Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d9dbf9-0454-3830-b46b-05b5333a1441.roa
File:                     f3d9dbf9-0454-3830-b46b-05b5333a1441.roa (raw, json)
Hash identifier:          Oessxne5BeUopC8U3Zh1Cg7n6P3gOfioNJ0nLB1kTMo=
Subject key identifier:   2F:AC:A0:3B:A0:97:19:CB:39:07:FA:B8:10:72:D4:BB:3F:58:15:ED
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E5BAF5E09A62972042C15FD80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d9dbf9-0454-3830-b46b-05b5333a1441.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        2606:4700:311c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:5e:09:a6:29:72:04:2c:15:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=758c4f27-eb57-4586-ab46-3f7eef113853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:5d:0f:70:04:09:d8:9a:63:1f:59:75:e6:
                    ea:66:e0:7b:d2:97:9b:10:be:34:50:00:ed:e6:a6:
                    f1:4f:57:49:e3:04:5c:2b:ef:69:d1:fa:5f:7e:38:
                    72:c6:13:42:28:a3:a6:2f:91:c7:ca:b6:91:dc:37:
                    e8:25:50:76:ac:fc:09:4d:4b:9f:5c:0c:a0:9d:bf:
                    24:9e:70:ed:34:bb:7a:6a:1d:3f:3f:94:fa:5d:de:
                    e5:2d:06:fa:9b:7e:92:e1:8e:98:4a:84:be:a8:55:
                    ee:93:d6:58:8c:07:8e:64:32:46:7e:6f:2b:b6:de:
                    75:78:7b:ed:94:c5:d3:06:68:5c:1c:85:37:f9:ca:
                    0d:78:28:99:7d:a1:30:1e:d7:40:4c:0d:62:43:d8:
                    c2:ab:ab:48:e1:d4:bb:b0:77:76:02:a4:ff:4d:b9:
                    26:9b:20:14:b9:bb:70:ca:0a:55:ab:b9:41:8b:94:
                    26:c0:b1:be:ec:a5:f5:21:69:98:24:47:5f:92:b0:
                    27:28:dd:15:2f:11:6c:45:4f:4e:47:9c:bd:ad:5e:
                    78:97:44:06:83:fe:d2:9d:07:8b:6a:2a:c8:3c:da:
                    51:e0:68:4b:eb:2c:84:5a:75:46:29:af:26:b1:fe:
                    98:1e:d6:b7:fe:ae:90:49:2b:03:2a:5e:ea:5d:82:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AC:A0:3B:A0:97:19:CB:39:07:FA:B8:10:72:D4:BB:3F:58:15:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d9dbf9-0454-3830-b46b-05b5333a1441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:311c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:85:71:7d:e5:48:9d:1a:53:ee:6e:98:22:31:9b:41:56:f8:
         a8:2f:7c:2d:09:eb:44:96:22:52:54:8f:90:e8:a5:30:b2:c4:
         0e:23:9e:73:33:5d:dd:93:6f:04:a5:3a:76:7c:62:b8:22:1a:
         ee:50:fb:a7:5f:84:70:ab:93:09:32:c2:e1:19:a4:cc:e1:53:
         83:1b:5d:8f:9d:52:13:b5:0e:d8:19:70:6e:4b:bf:be:fd:82:
         10:dd:51:d5:48:60:6e:f3:58:02:a9:ef:bd:ac:22:f4:3f:c7:
         78:0d:52:55:a4:b0:44:8a:93:de:08:fb:8b:77:65:5f:1f:c2:
         de:26:a2:3b:6d:54:24:f0:9e:9e:d9:9d:fd:fe:b1:95:15:07:
         d7:2e:96:94:9d:03:d8:ad:df:ee:9f:30:51:f6:1d:cc:00:b9:
         2b:3f:b2:9c:a0:c1:f7:2f:ce:32:ea:ba:38:1c:11:41:96:8a:
         6d:c6:df:9c:ae:91:58:50:dd:14:fe:c3:22:46:c9:b1:30:50:
         53:b1:6d:2f:f8:2b:16:9d:bd:61:75:65:0d:cc:0f:f8:dd:5e:
         c5:6d:b2:f7:29:fe:b6:4a:e2:04:86:7d:d3:83:ee:9b:f8:6b:
         eb:6b:f7:8e:f0:d5:fd:b7:68:6e:c9:9a:2e:d6:d5:b8:a3:3f:
         67:8b:52:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:49:56 2026 by rpki-client