Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/f0723aaa-7aee-3a31-85c9-8152b492032a.roa
File:                     f0723aaa-7aee-3a31-85c9-8152b492032a.roa (raw, json)
Hash identifier:          SAzM4yE/XYDCq3hjopVDyRuEngzoneOHyJM/zObupho=
Subject key identifier:   C5:DB:1C:8E:9C:29:1A:C8:06:FD:72:B6:2A:F2:20:8D:72:F0:80:F0
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F4328584EC4D70E213B0D34AC4B24EBC0
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/f0723aaa-7aee-3a31-85c9-8152b492032a.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     11017
IP address blocks:        2602:f98b:30::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:0e:21:3b:0d:34:ac:4b:24:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=99d13d4c-fdec-4284-93ac-2a3e847806ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:0f:6e:43:57:ff:7b:39:34:93:b2:52:b2:
                    d3:71:bb:1f:d7:b9:9c:ab:48:7a:56:34:51:47:55:
                    f4:15:d6:b3:ba:46:15:27:ed:10:fd:20:7f:a6:04:
                    80:ee:ad:c9:81:53:ae:1f:97:1f:65:c1:01:c7:00:
                    9a:5e:91:64:db:a7:e1:2c:e8:cf:16:42:a9:bd:b3:
                    d6:d4:34:80:33:3c:b9:b9:39:1f:63:1a:3e:af:a9:
                    a8:06:f2:68:51:7e:87:05:e3:a8:8b:c7:75:e6:4d:
                    ad:17:0e:e6:c9:fe:07:28:77:59:0d:18:8e:46:e4:
                    c3:6f:3b:5c:88:b0:62:9b:5e:17:cf:f2:c7:de:a8:
                    66:1f:d9:87:9f:e3:49:72:5b:62:05:40:3a:3b:31:
                    c3:27:3d:b7:78:dc:9d:17:eb:4b:71:a5:ea:6f:2b:
                    d5:8d:5e:89:40:9f:fe:fb:b6:9d:12:21:af:49:17:
                    8f:d9:13:99:d6:88:db:20:a1:b2:f0:f5:04:d0:29:
                    5e:54:2b:a0:21:0f:b5:87:a3:89:3f:da:4c:87:ce:
                    a2:d9:02:41:56:49:91:4e:03:cf:f3:d6:4a:19:f9:
                    15:72:5c:2c:b4:23:58:30:11:07:e6:e8:22:61:8a:
                    9e:76:ac:63:54:3e:be:83:6d:2a:09:f1:b5:e7:55:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DB:1C:8E:9C:29:1A:C8:06:FD:72:B6:2A:F2:20:8D:72:F0:80:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/f0723aaa-7aee-3a31-85c9-8152b492032a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ab:c7:e8:28:74:cb:33:09:5b:c3:19:c4:37:d5:80:63:29:
         a2:01:5d:e1:ee:61:e2:10:8a:f6:17:fe:82:40:6b:f6:53:18:
         2f:4e:84:f3:e2:64:32:d1:cc:cc:2c:09:cc:96:63:ac:9b:4a:
         13:4b:d8:70:6b:89:d0:70:aa:06:d9:0a:fc:d4:93:21:7d:85:
         1d:82:95:27:c3:cb:0f:54:0c:15:e4:bb:63:fa:b5:36:31:86:
         25:fb:40:71:ff:ed:27:cd:39:c4:22:ef:27:ec:24:a9:be:b8:
         f3:f6:84:cd:aa:aa:1a:87:21:b7:4f:66:0e:2c:fc:f8:4b:d1:
         fb:68:ca:30:97:7e:da:94:60:90:9e:da:b4:66:3a:8d:0f:2b:
         6a:1e:b7:41:96:89:ad:f5:f4:5b:31:ec:a0:c2:41:3b:d9:a1:
         ec:d2:05:02:6d:be:cb:b8:54:99:2e:86:99:89:71:b8:a4:87:
         86:be:0f:20:69:97:a3:fd:dd:be:87:75:6e:09:b0:16:9f:cc:
         14:44:f1:5a:0d:ab:6d:c2:0a:eb:95:c3:a3:2a:0d:f1:e0:b2:
         80:1f:7f:55:6c:50:2f:a7:5a:97:12:52:af:0e:ad:56:55:dd:
         c9:b9:e4:65:ae:d0:d2:11:34:ad:cc:d2:0b:95:9b:cc:3e:1f:
         3b:f6:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:32 2026 by rpki-client