Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ec06e1e6-f3da-3e94-967f-12744c4f82a7.roa
File:                     ec06e1e6-f3da-3e94-967f-12744c4f82a7.roa (raw, json)
Hash identifier:          RpMWV2171pbvMfDJGgAwtVTjMxTXi/4d5QKl3/dflcI=
Subject key identifier:   50:06:BE:C8:65:07:F0:87:9B:54:DB:F4:74:56:6B:DC:9A:5A:F4:CB
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584D9B85635455F72265A9F2F1F8
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ec06e1e6-f3da-3e94-967f-12744c4f82a7.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     22652
IP address blocks:        2607:fad8:120b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:63:54:55:f7:22:65:a9:f2:f1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=765718cc-d39a-4f7b-aa10-8322ddd909a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:cb:06:7a:fe:d0:72:2a:e0:86:3f:ca:62:
                    64:89:bd:02:04:3d:a4:19:37:83:ce:d5:6a:20:c6:
                    f9:05:99:45:e6:83:a4:92:05:be:23:f6:ea:57:94:
                    ff:c0:6e:eb:ea:a3:6f:54:54:6b:60:31:2f:67:9a:
                    17:50:3f:05:f9:7f:c2:e4:46:4b:0b:56:ad:2a:44:
                    ba:99:51:2e:1d:ca:38:ad:9a:e1:46:15:08:e0:15:
                    85:77:13:24:16:b4:4c:0b:46:e3:86:2f:da:c0:36:
                    8a:57:7e:92:fc:09:64:ff:d7:13:12:89:9f:0e:68:
                    91:dd:82:03:7e:7d:8f:a8:26:7e:f4:78:74:c7:3e:
                    96:d6:d6:49:e3:3d:c9:83:02:d7:49:18:98:5a:5c:
                    aa:4f:c8:91:d0:f3:2f:85:b8:ad:6e:57:5e:d3:37:
                    6f:a0:65:a1:af:67:6d:d5:59:c7:c3:89:b9:dd:36:
                    e9:8d:48:e1:f2:dd:cd:17:48:09:e9:57:e8:15:82:
                    d0:d6:3b:65:70:db:5f:61:03:ff:44:b5:ae:29:ea:
                    08:12:2a:38:2d:71:b3:0e:54:7a:4a:72:b7:87:cf:
                    db:6e:52:cc:ab:8c:2d:36:5f:a7:5a:0e:d7:dd:b4:
                    9b:08:01:77:60:00:4c:55:c8:a7:8d:83:ce:17:7a:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:06:BE:C8:65:07:F0:87:9B:54:DB:F4:74:56:6B:DC:9A:5A:F4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ec06e1e6-f3da-3e94-967f-12744c4f82a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8:120b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:71:99:b2:ac:e2:b3:8a:51:0f:5c:9a:ff:af:00:d2:b9:e5:
         9d:82:39:ca:79:32:19:e9:c4:76:b8:4d:6f:a2:65:d8:e5:22:
         5d:15:09:97:4e:dd:15:5e:1d:9b:ad:de:4c:0f:32:f1:b7:55:
         84:e2:db:df:a6:2e:a5:ba:dc:85:db:19:b0:a0:6f:9c:3d:7d:
         45:43:53:c9:01:51:2d:c0:cd:5e:a6:c3:00:5a:71:21:ad:ec:
         63:83:c4:48:58:03:97:90:27:c2:12:f4:3c:27:0f:fb:85:11:
         05:1d:77:8b:b9:92:e1:d2:d8:d3:68:62:93:49:02:8d:ab:a9:
         26:29:76:c7:ba:04:98:bd:48:fe:2a:d7:0a:71:9f:d5:a0:44:
         a0:3a:e4:9a:7f:c0:98:dd:d3:72:b1:f8:75:00:ec:11:0e:c2:
         bb:ac:c1:15:34:da:8f:18:db:a6:fd:65:48:82:f6:c8:3d:2d:
         72:97:29:c6:13:a7:de:9b:7c:25:d7:cf:69:2d:51:e3:a8:e3:
         dc:51:d6:ce:97:08:35:57:a3:7c:b9:80:25:f7:e5:95:f4:f6:
         2a:a8:86:55:3b:18:20:48:4f:8f:59:e1:54:cc:ce:b3:10:4f:
         5a:cc:f6:fd:d9:b5:ca:5c:6d:57:09:84:34:21:fd:4f:17:62:
         97:98:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 19:32:16 2026 by rpki-client