Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa
File:                     e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa (raw, json)
Hash identifier:          pZXK/sSXiruixl9zAfp722mvDcKOaP8KNQSMO1Hhi28=
Subject key identifier:   E4:FF:24:C3:72:D3:31:A4:21:CA:F9:AA:9A:AE:87:31:47:A9:E2:80
Certificate issuer:       /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial:       010D0C9F4328584E640F7916078BA291961A8F80
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     6597
IP address blocks:        2607:f948::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:79:16:07:8b:a2:91:96:1a:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=66c56a22-827d-4936-9e82-bfa7e256f271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a4:6f:e0:a7:de:72:45:03:c6:bb:2f:2f:9a:
                    31:a9:74:6e:0e:ef:32:6e:40:65:b9:0c:c8:35:37:
                    df:09:60:9e:ce:e9:b7:14:ec:3a:8a:87:92:3a:4d:
                    18:e7:4f:be:af:77:3a:0b:74:a1:31:b9:60:be:41:
                    c5:0a:80:60:53:7b:63:c0:3c:12:f8:ae:41:ff:e7:
                    6c:0c:82:5a:e6:70:17:ba:5a:b9:85:ec:8e:22:93:
                    4c:c7:92:88:ab:a6:de:9c:ee:bd:c3:1a:86:00:08:
                    3f:85:2c:e6:81:df:43:62:b8:4f:5c:61:5e:61:99:
                    db:e7:8f:ae:81:67:eb:92:73:d4:67:ba:09:2c:41:
                    3d:99:cd:fe:6e:cf:25:e3:46:df:a0:5f:50:56:f4:
                    c2:06:dd:ef:bf:df:a5:73:2c:53:b3:85:af:18:2d:
                    bc:52:97:20:df:33:0f:81:04:a5:63:2f:c8:04:a7:
                    8f:b0:97:a5:61:12:a4:06:d9:55:05:35:ac:e5:34:
                    e3:7f:19:67:7c:4f:7a:86:a4:7a:4f:aa:03:01:d2:
                    5b:81:f5:df:b3:74:24:e3:e3:2a:f9:ae:f6:82:61:
                    6d:08:79:af:9f:da:19:77:d7:6b:6a:42:b3:e6:53:
                    a3:d1:e4:66:3b:b9:ef:5e:40:7a:f5:de:f6:94:c2:
                    40:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FF:24:C3:72:D3:31:A4:21:CA:F9:AA:9A:AE:87:31:47:A9:E2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl

            X509v3 Authority Key Identifier:
                keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f948::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:72:99:33:d3:2a:98:3a:d9:d7:2d:c8:ec:53:1e:06:91:9a:
         9d:56:d2:1c:b3:3b:e4:1b:92:04:05:ff:ea:ab:2c:64:ea:8c:
         b6:5d:e9:0f:c3:5d:1d:8d:a6:8f:ba:4e:fb:9f:b8:74:a8:b8:
         3c:89:18:d6:76:80:ff:b2:91:ad:78:69:de:6d:32:ed:70:55:
         81:6c:59:4b:2d:19:df:94:56:83:15:23:49:3a:e1:e2:56:32:
         f8:be:77:3e:78:2c:21:af:b9:92:a8:79:9d:3b:ff:d0:e6:8e:
         a0:b5:c6:07:f6:30:05:34:60:f4:69:ea:74:7e:12:c6:14:27:
         04:22:70:e8:52:8b:85:7d:7f:5a:fb:5f:34:04:3e:9d:f4:6b:
         ca:f8:25:ec:90:46:ae:b8:39:2b:81:f0:98:ba:47:df:c9:46:
         f4:fa:80:7a:4e:29:30:cd:43:bc:b8:88:c3:60:95:2b:2d:ee:
         5b:9f:b5:39:ff:a9:2e:21:0d:2d:74:2b:0c:2e:7e:fe:c7:28:
         ab:3e:ef:ae:e4:39:73:a0:0e:23:a0:af:d1:4e:21:14:e4:c8:
         50:f5:6a:7c:16:c7:f0:4a:02:72:5c:65:23:66:b7:74:d6:85:
         1e:71:c7:69:b7:54:c3:43:61:55:2e:cc:3a:7c:cd:cc:5a:b1:
         61:00:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:11:27 2026 by rpki-client