       010D0C9F4328584EC20C6B6F579F4FD2C3E28A80
Authority key identifier: 00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     395460
IP address blocks:        2620:6:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6b:6f:57:9f:4f:d2:c3:e2:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=7c38f6c4-a93b-42c0-8dd1-ffc688698686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:ae:8d:b5:3e:c0:2a:67:0b:d7:0d:f3:10:
                    94:45:f4:a5:10:74:60:e8:26:08:a2:f4:2d:bb:a0:
                    3b:1d:dd:8f:44:6f:d7:99:13:f2:a4:56:21:01:85:
                    76:30:34:66:c3:81:29:3c:c8:92:4d:b5:3f:86:21:
                    75:5d:91:39:7e:8b:0e:8d:34:3f:f2:34:28:21:cb:
                    37:99:ba:61:f9:fc:0f:24:bc:ba:8e:0d:a1:ed:74:
                    ff:50:68:7b:1d:2e:f9:f1:07:f8:5f:db:a2:08:c8:
                    b8:f6:17:84:74:aa:47:5e:db:d7:d4:1d:34:9c:8a:
                    7d:12:71:e7:cb:a1:50:1d:8f:b6:74:71:81:61:a7:
                    d9:2f:9c:ab:1b:06:ea:f1:ac:77:19:1b:3e:77:1b:
                    2f:e6:58:c9:93:f4:f0:20:44:76:b4:ff:cb:d3:63:
                    e7:9b:06:34:20:64:8e:bc:dc:35:34:1e:80:6b:8d:
                    0f:46:54:8b:18:e8:0f:bf:19:f5:d5:09:c2:cf:6e:
                    a2:14:06:b4:3f:e6:70:c3:5b:c4:af:e6:f1:48:a9:
                    f9:15:22:fd:24:a9:b3:2d:a1:70:ba:ba:a9:d3:9f:
                    b9:39:cd:4c:b9:7a:dd:b4:0c:2c:cb:8f:c6:64:69:
                    14:2d:f8:02:db:82:47:a1:3b:a5:26:3c:fc:da:97:
                    ec:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:79:FB:E2:F8:60:1B:B9:C8:E5:8B:5E:7F:B7:5D:27:CD:2E:77:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:62:c1:fb:a8:eb:81:1f:60:e2:36:d7:cc:66:7d:09:0a:00:
         9b:40:f9:76:95:b0:ae:9b:b5:66:0c:c8:af:7d:f0:c2:d7:3e:
         38:f7:c4:ae:28:0c:d3:88:8e:dd:f0:ea:72:47:85:39:3e:3a:
         b2:9e:f0:cc:af:5e:40:98:a7:2a:99:8d:69:02:e7:b2:ae:df:
         c7:04:c4:fa:67:c5:7b:73:e3:04:ba:ef:38:71:bd:9e:2c:32:
         e4:33:ea:b2:92:66:f8:a7:94:17:ea:92:0e:86:8b:ca:9b:07:
         36:c9:7f:ac:d4:b8:34:ac:af:1a:86:1f:28:e1:bc:64:4b:c1:
         fb:4a:36:da:4e:6d:17:a5:2f:86:4a:78:1c:ba:87:9e:06:71:
         f4:d8:c1:57:01:ad:3a:07:20:34:b3:4a:8b:ff:2a:75:57:07:
         38:0d:20:06:52:0c:a4:9a:fb:cd:c7:60:fc:ee:fb:31:12:8f:
         21:96:bd:e4:20:84:ad:ec:64:e7:77:37:9b:65:a5:8e:5b:83:
         53:51:b4:39:39:20:dc:fa:67:a0:03:e7:b7:f7:7b:79:5b:5a:
         75:9b:78:05:9a:47:ee:fd:49:05:09:aa:6c:e1:1c:23:94:19:
         74:a8:2f:e0:20:b0:e9:fa:ed:03:99:d3:57:b3:b6:61:4f:02:
         59:f4:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:25:24 2026 by rpki-client