Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/8e210427-a5d8-3b90-aa63-345958770477.roa
File:                     8e210427-a5d8-3b90-aa63-345958770477.roa (raw, json)
Hash identifier:          HSBv9ZUh1cM/xntlX+KIOui4oK5KbFAdwRC4/YUKW0o=
Subject key identifier:   E5:2E:8B:BC:E0:84:78:E7:3D:FD:F8:93:2B:23:E6:BD:51:D2:A7:4E
Certificate issuer:       /CN=7fa61bcd-b5c8-449b-8075-79ae5d24ee0f
Certificate serial:       010D0C9F4328584EA797600CCD1EF7EC127D6E60
Authority key identifier: E3:7F:6F:FD:4F:C7:58:66:98:61:4B:A3:AB:2D:71:9D:3D:A0:D5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/8e210427-a5d8-3b90-aa63-345958770477.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397170
IP address blocks:        2602:f6bc:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:60:0c:cd:1e:f7:ec:12:7d:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa61bcd-b5c8-449b-8075-79ae5d24ee0f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ef1322b0-90ad-4f03-bec6-6d55df65e695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:34:be:6d:e1:39:01:72:c6:09:6d:31:f1:
                    77:76:88:a9:2a:62:e6:2e:f5:5f:32:f2:38:59:03:
                    cf:dc:17:2f:1a:d8:13:22:e0:ba:de:d7:36:8e:43:
                    d8:16:f7:fc:52:a6:f5:5e:3e:b3:bb:c1:c3:09:60:
                    76:80:ba:f0:8b:3d:06:37:2b:6b:68:41:6f:ca:10:
                    7e:2b:dd:ff:06:12:0f:8f:66:ca:b7:38:f8:4a:95:
                    ca:7c:b1:8e:d2:53:fa:87:bc:07:6c:95:f1:43:54:
                    a2:b3:fd:2c:7a:02:63:f1:7f:d0:ea:93:a6:c2:4d:
                    b4:e1:48:3d:8d:b4:5f:bf:8e:91:36:3d:94:9c:b2:
                    94:de:ff:e8:4f:2e:5e:ef:f5:04:58:13:9e:96:41:
                    fa:62:38:45:7e:23:53:3c:42:d7:52:cc:7e:be:1c:
                    83:ca:92:ed:1a:f3:39:e7:15:09:b8:18:a3:3f:49:
                    c1:b1:eb:e8:7b:41:d9:2b:85:d6:67:17:5c:d0:49:
                    63:5c:04:9e:5a:3e:17:9d:19:5f:6c:53:9f:7e:09:
                    58:bf:4a:91:b5:63:a3:07:11:fc:aa:6d:91:f8:9a:
                    10:48:fb:02:19:6e:ab:08:32:58:aa:67:dc:2a:48:
                    83:2e:b6:88:ea:9d:18:f5:42:63:18:dc:e2:82:14:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2E:8B:BC:E0:84:78:E7:3D:FD:F8:93:2B:23:E6:BD:51:D2:A7:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/8e210427-a5d8-3b90-aa63-345958770477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.crl

            X509v3 Authority Key Identifier:
                keyid:E3:7F:6F:FD:4F:C7:58:66:98:61:4B:A3:AB:2D:71:9D:3D:A0:D5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6bc:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2e:10:5a:37:68:88:6e:22:46:80:20:78:0a:91:3d:92:10:
         62:0f:1e:9b:15:54:c3:76:c7:6c:50:06:73:75:9f:23:d3:bc:
         31:3d:16:95:25:85:bc:e2:9c:7f:9d:e2:9c:ac:8e:f1:85:2a:
         40:8c:ef:c7:ce:15:cb:e8:9a:d5:03:f6:89:5a:74:ea:7c:2a:
         98:09:55:26:26:77:50:e9:5a:33:52:de:c4:23:55:e8:d2:63:
         32:43:58:5a:69:8f:fe:ae:28:e1:be:a3:89:1a:26:8c:71:59:
         9c:6a:6d:ac:4d:1b:81:45:78:e5:fd:47:fb:52:51:19:16:dc:
         59:60:2a:b0:7c:3a:48:7e:c7:cb:8e:07:b3:e6:09:71:4c:c3:
         6a:de:9a:c6:fb:25:46:67:83:5f:fd:6e:70:84:63:71:45:e4:
         5d:2d:c8:55:64:aa:da:75:35:f3:3c:59:a9:91:db:b1:a6:1a:
         be:f5:e5:15:43:37:dd:2e:7c:41:c1:05:29:b1:86:76:a5:44:
         2a:54:e7:dc:01:d3:d1:25:27:11:72:e1:e9:da:2e:c5:5d:f5:
         13:34:5b:d0:51:08:e0:99:1f:b0:8e:6f:9f:a1:78:1b:29:d7:
         a9:0e:ae:d6:4c:54:70:7b:91:2b:d6:44:60:f9:15:91:ae:95:
         5e:ea:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:41:49 2026 by rpki-client