Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa
File:                     a46157e0-a7ea-356d-a381-71067022a9b8.roa (raw, json)
Hash identifier:          9v8hbVha0i2fbSMbpAgL23t6jTo9BQfYxbiO43StrAI=
Subject key identifier:   04:C9:60:35:9D:B2:D3:25:42:5A:DF:0C:72:E7:73:68:60:33:DA:6C
Certificate issuer:       /CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8
Certificate serial:       010D0C9F4328584E8B25138A19BF38A37505B880
Authority key identifier: B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     394457
IP address blocks:        2604:2960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:13:8a:19:bf:38:a3:75:05:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=b49f7540-5820-4e74-b2da-cab37a921d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d1:7f:a9:6c:fc:5d:13:18:5c:f4:87:ad:b0:
                    53:f4:31:b0:90:95:0b:2a:52:d0:09:ab:08:76:e8:
                    a6:56:95:b0:2f:dd:b8:d0:2a:d5:3b:8b:9e:d4:7f:
                    a2:c2:cd:75:af:51:5b:cc:df:33:94:1e:10:0d:c9:
                    ce:5a:18:de:39:c9:32:e7:d7:38:69:97:bf:08:cb:
                    58:0a:73:4f:78:51:78:95:8e:b5:94:cc:89:84:b0:
                    8a:91:32:63:86:c9:4a:59:3e:23:de:25:21:8e:ec:
                    33:bf:1f:d2:a4:1c:6a:f1:23:6a:87:34:a4:b3:4a:
                    f4:3e:83:bd:69:35:e7:10:e9:cb:fb:01:a5:9a:29:
                    1b:21:56:ad:c7:f7:fc:00:2f:25:da:ad:7f:43:c0:
                    63:df:8e:80:7b:56:96:c7:81:31:9e:d8:9f:32:12:
                    1c:92:82:41:3f:d7:ac:f5:ad:98:66:25:05:eb:7b:
                    3a:f5:47:fc:6e:ef:9c:d5:d8:41:9e:6f:09:ff:88:
                    c3:43:1a:05:60:f4:95:d9:58:94:1d:a6:34:7f:96:
                    3e:52:78:bb:d7:fa:76:14:80:af:50:64:33:48:08:
                    40:6b:36:50:96:6e:ab:dd:17:b0:b1:dd:f1:28:f6:
                    d7:e7:03:f6:ed:c3:e6:26:4e:5a:54:63:d4:9a:cc:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C9:60:35:9D:B2:D3:25:42:5A:DF:0C:72:E7:73:68:60:33:DA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl

            X509v3 Authority Key Identifier:
                keyid:B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2960::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:42:ff:bc:7a:a4:35:43:7d:d0:60:b9:8c:c0:57:69:85:af:
         34:4e:29:a1:f2:d4:cd:e7:d6:5d:f4:69:78:fe:e8:4c:57:0a:
         0f:cc:14:44:60:bc:f5:45:81:8e:8c:76:a4:0e:19:a8:49:33:
         b1:79:24:5c:77:87:20:b3:d7:3a:f5:e0:8a:25:61:a3:04:3b:
         c1:08:fe:20:91:f4:75:c9:f8:34:32:6b:af:b0:a8:92:50:45:
         cc:d3:c2:38:36:0d:03:29:ec:eb:98:5d:94:8d:8f:e5:72:0e:
         e2:dd:77:87:ba:7d:28:76:3a:70:4a:70:aa:b1:07:6d:5e:e9:
         03:dd:76:54:64:96:98:bb:19:f4:17:d6:05:cb:e4:5d:d8:d4:
         51:42:32:99:de:cc:b8:dd:ec:2a:5d:68:4d:27:64:bc:aa:db:
         81:eb:ba:d3:bd:b2:0c:14:2b:65:8c:82:e4:9d:47:37:bf:a2:
         3c:3e:d1:ae:3e:30:d6:cb:11:59:25:14:ec:13:d0:3c:7b:02:
         34:e4:bf:0d:0b:d9:ef:03:38:82:da:2d:5d:cc:56:9e:72:04:
         ff:bb:be:0b:a8:3b:d5:9d:5c:e4:ea:1b:5f:d3:76:90:5c:f8:
         5b:a4:0a:97:ec:8e:e3:69:fb:8c:76:d4:fc:3a:b9:09:d5:22:
         56:2c:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:07:44 2026 by rpki-client