Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/065eb59d-7e95-3972-8ef2-0fd454c209e5.roa
File:                     065eb59d-7e95-3972-8ef2-0fd454c209e5.roa (raw, json)
Hash identifier:          eVBy+zWNDnVctbv8qR4uFYqNZDaVJljz4fkSK7Uxjn8=
Subject key identifier:   CC:C2:15:35:4A:F1:03:A3:51:19:1E:0C:89:7E:97:8E:03:14:54:E7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E5FDF603E05CF8FA2532E2170
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/065eb59d-7e95-3972-8ef2-0fd454c209e5.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        2001:418:8404:1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:60:3e:05:cf:8f:a2:53:2e:21:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=9d079744-0228-46e2-9adf-34dc02eec444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:a4:2a:39:be:80:ef:46:ef:dc:f5:82:1f:
                    51:90:8b:df:09:62:bd:71:bd:70:60:a6:0d:09:bc:
                    34:3c:db:58:01:50:96:4c:be:4a:11:7a:96:38:dd:
                    c6:a0:2f:b5:b6:1d:2d:8c:3c:21:a7:74:7a:e0:f7:
                    c3:93:a6:f9:c8:2f:c3:c0:35:bc:1b:fb:9a:a7:84:
                    66:86:93:42:1c:99:a9:e5:bc:22:61:0b:da:ad:f7:
                    44:9b:65:d9:be:13:9e:ba:87:7b:ab:b1:32:d2:5b:
                    ea:db:df:24:ec:50:0d:00:67:02:83:d6:7a:82:c0:
                    a3:f6:e8:e3:c7:73:6b:ef:04:21:17:00:71:38:e9:
                    a8:f2:1e:8f:62:e2:96:ff:06:26:4e:bb:09:96:d1:
                    b3:f7:1e:3e:0a:fc:ca:e5:24:63:e0:c9:cf:7b:95:
                    d9:c4:5c:0b:d2:6d:5f:6b:21:fd:b1:3e:0f:01:42:
                    a8:b6:00:68:60:1e:56:ca:1c:6d:18:3b:8a:cf:d0:
                    65:de:c9:86:8e:12:81:39:c4:74:e7:c0:d9:d2:d7:
                    fe:90:7c:68:f8:50:c4:aa:99:8b:0a:62:01:63:60:
                    05:6f:86:d9:24:ac:d2:ad:81:71:43:7e:42:ce:d2:
                    3a:e3:13:b9:fa:75:b1:a5:e2:09:f7:eb:f8:94:49:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C2:15:35:4A:F1:03:A3:51:19:1E:0C:89:7E:97:8E:03:14:54:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/065eb59d-7e95-3972-8ef2-0fd454c209e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:8404:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:4a:4d:d6:73:d7:75:c6:69:61:8b:a9:b3:2c:c3:95:1d:6a:
         21:ca:66:0f:12:9b:f2:b4:de:0c:d3:f5:5d:de:fa:88:d3:af:
         5f:f5:78:e1:41:56:f7:bb:e0:43:4e:91:57:37:a7:ef:56:4a:
         39:d3:61:1f:d8:1d:bb:a3:a9:5d:26:e1:10:2f:9d:a6:e4:e5:
         b7:ab:64:2a:df:5a:ad:b1:e3:0c:41:d7:a5:32:8c:54:35:55:
         6a:fc:47:8f:58:7a:95:17:59:39:7e:15:0d:0a:81:a7:64:99:
         64:f6:3b:1e:28:3d:f6:2d:2a:6c:a6:0a:b7:68:ff:2c:e4:58:
         07:cd:d4:b2:0b:da:19:da:1a:40:e6:0b:18:1b:a2:1f:f9:46:
         91:8b:35:db:38:49:7c:d8:66:1c:47:8f:4b:97:04:ae:41:dc:
         7d:07:5e:7a:b8:b2:f8:ce:55:2f:a3:29:a5:95:64:17:7e:f9:
         fc:50:bc:ff:7c:0c:00:3e:19:ef:00:9b:2a:c0:ea:67:98:0f:
         e6:33:20:de:25:31:08:c4:5c:84:5f:5a:23:82:d2:09:74:e6:
         86:38:fd:ef:9d:ed:8d:e3:b3:d5:a0:28:a7:f3:73:1f:9c:db:
         62:9e:09:98:db:82:ff:d9:ba:f1:86:4f:a9:e5:de:2b:4f:1e:
         ba:e1:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 03:04:43 2026 by rpki-client