Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/fc7ff8ef-be57-3b2d-825e-8408a593d171.roa
File:                     fc7ff8ef-be57-3b2d-825e-8408a593d171.roa (raw, json)
Hash identifier:          P4VgaksqtXi1CeaAcp/OUroOxUmVvpiDgRSNCcWsd38=
Subject key identifier:   83:EF:36:F7:A1:2D:91:C5:D7:4E:0D:B4:C1:F1:43:76:0C:16:6B:92
Certificate issuer:       /CN=53f3af06-68ea-4591-9526-0c1fce331651
Certificate serial:       010D0C9F4328584E2D9F152276127A82364D7D00
Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/fc7ff8ef-be57-3b2d-825e-8408a593d171.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     0
IP address blocks:        2001:504:26::/48 maxlen: 64
                          2001:504:26::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:15:22:76:12:7a:82:36:4d:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=d4faf409-b4c4-4afe-9cdd-00c51296cb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:c2:5a:03:7c:37:4c:6d:b6:ff:8e:af:a5:
                    08:10:ca:2c:63:c7:7f:cc:ab:75:b4:3b:e5:15:a1:
                    f2:23:ed:f0:76:53:2b:d4:c4:44:a7:a9:67:5e:58:
                    d1:6d:7d:b2:ea:61:aa:ef:05:38:f2:8a:28:20:c2:
                    eb:69:85:02:1d:70:66:ec:0d:24:4a:13:7c:e4:c6:
                    8c:f0:78:00:57:bb:67:a9:86:b1:c9:b3:b9:aa:ad:
                    69:c9:f6:3e:ea:a1:e7:a2:1d:ff:61:22:25:a4:4f:
                    2f:17:a6:96:0b:59:91:70:a4:fa:b7:78:90:b0:5a:
                    e4:05:14:1a:bc:af:7c:13:85:e1:da:e5:a7:07:19:
                    21:eb:6e:ae:e4:fe:1f:ce:31:6b:05:c7:93:c6:2e:
                    bc:0e:6b:7e:ed:0d:d0:53:99:86:56:c6:7c:4d:15:
                    06:27:a7:ef:c6:b9:90:6a:e3:52:1a:d0:02:48:08:
                    47:d4:ef:cb:a7:83:8c:f2:0e:96:7a:b0:c0:10:be:
                    05:e5:12:02:c8:dd:47:a8:3c:b1:e0:c1:d5:e2:e9:
                    73:53:47:2d:a4:19:fe:b7:c9:02:29:28:75:ea:d4:
                    df:6d:11:b6:f3:e6:2f:62:be:bf:69:e1:4a:32:9a:
                    88:08:e2:e6:7d:be:60:da:16:d4:37:3c:50:9e:2d:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EF:36:F7:A1:2D:91:C5:D7:4E:0D:B4:C1:F1:43:76:0C:16:6B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/fc7ff8ef-be57-3b2d-825e-8408a593d171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl

            X509v3 Authority Key Identifier:
                keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:64:ea:80:6f:fa:9b:75:e8:68:62:cc:2a:85:3b:47:68:d4:
         81:86:02:2e:27:91:d7:83:29:db:f9:d2:59:44:ac:9e:37:30:
         fb:14:b7:64:45:ab:08:0d:b6:28:70:66:63:74:33:48:4d:9c:
         4e:e7:1a:68:6d:36:cb:82:84:7d:80:dd:96:00:50:78:d5:b7:
         15:59:29:77:e9:e7:c3:8e:12:bb:61:19:4c:7c:4c:6c:ec:b7:
         2b:b4:fa:72:fb:09:fd:f6:b9:44:39:7e:09:1f:f5:7b:2a:57:
         66:db:d5:44:e5:a7:bb:0f:4c:16:df:be:08:b9:41:06:bc:b0:
         4e:54:93:c1:7e:48:b6:b2:55:39:c4:29:24:77:52:c6:59:f1:
         0c:dc:1b:eb:af:22:3a:1d:86:8b:38:9f:34:29:00:d5:55:63:
         99:6c:61:d4:ed:07:f8:d8:db:28:43:82:88:b4:6d:f8:3f:54:
         d2:9f:ee:9a:3a:54:99:4d:d3:09:1d:06:35:c9:1d:55:46:ad:
         ad:dc:68:f3:6e:77:49:86:df:e7:20:54:d2:32:fd:d3:4b:bc:
         0a:ce:4b:18:68:b5:f7:98:8c:a3:5c:ba:3d:eb:dc:60:51:7b:
         4d:6f:ca:dc:05:6b:76:06:fd:f2:12:93:e8:57:16:20:3d:70:
         a2:e7:2a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:47:15 2026 by rpki-client