Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61415d2e-9d31-3007-b58e-7d7fbe2d21f2.roa
File:                     61415d2e-9d31-3007-b58e-7d7fbe2d21f2.roa (raw, json)
Hash identifier:          NBNZ/ZWaXtFOMRNjCXAKwSjXW15e8mbSnuGYuomv0fE=
Subject key identifier:   87:43:B3:08:11:5D:53:BE:54:01:D0:01:E2:F3:5F:18:07:98:3C:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E31CF246F3A1DF2D0734F7000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61415d2e-9d31-3007-b58e-7d7fbe2d21f2.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     22258
IP address blocks:        2603:23c1:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:24:6f:3a:1d:f2:d0:73:4f:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=83e02f9a-f47f-4729-94df-4ba4cb56c951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:cb:dc:6f:70:8d:82:42:48:3b:bd:fc:fc:
                    bb:5d:0d:50:9a:b2:eb:e5:60:65:ff:43:1d:fb:d7:
                    da:60:ac:5d:03:a9:19:58:d0:db:95:29:e3:e7:56:
                    91:e5:8a:86:ec:13:c6:a3:f9:59:87:50:b8:d8:b0:
                    51:1f:96:dc:c3:1d:7c:a5:04:c5:c1:9f:fc:f6:bb:
                    1a:40:90:ef:bc:17:05:62:d5:18:21:39:17:5c:62:
                    36:05:73:29:50:2d:da:fd:04:28:ce:6c:2f:c7:91:
                    99:83:dc:04:7d:fb:86:a1:db:3d:85:41:c8:29:04:
                    2d:35:35:7b:8f:ba:1e:c6:de:e7:1b:44:fb:84:dd:
                    66:d8:52:af:5e:32:8e:fb:b8:d7:a5:97:3c:fc:cd:
                    b9:79:f6:1b:a8:11:bb:f7:49:98:c8:1a:b0:6f:9b:
                    e8:82:96:12:1b:9e:a0:64:72:8f:22:4a:ef:31:1b:
                    1e:48:da:66:41:cb:75:85:05:c3:e2:4c:b5:84:79:
                    d9:ed:d6:db:0f:34:35:7f:b7:f0:c9:4a:bf:4d:0c:
                    31:05:ac:9d:2b:19:89:32:7b:58:1f:f3:af:38:19:
                    82:7a:1d:49:b0:29:cd:65:8b:83:0b:fa:96:6a:b3:
                    a1:c1:90:02:98:74:7a:64:de:a0:4b:d0:00:ce:2a:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:B3:08:11:5D:53:BE:54:01:D0:01:E2:F3:5F:18:07:98:3C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61415d2e-9d31-3007-b58e-7d7fbe2d21f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:23c1:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:9f:ab:ae:d9:eb:09:a2:bd:59:1d:d2:dc:9e:91:7e:3e:c4:
         d2:ea:d4:4a:86:fe:ed:77:1f:3a:75:90:db:0e:d3:92:30:42:
         87:23:6d:7b:a5:27:36:de:c6:2c:d4:dc:03:ab:c5:08:1d:b0:
         ea:40:2a:31:36:b2:38:3f:b3:e5:4a:f4:94:88:09:42:dd:cc:
         fc:9f:be:01:6f:87:a4:36:ea:e4:28:54:60:5b:59:e7:bd:8d:
         d7:19:f5:28:85:0b:b9:6e:2e:14:c4:14:93:6c:66:5a:7f:cc:
         44:f9:7e:3a:91:4e:d5:04:f1:e3:83:e0:1d:14:b9:21:1f:73:
         02:c2:68:4d:35:6e:10:dc:ff:3f:f3:30:47:5b:33:4f:30:3e:
         d6:b6:b7:66:b4:8e:10:38:cf:e1:20:7d:43:0d:23:e3:da:43:
         9a:c4:a0:51:75:95:4a:72:b6:ef:0a:13:c8:07:1b:4a:d0:83:
         57:ac:29:66:fd:86:17:29:ba:42:06:68:a2:79:09:ac:cd:2c:
         c5:df:6c:a1:13:ea:ce:23:cf:49:18:14:50:30:a7:a1:61:1c:
         6a:9e:75:6d:7f:7f:03:20:2c:78:60:78:66:08:d2:bf:84:72:
         83:e8:91:74:b8:f2:b5:6e:39:76:7c:6a:10:59:b2:84:8a:16:
         4b:a9:11:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:18:18 2026 by rpki-client