Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa
File:                     1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa (raw, json)
Hash identifier:          JhY5YCOi8FNKv6KIDvVtJnTGybCMuMFZE0f1eiNgALM=
Subject key identifier:   2A:9A:AC:5B:1F:AA:B5:42:52:7B:AC:09:42:98:E5:A3:4E:71:04:DE
Certificate issuer:       /CN=f357e341-9d26-4129-b5e8-c23c09471ee7
Certificate serial:       010D0C9F4328584EC20C6B97799B8D677C648780
Authority key identifier: E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     32244
IP address blocks:        2620:139:5002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6b:97:79:9b:8d:67:7c:64:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f357e341-9d26-4129-b5e8-c23c09471ee7
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=ba155a06-1aba-484d-b8d3-63a733a94fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:32:f6:e0:bb:74:eb:13:4a:cc:a8:1e:53:
                    34:32:37:ee:22:0f:92:57:47:e4:74:90:76:e0:a7:
                    11:4d:2a:a2:5f:d5:8c:fc:a6:d9:df:28:d4:04:69:
                    44:6d:a3:6a:a0:d3:4d:e8:c8:57:de:52:6e:77:20:
                    83:67:aa:76:2b:ee:6b:90:35:63:97:a7:61:c1:79:
                    5b:91:e0:8c:18:1b:6d:dd:5e:30:19:f4:af:76:4b:
                    51:58:7e:ff:d4:50:6e:89:1f:6f:a9:84:2b:55:73:
                    3c:7c:b7:86:8b:ac:32:49:08:51:56:2a:3f:e3:f7:
                    0b:0b:ff:2d:b6:0d:c5:04:64:d2:f7:00:62:e4:3e:
                    2f:b8:f6:2a:16:c1:07:8d:3c:88:7a:2f:1c:77:06:
                    e3:c5:d5:f0:45:58:3e:68:69:fd:d6:e2:b2:a1:92:
                    94:f6:0f:15:d9:b7:20:96:73:2b:47:f9:ae:72:dd:
                    82:fd:ca:93:3f:ac:31:82:93:bf:dd:1f:61:9d:bf:
                    7a:d6:10:dd:17:03:10:82:4d:46:d7:25:de:ec:69:
                    1e:7e:b9:61:ca:e4:59:3c:94:44:b1:4c:85:1f:40:
                    9e:5a:dc:1b:c7:7d:21:aa:d5:e8:b0:bf:27:a4:bc:
                    8a:7c:86:2a:79:ad:bd:4b:71:12:fe:41:a8:df:5e:
                    09:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9A:AC:5B:1F:AA:B5:42:52:7B:AC:09:42:98:E5:A3:4E:71:04:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl

            X509v3 Authority Key Identifier:
                keyid:E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:139:5002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:dc:3a:97:85:56:6f:52:b7:39:7d:09:24:40:46:0d:97:d6:
         c7:f4:ce:a7:fa:06:c0:ca:c1:fe:d7:17:43:68:de:51:cf:52:
         9a:6c:92:a7:88:b1:b9:a5:8e:c7:ea:db:56:28:a6:29:b5:9b:
         78:e2:ac:35:97:57:9d:20:58:c4:47:40:50:06:8d:58:9b:c5:
         d7:1b:ed:9b:7a:ed:17:a4:7f:98:83:7a:15:0f:56:4b:d2:00:
         11:2c:7b:d2:f1:cf:17:51:af:c1:8a:01:b9:84:2b:ac:8b:13:
         61:46:c3:36:dd:51:3c:26:20:95:bd:f2:34:39:e3:17:37:cf:
         97:30:be:0e:5d:cd:06:7a:f5:c0:9a:ea:00:eb:98:d8:e6:76:
         36:35:54:24:2e:f3:1a:97:bd:19:08:f3:77:74:9a:de:95:35:
         72:93:9e:a5:1b:e6:72:71:3a:53:9b:a1:9e:94:1b:96:db:b7:
         18:4e:06:9e:3c:3d:5c:c3:96:95:5e:74:87:b4:ca:02:ac:f1:
         a3:a5:f5:da:20:d3:ff:11:76:2c:7a:28:0f:2a:78:74:bd:9b:
         b0:f0:48:3f:cf:93:8b:64:be:2d:0e:67:a0:a2:a7:aa:d1:62:
         b5:bc:4a:1d:0d:4a:4f:50:0c:ab:5c:b9:fe:e4:aa:88:91:de:
         4f:33:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:45:11 2026 by rpki-client