Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/616a82f0-d85f-312e-8300-21e89d1b0b01.roa
File:                     616a82f0-d85f-312e-8300-21e89d1b0b01.roa (raw, json)
Hash identifier:          hYDeWQBVtHA3xlZ2ObCxxkRMQY+tPlGzTIE00CA74uE=
Subject key identifier:   DD:A1:FC:83:8E:22:D4:FC:6C:97:44:6A:60:7A:40:B5:49:D1:79:BE
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584E736A23D42033C129FC0CEF00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/616a82f0-d85f-312e-8300-21e89d1b0b01.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     6079
IP address blocks:        2601:2008::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:23:d4:20:33:c1:29:fc:0c:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=71ea81c4-500a-4378-b4cd-8b844816d4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1e:62:60:5a:c7:1d:c5:f6:68:92:75:de:9b:
                    6f:6e:8b:0d:f5:86:2b:1c:c1:40:a4:ac:38:ce:ca:
                    4e:8e:de:1f:25:ec:82:22:5d:a6:dd:01:65:fc:7b:
                    f1:e8:4a:01:5c:16:de:de:34:1b:9f:e0:87:47:42:
                    74:fd:6c:f1:9f:79:57:d3:10:a9:14:99:92:d3:d0:
                    bd:04:78:1a:b8:f1:bb:ef:4d:1a:c7:f7:60:80:e2:
                    59:8e:8e:f1:2f:45:18:6d:8f:ec:31:23:18:31:c4:
                    0c:e4:0f:7e:f7:ba:0c:96:df:d7:8f:49:1c:06:57:
                    91:98:53:21:1e:f1:b9:a5:a7:91:46:88:1f:d6:d9:
                    fd:b5:c2:91:c1:de:7e:2f:39:36:ee:b6:f9:13:c4:
                    24:f6:99:c0:64:cf:02:18:53:3a:0f:07:0d:8f:36:
                    70:71:9e:4f:a8:54:80:e6:c0:16:fe:99:e7:3b:af:
                    0f:b0:55:b3:ae:f4:9c:f6:bd:b7:50:37:9a:fa:73:
                    89:30:fa:21:c5:3d:77:97:3e:cb:5c:e3:08:ec:8d:
                    20:60:0b:d6:ec:38:a2:6d:ed:46:ef:e9:6e:83:0d:
                    bb:43:f2:cc:06:58:ae:fa:08:f0:d2:02:a1:66:bd:
                    86:c1:16:3c:93:fc:96:04:eb:b3:aa:a2:d8:17:05:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A1:FC:83:8E:22:D4:FC:6C:97:44:6A:60:7A:40:B5:49:D1:79:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/616a82f0-d85f-312e-8300-21e89d1b0b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2008::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:5a:a1:0e:2c:d6:31:bf:e0:13:2b:50:c8:31:a9:66:09:e4:
         87:14:f4:86:ae:60:8f:47:6b:f5:e6:f0:d2:7f:83:c4:50:80:
         e5:3d:97:65:ce:b9:e5:be:6f:93:ee:78:22:2d:59:10:1d:09:
         26:aa:42:d4:b7:f6:bb:82:e0:1c:a9:73:f8:ac:da:b5:ad:4c:
         1c:4d:ca:29:2b:f2:97:01:c2:cd:3a:86:28:6d:03:5d:36:58:
         8c:26:d6:c5:10:6b:2b:b0:15:e0:1c:61:80:05:7b:06:95:01:
         93:a2:5f:2d:b3:c3:5a:a6:1b:08:b2:74:c6:4d:6c:0a:9d:fd:
         d9:07:4a:49:0b:5a:a6:9d:ac:31:20:66:29:48:31:40:42:c8:
         b7:84:6e:3e:40:17:81:23:b8:31:f4:8d:b1:33:9f:6b:19:39:
         0d:b3:45:ff:69:bc:e5:42:56:5c:8d:43:73:17:88:d3:ac:62:
         46:a0:b4:85:5b:7a:5f:79:61:75:a7:40:15:04:b8:f7:69:55:
         47:2d:52:cb:2c:8c:b3:9d:9c:18:a9:ee:34:da:c1:bc:82:43:
         44:40:7c:05:0a:15:17:40:61:c3:f6:2c:c3:b7:f2:b0:ef:b5:
         c8:1c:8b:0d:4f:af:11:14:2b:0e:a9:cb:21:2d:87:e9:3c:f6:
         42:fe:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:49:47 2026 by rpki-client