Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/137d7fa7-0cb6-336f-a1d4-c72889789e34.roa
File:                     137d7fa7-0cb6-336f-a1d4-c72889789e34.roa (raw, json)
Hash identifier:          qjFCxosyAA+1sMxJsy+FiFrcg9BqfMl0Aq2PsdnCfEI=
Subject key identifier:   8E:33:9D:CC:B4:9B:DF:CC:D4:AF:2D:D0:28:2D:8B:3F:51:48:C7:35
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584EA788D3D0CC6C90438CAC4480
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/137d7fa7-0cb6-336f-a1d4-c72889789e34.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2601:5000:3000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d3:d0:cc:6c:90:43:8c:ac:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=48a8c09a-9487-4277-bfdc-9fb9bdd2877f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:88:4a:d4:94:cc:ff:36:56:2d:1f:33:37:
                    fb:3e:d5:b0:b8:3f:7d:dd:3e:c5:ea:ce:04:ee:16:
                    56:24:76:5b:4f:21:24:6f:9a:eb:19:70:c3:5b:e9:
                    19:81:e2:17:08:3e:c7:8d:5b:b7:9c:87:ee:65:39:
                    23:d1:85:ea:4a:c8:0c:63:1d:71:d7:8d:4e:7d:9c:
                    8b:72:55:4a:81:3e:0c:5b:18:77:12:89:f1:4c:da:
                    79:89:6e:dc:e5:fd:d5:7d:65:ac:ca:19:36:dd:27:
                    2d:5e:63:49:20:1c:71:ae:75:7d:14:cb:24:85:7c:
                    3a:e3:ea:47:52:53:e9:8f:05:e5:83:01:49:40:ab:
                    0a:1d:cd:3a:27:da:31:ba:5f:40:01:7d:46:a7:65:
                    73:1e:00:aa:7f:3e:a3:01:69:35:10:9e:0a:e9:cc:
                    e2:59:5e:71:15:46:6a:6f:4b:08:8c:db:c0:da:35:
                    a4:a3:35:90:43:17:39:c0:06:03:d2:6e:71:67:f5:
                    51:50:e9:4c:ae:9a:74:07:29:5b:cb:22:5d:64:8f:
                    bf:6c:2e:ab:b5:00:88:12:e6:7c:bd:58:08:21:35:
                    c5:e2:5f:e0:fa:00:92:14:bc:0f:07:78:9b:67:ec:
                    bd:18:cd:4f:8b:85:18:a7:c5:2e:2b:c0:94:09:f5:
                    60:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:33:9D:CC:B4:9B:DF:CC:D4:AF:2D:D0:28:2D:8B:3F:51:48:C7:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/137d7fa7-0cb6-336f-a1d4-c72889789e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:5000:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:23:cc:61:98:4e:1d:56:96:b1:12:b9:9b:97:56:1e:b0:47:
         4c:f7:9b:65:16:84:3a:e2:c5:0a:c5:27:47:f0:4b:d5:a8:91:
         07:96:16:53:aa:d8:54:6c:00:0c:50:90:de:55:04:ce:30:13:
         4c:6e:8d:55:ba:26:b6:ee:c8:32:4d:97:4d:30:41:97:d5:c7:
         c6:44:11:03:5c:c0:34:53:4a:30:50:15:06:76:20:87:0f:0a:
         bf:7d:0f:c4:20:ac:af:4d:ee:0a:ef:62:b6:78:42:10:07:f5:
         68:88:bb:a8:b9:cf:35:2b:02:75:32:0d:ea:e7:9b:56:91:84:
         02:3f:84:26:16:38:b6:9d:ad:af:2c:b2:83:7d:e3:e6:65:58:
         d8:db:e6:0f:e1:14:1f:e0:6e:2a:d3:bf:db:75:b6:38:85:20:
         e5:3f:6b:18:76:f1:ea:1f:e6:76:e9:27:ab:f9:a8:5f:fc:dd:
         59:ad:69:77:a2:10:96:e5:42:03:c0:0e:19:94:e7:ab:1c:09:
         72:10:5d:54:c1:d2:da:4a:c7:47:86:77:7f:6e:9e:b5:28:a5:
         32:23:40:b3:34:27:7a:a2:ee:c3:a4:a4:ea:d3:ad:d2:bd:5d:
         54:66:90:d7:03:e5:8f:7f:79:3d:da:f8:a1:6a:fd:cb:cc:b6:
         21:18:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:03 2026 by rpki-client