Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/50610e90-9b59-326a-a735-b0efdc51b129.roa
File:                     50610e90-9b59-326a-a735-b0efdc51b129.roa (raw, json)
Hash identifier:          61tHz2TbRwViEecijfrgprcLu0kSYOQMP+OUbO/pnlE=
Subject key identifier:   9B:92:DB:0D:8C:9E:CA:9F:15:EB:36:7D:9F:6C:1D:E0:B0:F3:38:68
Certificate issuer:       /CN=bd4370d8-dcbf-4a76-8882-6d8829ae3e2b
Certificate serial:       010D0C9F4328584E89BF8D56CE0F408FD363BB10
Authority key identifier: 7A:9A:89:85:4C:03:25:2E:80:E6:C2:32:49:B4:15:86:E1:34:A0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/50610e90-9b59-326a-a735-b0efdc51b129.roa
Signing time:             Sat 18 Jul 2026 09:00:12 +0000
ROA not before:           Sat 18 Jul 2026 09:00:12 +0000
ROA not after:            Fri 16 Oct 2026 09:00:12 +0000
asID:                     402452
IP address blocks:        2606:1e80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:89:bf:8d:56:ce:0f:40:8f:d3:63:bb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4370d8-dcbf-4a76-8882-6d8829ae3e2b
        Validity
            Not Before: Jul 18 09:00:12 2026 GMT
            Not After : Oct 16 09:00:12 2026 GMT
        Subject: CN=349d7cd1-07ba-45b2-b3df-c0259dcb9185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:81:aa:ca:37:07:db:a7:59:39:2d:b2:6e:
                    1f:c8:fc:e1:1b:36:4b:e6:16:95:0a:68:f6:6c:b3:
                    b7:42:1e:72:46:13:d7:15:38:09:79:e3:9f:7d:21:
                    c5:f3:95:ab:b7:4b:5f:90:e9:a8:ee:f5:36:a9:81:
                    4d:a3:81:90:6a:eb:41:fe:e4:50:1c:d1:38:e0:96:
                    cb:37:72:c6:d2:59:58:7c:41:7f:82:9b:e2:f1:7f:
                    57:4a:8c:fc:fd:04:b5:1a:f8:69:57:a6:75:2e:9c:
                    54:1b:ba:17:89:ec:5f:83:be:86:2c:19:58:67:96:
                    32:16:a3:fe:04:3a:eb:7c:98:1d:8c:c8:e8:3c:e3:
                    77:7b:fb:f0:c5:04:d7:35:e1:51:63:a6:ec:9c:13:
                    80:82:be:8f:01:b2:24:13:77:c0:20:c7:1a:54:a0:
                    08:4b:1a:f6:84:02:96:6c:02:6f:d2:f3:13:00:23:
                    61:06:b7:7c:70:ed:f4:13:75:6c:58:1f:50:40:75:
                    2f:95:d5:f4:07:31:a6:be:43:5e:26:aa:d0:57:36:
                    87:d9:77:65:f5:68:ee:50:23:67:c4:5f:4c:05:36:
                    61:81:d3:ca:53:3c:8d:f7:ee:9a:bf:06:7a:a9:fc:
                    e0:aa:8b:aa:24:53:a8:e5:46:37:9a:7a:2f:e1:25:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:92:DB:0D:8C:9E:CA:9F:15:EB:36:7D:9F:6C:1D:E0:B0:F3:38:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/50610e90-9b59-326a-a735-b0efdc51b129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.crl

            X509v3 Authority Key Identifier:
                keyid:7A:9A:89:85:4C:03:25:2E:80:E6:C2:32:49:B4:15:86:E1:34:A0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1e80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:83:46:88:55:9c:9c:9f:53:f9:82:aa:05:87:0d:5d:25:52:
         0f:41:6c:02:00:01:a1:e2:6a:d4:49:3c:b0:6c:6a:60:40:d3:
         65:03:23:c5:68:ad:25:6c:54:a3:16:27:7d:af:d1:48:b6:40:
         0d:7c:98:a3:d2:ba:2a:c3:12:65:72:e1:93:32:09:d3:f8:63:
         de:65:07:db:63:91:7a:eb:29:71:65:45:70:d7:b2:fe:df:c9:
         dd:a5:60:ef:12:86:76:7d:a4:e9:36:b6:01:d9:b1:9f:67:1d:
         32:f5:29:96:40:bd:0f:47:d9:5e:46:12:38:52:43:4e:27:15:
         6a:61:86:6b:19:14:56:68:6e:af:52:d9:05:58:79:5b:27:4c:
         a1:90:90:14:46:58:60:74:5f:e7:b3:e3:d8:9d:4d:01:5f:bf:
         f2:3d:1a:92:e0:fb:4a:32:c0:b4:93:9c:0e:b3:1f:5e:d4:de:
         91:5a:a3:99:50:2b:a0:2f:a7:b2:b3:98:41:78:37:35:25:f9:
         b0:1d:9e:2f:0e:a9:e4:97:96:c1:87:20:0a:7f:a0:60:f5:42:
         ab:b6:19:51:6a:6e:2d:f6:7c:54:7e:54:91:37:b8:a7:e9:ba:
         22:58:37:6a:02:1e:7f:33:e1:5c:c4:a1:b5:35:90:e6:61:33:
         94:32:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:19:50 2026 by rpki-client