Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/2ae48d4a-9b3d-309d-a700-cac2f997513b.roa
File:                     2ae48d4a-9b3d-309d-a700-cac2f997513b.roa (raw, json)
Hash identifier:          1zzobkNjB4v32fWLit3mRfPHxUb/JMc5nwNks3Qo2SM=
Subject key identifier:   AD:E3:54:4E:34:47:DC:1A:E2:C4:3D:E1:76:F0:A3:D9:14:52:D8:E3
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F4328584EA786EDFA051C96335BED3780
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/2ae48d4a-9b3d-309d-a700-cac2f997513b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396026
IP address blocks:        2606:1b40:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:ed:fa:05:1c:96:33:5b:ed:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=248eafd8-fbc4-40a6-b952-2cfbe60504cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:c8:cc:42:89:96:4b:eb:1c:fc:2b:f3:41:
                    9f:a0:49:08:c2:86:e5:0f:08:b9:67:1b:ed:24:62:
                    6d:3b:14:7b:6e:0c:f9:33:e0:f7:23:59:e6:6d:64:
                    a3:72:fb:03:2f:d4:81:96:40:84:6e:9b:e4:e9:84:
                    21:5a:fc:4e:9a:08:5e:18:79:7e:84:56:25:98:d0:
                    b1:c8:09:71:14:8a:5a:e3:73:90:ca:82:3f:09:d5:
                    dd:fa:be:e5:8c:37:c5:cd:e0:07:78:2b:4f:18:b7:
                    d8:aa:cd:f0:e8:86:6a:12:ef:49:8c:a4:de:0a:54:
                    f6:0a:6f:dd:e2:d0:7a:9c:76:7d:6a:b9:f5:fa:25:
                    68:25:03:81:c5:04:6d:03:a7:17:3f:b6:c0:5a:7d:
                    87:97:38:82:62:82:cc:46:cb:c0:e0:6c:c5:53:4c:
                    38:cf:39:52:e8:eb:c2:f0:52:91:fa:ed:ad:e6:0b:
                    ce:bc:31:6e:f8:6a:67:cd:80:22:87:e2:c8:96:54:
                    59:36:67:0b:2e:5e:d9:26:ae:69:a2:c3:bd:b9:36:
                    e9:2c:e0:1a:e2:78:75:de:78:72:cb:fe:81:12:f8:
                    ab:95:51:5b:0d:9f:90:5c:49:73:41:9c:51:91:82:
                    00:4c:27:2d:c7:22:2c:fa:30:96:cc:9e:da:47:85:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E3:54:4E:34:47:DC:1A:E2:C4:3D:E1:76:F0:A3:D9:14:52:D8:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/2ae48d4a-9b3d-309d-a700-cac2f997513b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1b40:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:14:bc:aa:64:f9:d0:5b:e8:3f:eb:7a:5f:24:ee:18:e0:c6:
         62:67:6e:85:d3:13:c5:d2:18:42:3b:9e:f7:10:a4:c9:dc:4c:
         55:64:1d:6f:fe:75:98:bb:a0:f8:59:c0:0c:54:a9:82:72:d7:
         3d:48:78:f2:b8:47:d6:75:bf:37:da:d7:43:a1:15:64:49:59:
         46:3f:1f:f6:18:2a:76:90:f3:6f:c6:b2:59:7b:dc:b1:e3:2d:
         3d:75:25:1f:38:d3:5e:37:3c:4e:ca:3a:8f:47:b1:c9:93:e7:
         2d:e0:bb:1e:13:16:aa:e7:df:dc:6d:8f:8d:94:57:1d:d8:df:
         07:cf:92:1c:de:25:c3:4d:a5:d3:a0:37:f7:ab:e3:6c:2c:b1:
         9b:42:4a:98:ac:99:9a:2b:9c:fc:af:70:27:3d:fe:ec:92:98:
         a1:d1:95:bd:18:14:9c:be:f1:10:fc:5c:c6:a8:55:02:63:56:
         9d:38:c0:f0:7d:b3:69:f6:31:44:ac:d7:14:cd:86:c2:4e:05:
         14:32:a3:11:a6:f3:b7:fb:54:29:e8:f3:60:7b:dc:f4:60:08:
         16:b1:35:1f:70:1d:70:01:7b:ef:dc:b0:d1:fc:8e:1c:c7:c4:
         c1:09:7f:33:2d:a2:cf:0e:da:70:8f:f4:49:bf:a6:06:b0:76:
         e5:36:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 14:57:08 2026 by rpki-client