Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4b468c01-bf85-3259-aaef-1d1730f00530.roa
File:                     4b468c01-bf85-3259-aaef-1d1730f00530.roa (raw, json)
Hash identifier:          eOh/hM2pIiMz4xxWjarwnUUkYYp4EaOvqh9IINfSk/0=
Subject key identifier:   0B:AC:4D:2C:C1:BA:74:92:B9:0C:FC:49:8E:E9:FB:3E:07:9E:06:B0
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F4328584E36017C3A22EE1B5179F1FFB8
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4b468c01-bf85-3259-aaef-1d1730f00530.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     36283
IP address blocks:        2001:4850:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:7c:3a:22:ee:1b:51:79:f1:ff:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=fdce9ebb-668e-485e-8d37-31663ce8fa29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:e0:24:24:0d:47:2d:15:30:cd:88:63:91:
                    33:fb:c5:b7:88:0b:55:f7:6b:50:bd:5e:d0:10:9f:
                    03:8a:75:bd:01:37:2b:4c:b2:da:88:1d:1b:8f:e9:
                    74:1d:23:7c:84:33:62:fd:8c:db:99:ac:ed:f6:c8:
                    bd:01:a2:92:4e:9a:f1:05:0c:82:33:6e:30:19:54:
                    b1:74:1a:34:f9:ee:72:87:ad:0b:93:30:5a:be:01:
                    c6:e5:3e:bf:4e:43:59:de:65:b7:7b:a1:75:ba:93:
                    15:ee:ef:80:ae:84:12:2a:fb:00:3f:18:48:6c:b1:
                    f1:9b:40:65:04:63:75:3f:a5:1b:4a:fb:a7:33:49:
                    90:59:6f:c8:d0:d1:0e:97:30:72:56:ad:5d:e2:ac:
                    b8:9e:de:96:7c:82:2d:c9:ad:20:ba:dc:7e:51:3a:
                    23:90:30:04:de:ea:3a:98:11:0b:61:52:ae:f0:cf:
                    bf:48:2b:bc:d0:6d:3e:04:de:13:ec:36:fc:81:c2:
                    6f:06:36:b3:d8:8f:c0:79:95:16:ea:58:e5:c3:4f:
                    6f:7f:9f:35:ed:67:ae:f6:7b:70:59:03:92:7b:de:
                    3e:d1:89:f4:56:ef:b0:74:54:c0:60:a7:a0:8d:a0:
                    0c:ab:2f:09:c2:5f:cd:5e:37:44:00:3c:b9:d9:85:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AC:4D:2C:C1:BA:74:92:B9:0C:FC:49:8E:E9:FB:3E:07:9E:06:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4b468c01-bf85-3259-aaef-1d1730f00530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4850:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7b:f9:d9:f0:07:99:71:e1:9e:c9:7b:dc:6d:c0:db:b1:15:
         56:b0:45:0f:5e:7e:68:fd:bd:b9:8e:db:d6:5d:63:ed:5d:48:
         83:d2:84:45:8d:cb:7d:22:06:ed:b5:7b:8e:ec:fd:6f:cc:ef:
         14:51:86:da:42:41:3b:3b:17:94:54:0d:13:44:23:7f:ec:18:
         ae:82:a6:4c:33:ce:76:39:f5:15:68:3f:e3:c4:b2:39:b1:5f:
         f4:6d:ab:5a:18:94:f1:03:f4:ae:a4:0d:ee:b9:aa:22:81:25:
         1f:f2:05:54:e5:65:ee:d8:09:fd:4c:14:cf:60:cb:69:65:83:
         dc:de:1e:c8:64:9b:0f:7e:c5:f7:6a:cc:bf:50:07:1c:39:9f:
         45:ec:28:27:96:7f:40:e0:80:21:16:12:dc:5b:5e:ad:8c:6a:
         ed:66:9b:a2:c8:33:ae:3f:8e:52:c0:2f:58:39:51:93:03:2f:
         95:83:11:8f:f1:19:ca:f0:a3:ca:c3:4e:5e:92:53:33:5d:dc:
         cf:73:47:03:2b:86:85:e9:33:77:65:d5:8f:8b:1a:22:b1:5e:
         5f:d0:f3:6d:fc:63:e3:48:6b:cc:9f:c5:4d:b3:7d:3d:2a:70:
         b1:90:04:78:51:04:2c:00:fc:bb:10:7c:88:0f:6f:68:03:98:
         e6:97:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 12:17:25 2026 by rpki-client