Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa
File:                     1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa (raw, json)
Hash identifier:          MFiI9ru2NQS8ijiKHbLqGGZWBdZVUO5hDAHzkSIpMMk=
Subject key identifier:   6B:70:BC:B2:68:51:DD:36:25:58:46:9A:64:F8:40:FC:AB:B9:37:03
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584E3A2F38A6418B05F52F0D2540
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     400919
IP address blocks:        2602:817:2000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:38:a6:41:8b:05:f5:2f:0d:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=6afa27cf-621a-4c17-bd67-8415c8db661c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:55:f0:53:82:83:b6:2a:f3:e6:ac:69:e0:20:
                    3c:59:7e:bd:af:31:03:8b:d5:b4:63:a5:b4:79:88:
                    d7:2f:25:ba:ab:9f:fa:74:21:12:d2:7e:44:0e:d7:
                    59:62:9f:33:ce:58:a8:68:6e:ee:64:12:77:93:5b:
                    0a:98:2b:66:af:13:20:2a:4a:b3:2d:21:ed:c3:c5:
                    c7:bf:da:34:9b:b7:16:be:04:fd:93:33:f6:b8:e1:
                    1b:47:25:60:6c:8b:57:0a:d7:b9:7d:99:5d:7e:5f:
                    2b:a5:0c:ba:86:ca:68:e6:4c:78:67:00:14:83:75:
                    89:38:78:27:84:99:be:10:21:7c:d2:e0:eb:c4:0e:
                    73:2c:7b:cb:72:22:db:58:dd:3e:1b:75:9c:05:6a:
                    eb:71:df:58:93:be:d4:53:c9:70:5a:1e:7a:e5:e6:
                    87:22:da:ca:c3:f2:ba:e9:fa:5c:de:bb:ef:4c:a6:
                    7b:ba:17:6e:78:23:50:76:be:86:3b:50:fb:c1:f1:
                    96:7d:68:17:70:72:38:59:4d:d5:19:a2:6c:32:1e:
                    28:0c:e6:8d:c7:36:67:19:db:f9:2c:35:c8:3e:a2:
                    ce:69:bb:6f:d9:75:83:e7:5e:a4:97:a4:bf:07:5b:
                    b7:da:43:6c:2d:10:a6:b0:fa:45:1d:da:24:b3:d6:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:70:BC:B2:68:51:DD:36:25:58:46:9A:64:F8:40:FC:AB:B9:37:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:69:cf:5c:42:46:e6:b4:95:8f:b8:0a:c4:e7:6f:8f:1d:29:
         6d:46:e4:99:cc:3b:8e:96:ec:a4:11:d0:bd:a8:de:d0:50:81:
         ba:9f:1e:1e:07:86:7a:0e:44:a8:08:76:ec:d0:e6:e8:15:9e:
         43:fd:69:c8:7a:8b:72:d9:56:1c:e2:fc:fc:c8:6c:b2:d2:ca:
         1e:82:4b:b7:53:22:cd:0d:5a:02:42:62:79:19:45:d8:ae:6c:
         2e:cb:7f:d5:22:de:a1:f3:a0:29:5f:90:3a:ee:2e:13:8d:f8:
         5d:6a:6f:8a:f4:c2:24:41:b9:f3:53:30:ec:70:6c:20:e3:65:
         a7:56:07:88:01:d6:00:d7:78:38:e7:b8:d6:01:59:a8:25:2f:
         2e:e3:39:3f:21:71:f8:2e:e1:02:ea:dd:19:e3:81:ba:2c:e4:
         7c:b6:4f:20:fe:88:cc:3f:a2:53:ff:8e:0e:e7:0e:93:3c:bb:
         4d:3f:16:aa:f4:59:61:f3:ff:89:cf:d4:9c:60:d2:49:94:63:
         fa:29:96:2a:48:44:c8:90:c0:f2:cb:a9:7f:92:de:57:66:56:
         7b:0b:78:fa:51:f8:c4:f3:69:18:66:f8:c7:a4:d6:3d:81:10:
         33:8f:a3:0c:bd:9a:a0:c6:00:f5:da:04:a4:47:3c:f2:68:27:
         21:bc:56:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 10:12:29 2026 by rpki-client