Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed400f4d-93ee-3890-8e48-ee32bb3e20ca.roa
File:                     ed400f4d-93ee-3890-8e48-ee32bb3e20ca.roa (raw, json)
Hash identifier:          jD1Q6nRysd+VnYDxBVNJbAo9QDt1XrnhwV6c5V808NU=
Subject key identifier:   1B:24:07:67:C6:9C:D2:23:D6:8D:BB:90:B1:90:F6:6B:5B:E5:8D:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E31CF279668FE875392FFF700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed400f4d-93ee-3890-8e48-ee32bb3e20ca.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     7016
IP address blocks:        2603:3007:2700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:27:96:68:fe:87:53:92:ff:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=0224dc8c-4a76-4750-abd6-99c72fe270ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:83:03:9c:5e:04:cf:70:18:39:7f:49:f3:
                    d5:e7:c4:9e:1d:a4:64:7a:be:0a:e4:a1:1c:e2:55:
                    82:fc:74:20:72:06:88:ca:d9:6d:56:fa:94:aa:85:
                    60:3d:25:2c:49:75:2a:80:a5:fd:9f:92:bd:da:12:
                    70:2c:0c:67:83:ec:46:5d:34:80:bc:05:6a:1a:29:
                    e3:38:a2:7a:a4:d5:00:01:78:f0:c7:a8:be:83:44:
                    f9:6e:f2:4a:d7:9a:f6:9e:c6:d3:95:7b:9f:2d:a8:
                    40:da:0e:a8:31:d1:9d:ad:b3:e2:04:13:fc:ae:5b:
                    68:3d:22:9e:6a:86:38:f0:fc:e2:33:02:e7:2a:18:
                    72:a5:aa:c0:94:d5:b2:33:2e:db:0a:a6:d8:13:f1:
                    8d:d9:a0:b7:9e:ed:d5:1f:7a:af:fb:39:47:27:00:
                    5a:3d:65:4e:f4:82:ee:71:d6:f1:5f:3e:be:15:80:
                    54:89:42:2b:65:2f:16:d7:1d:b0:84:39:c1:8e:51:
                    97:ff:49:95:d0:8e:fc:b8:33:be:95:87:d4:fd:16:
                    72:de:14:e8:f5:04:41:1a:4b:27:25:42:6b:59:3f:
                    f2:ac:da:b6:cb:e9:5a:3f:44:bb:61:9d:30:11:13:
                    0b:8a:2f:27:0f:e3:1b:a1:dc:26:db:e5:ab:71:51:
                    7d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:24:07:67:C6:9C:D2:23:D6:8D:BB:90:B1:90:F6:6B:5B:E5:8D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed400f4d-93ee-3890-8e48-ee32bb3e20ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3007:2700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:37:77:67:90:b7:e4:57:a9:ec:ac:a2:89:10:83:3d:7b:ce:
         4b:e2:61:94:0b:55:a5:54:28:62:ea:ca:b0:d3:c2:bd:99:4a:
         7a:6d:72:61:97:f2:1d:22:31:fc:93:99:7f:ea:b1:14:5b:91:
         99:de:ea:76:d1:6d:f5:f9:b4:77:ad:2a:63:ab:e9:2a:8f:c8:
         e5:56:a9:2a:e5:28:41:08:72:86:d9:2a:29:50:b1:aa:39:3f:
         1e:12:c5:8a:11:0c:7c:a3:56:e4:a8:d7:02:4f:b5:b4:b6:9b:
         a2:5c:80:ee:8b:64:30:48:34:6c:b5:c4:d4:a4:66:9e:c1:a8:
         c8:a9:a1:be:f0:99:a3:e8:7c:e8:a2:1d:39:47:36:d1:f8:44:
         e4:38:a9:74:a9:3b:6c:35:d5:09:6f:e9:4a:73:4f:74:e1:28:
         a1:5b:4d:59:53:72:33:c4:0e:54:ef:1e:8d:4d:02:52:de:95:
         64:1a:3b:a0:a3:9e:9a:e2:89:51:19:77:2f:29:c1:aa:75:ee:
         ca:40:01:14:38:aa:5b:db:ba:0b:ae:f9:72:9f:6d:3e:98:b5:
         ef:90:8f:79:b4:99:6b:fe:bc:66:31:a3:b5:c8:5e:12:2f:61:
         82:fd:84:3e:12:16:ac:b9:80:cd:3f:b8:4d:03:76:52:29:02:
         b4:c4:ea:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:21:18 2026 by rpki-client