Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d1d01cf7-7088-3372-a2e0-393efb23b0d8.roa
File:                     d1d01cf7-7088-3372-a2e0-393efb23b0d8.roa (raw, json)
Hash identifier:          G+V+exJU6QY4zybKN+dqQPs2f2esW6tRJDRKP+jG0LY=
Subject key identifier:   1A:B1:3D:52:FC:04:28:7D:06:38:3E:48:FC:03:DE:78:83:71:86:77
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584E3785FD255D9AFF1E26DAB7E0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d1d01cf7-7088-3372-a2e0-393efb23b0d8.roa
Signing time:             Thu 18 Jun 2026 22:07:57 +0000
ROA not before:           Thu 18 Jun 2026 22:07:57 +0000
ROA not after:            Wed 16 Sep 2026 22:07:57 +0000
asID:                     26496
IP address blocks:        2603:b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:85:fd:25:5d:9a:ff:1e:26:da:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jun 18 22:07:57 2026 GMT
            Not After : Sep 16 22:07:57 2026 GMT
        Subject: CN=ea5ed7bd-a8ee-4fe8-bc01-bd89307e37bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:f1:be:4c:fe:42:3c:fd:b1:ca:ce:0b:cd:
                    70:25:b3:47:c0:ce:85:46:d7:27:1d:4c:bf:d4:94:
                    59:f2:09:53:7d:ee:e5:0f:c5:bb:6c:10:36:f6:a0:
                    95:82:70:1e:aa:bb:dc:7a:3f:72:fb:d5:3d:32:a5:
                    07:17:59:b3:c4:0c:10:2e:17:1a:44:92:01:34:f6:
                    05:39:bd:74:2a:dd:be:1a:20:8c:36:5f:da:13:0f:
                    a0:ad:0c:17:05:43:43:68:23:20:02:16:cf:67:64:
                    02:bd:31:03:a3:41:05:33:7d:ed:43:bb:79:b2:94:
                    93:fc:fe:6f:ce:cd:d3:69:08:8f:32:83:4a:4f:09:
                    bc:c3:84:aa:9b:58:f2:a6:9b:80:23:3d:b7:45:61:
                    a7:7c:05:0b:a1:b2:6e:d2:45:73:49:5e:88:42:4e:
                    6b:7a:47:cb:0f:b7:97:cb:92:84:ec:26:d0:05:43:
                    be:cf:a4:21:ab:78:68:09:70:25:49:fa:4d:33:8f:
                    c8:6b:3d:f5:66:38:62:c9:5b:2a:18:4c:b8:62:fe:
                    8a:66:69:3c:1a:75:f4:ca:f9:e1:b9:46:e3:29:b7:
                    75:82:6d:7e:20:be:9c:2f:ad:43:1e:01:4d:94:0e:
                    25:be:a9:52:62:93:d1:46:a1:38:95:85:64:b7:76:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B1:3D:52:FC:04:28:7D:06:38:3E:48:FC:03:DE:78:83:71:86:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d1d01cf7-7088-3372-a2e0-393efb23b0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:f5:c8:68:ea:0c:74:b6:be:b0:dc:de:ed:7a:3f:43:ac:
         84:78:8d:2d:89:89:83:20:9e:67:ba:a0:00:00:8b:3c:12:7a:
         46:7f:21:3b:db:a0:4c:0e:5f:af:05:c8:3a:f4:75:f3:27:a6:
         e1:37:f9:ee:51:b3:82:e4:35:f6:23:03:d6:d9:be:35:5a:10:
         d8:0e:28:66:0c:26:3e:53:c3:fd:8e:3e:51:70:e1:ef:64:af:
         fb:67:50:78:75:9c:e2:69:07:78:61:23:88:b0:0a:fd:af:b7:
         f6:9d:10:a5:0b:37:b7:f3:4b:c3:98:13:26:15:70:72:a1:a4:
         96:cb:4f:17:aa:af:79:3e:d8:28:d7:22:59:e7:7e:5a:61:d9:
         e3:64:d3:c7:87:44:0b:81:71:61:71:95:82:e4:2b:3e:37:5b:
         6e:f5:f3:7d:80:4e:9d:82:95:75:6c:0f:f5:c2:ed:24:7f:d8:
         0d:91:ca:94:55:07:30:35:ac:ba:5b:1c:55:d2:85:d5:85:bd:
         51:8d:dd:00:a0:c8:06:17:f4:37:4e:f3:3d:96:1d:93:fd:d6:
         db:6f:74:a5:08:59:e7:c2:95:ec:24:a7:cb:24:fd:16:72:db:
         cc:52:66:d4:fc:01:7e:9a:87:cf:eb:13:d2:c1:f0:ca:a9:91:
         47:f2:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:55 2026 by rpki-client