Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f2ec6d0f-bb16-376c-b8b2-2cf5ad28cb37.roa
File:                     f2ec6d0f-bb16-376c-b8b2-2cf5ad28cb37.roa (raw, json)
Hash identifier:          R7BdSkbh1XbM78HndTd4tjLb93VFMgjNhvniZOhpiwk=
Subject key identifier:   CB:59:D3:E3:33:FC:29:44:75:41:08:A4:9F:D9:B7:3E:B0:5F:12:3B
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E4AEF4C319F94FCC8D04F4C00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f2ec6d0f-bb16-376c-b8b2-2cf5ad28cb37.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     61317
IP address blocks:        2604:4500:1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4c:31:9f:94:fc:c8:d0:4f:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=c5e61bcc-000a-4478-a395-8f981d56e1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e2:a5:28:d0:84:51:6f:20:1e:0f:31:e3:5c:
                    60:0b:28:7e:e7:30:6f:72:c8:c9:41:5e:5d:46:2b:
                    42:a5:23:b1:f0:4b:8d:ea:32:ea:59:bf:95:99:27:
                    9a:7c:92:75:68:56:73:63:25:c8:39:ab:b8:f7:aa:
                    ef:8b:41:8f:8a:c0:77:70:c8:d2:be:67:d2:8f:42:
                    a6:e4:93:bd:ee:d5:c1:1d:59:10:ec:7a:62:df:52:
                    eb:6d:95:05:8c:34:a7:81:a4:69:45:ad:06:1a:28:
                    af:e5:8e:62:74:c0:21:9c:db:28:f3:9a:2a:e9:35:
                    87:a4:56:13:d7:80:9c:c4:e4:49:da:5c:7b:10:9e:
                    a0:c4:95:1a:3b:47:af:1c:b3:93:88:9c:49:0a:c1:
                    80:98:3b:93:4b:5d:0b:58:e9:50:bb:4d:5a:b3:3e:
                    5d:34:d4:31:70:05:1c:ac:01:17:d1:67:94:8c:87:
                    74:d0:94:84:c4:ca:27:83:4d:56:2a:07:8b:33:38:
                    37:52:d4:f7:db:8a:29:da:4c:3e:5d:ca:ca:07:15:
                    ad:84:21:b9:3e:91:9c:db:21:3f:0e:51:23:12:91:
                    dc:b3:06:b5:24:3f:84:0c:5c:6b:49:69:ea:a0:a9:
                    7b:2e:1a:89:5b:0b:31:5c:6d:33:67:15:a8:81:9e:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:59:D3:E3:33:FC:29:44:75:41:08:A4:9F:D9:B7:3E:B0:5F:12:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f2ec6d0f-bb16-376c-b8b2-2cf5ad28cb37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:25:69:34:b9:56:c8:97:e3:f7:19:34:9d:d3:83:62:bf:20:
         78:10:6f:c5:8f:00:a0:6c:55:98:f0:8a:24:5e:e5:d2:66:55:
         09:f1:3a:b2:da:d9:17:fb:35:75:a3:a0:de:69:26:f1:b5:8c:
         e3:da:50:46:74:e8:50:d1:cc:4e:d8:8f:ec:e1:7c:e7:8c:d4:
         ad:33:13:3f:21:93:a1:22:08:85:77:c2:33:1f:aa:d4:47:de:
         d9:59:8f:98:e0:7f:9d:a7:d8:c4:1e:4b:49:00:81:61:84:b4:
         0d:52:be:3c:c1:2c:b1:36:30:7f:39:53:f6:da:e4:a8:82:9a:
         86:3a:a2:03:70:df:19:50:7e:5c:fe:c6:e1:9d:97:15:bc:a6:
         7e:76:71:fd:aa:fb:ec:28:69:0f:48:be:11:07:5c:89:fe:36:
         78:ae:2b:e1:8c:5e:23:ad:fc:37:d8:25:1d:f0:1f:da:61:39:
         3f:0a:98:2b:a9:0f:57:4d:88:1b:bc:e9:4a:0c:82:35:7b:0f:
         55:a7:ef:e4:4f:75:0f:e1:c7:6f:d9:77:83:0d:ee:91:7a:b8:
         c3:f3:a1:cb:6c:41:c3:60:c8:99:0e:02:17:e9:f8:01:40:79:
         ae:19:68:78:bb:44:27:7a:72:4a:37:b4:15:a3:7c:17:84:1a:
         67:9a:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 12:27:16 2026 by rpki-client