Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa
File:                     8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa (raw, json)
Hash identifier:          VRtQfIfqN29qhmzs2YwMcH7SJpZWDE2Xa92tIClGDvo=
Subject key identifier:   07:20:23:97:B5:89:10:EF:E3:64:84:B9:4D:A5:62:1F:FC:14:BB:5B
Certificate issuer:       /CN=d4cafeea-cee5-442f-9f6c-530abebc6186
Certificate serial:       010D0C9F4328584EEA875A65AB50C82F247CC800
Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        2607:c0c0:aaaa::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:5a:65:ab:50:c8:2f:24:7c:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=bb5344f4-5fb3-4f19-8a62-e33bd56d22f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:65:c3:63:7d:d6:73:e2:a2:5b:8e:b2:72:
                    62:0e:ea:1e:9f:12:91:fb:d4:2a:e5:c6:83:2f:36:
                    4d:c1:78:c3:e1:0e:89:2b:11:98:e0:34:33:75:2b:
                    27:40:99:69:c1:4d:a5:60:f8:16:3f:19:3c:5b:76:
                    40:77:d6:20:74:94:aa:ae:7e:a5:9f:0d:6f:e5:4d:
                    5a:d4:13:6b:bc:74:5d:4c:fc:44:e2:2b:aa:ad:e4:
                    34:e6:cc:a8:3c:20:be:e0:9d:c8:5b:2b:af:10:a5:
                    b4:cc:81:bf:6c:81:16:1e:31:e7:a1:d1:d8:85:fd:
                    45:17:bd:1a:94:53:1e:c1:e0:2f:4d:8b:33:6d:d2:
                    ac:6d:8f:71:7f:12:49:16:9c:88:6f:10:80:e2:19:
                    72:7b:3f:de:7d:ad:8e:c2:be:1a:f0:77:7e:24:ca:
                    06:96:9d:2f:b7:e0:1d:34:d5:e9:d0:7f:c0:3c:0c:
                    c8:d6:9e:ea:50:8f:0b:9e:e7:2f:d0:5c:59:20:b5:
                    c4:99:6b:11:2d:6b:b5:39:a6:57:5f:62:b1:aa:a3:
                    9f:4a:fc:82:4a:5a:7b:6b:cd:b1:9f:f8:13:9f:7e:
                    06:a1:a0:48:38:b7:1e:c1:db:05:39:18:4c:21:66:
                    f7:31:6b:a2:47:5d:dd:c1:b0:47:1f:46:30:49:a6:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:20:23:97:B5:89:10:EF:E3:64:84:B9:4D:A5:62:1F:FC:14:BB:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl

            X509v3 Authority Key Identifier:
                keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c0c0:aaaa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:84:8e:38:a3:a1:19:bd:d4:74:55:01:f7:59:cf:55:ee:e0:
         c1:bf:67:a2:f3:d7:2d:98:70:ec:8d:dc:29:a2:29:e2:84:54:
         f7:1e:f0:6d:c8:f8:fb:8b:22:00:c5:a6:eb:ea:57:92:42:aa:
         e3:2c:25:aa:b3:56:ff:0c:bd:b9:73:e9:5f:d0:9b:18:7a:50:
         ed:8d:f5:b6:61:fa:e8:1d:d2:07:6b:56:2d:32:25:36:f1:a3:
         e2:3d:36:6c:19:ee:62:ab:f1:b9:07:f9:d6:68:28:1e:67:e5:
         65:63:7e:09:42:cf:7d:0b:79:c3:17:f4:64:9f:02:6e:ae:c3:
         3b:db:0b:7f:52:7b:2b:0e:a3:ba:a0:b9:91:1a:22:3e:8b:f7:
         12:53:47:b3:8c:c5:0a:68:d4:f7:93:60:6e:4f:0a:8f:64:6f:
         2e:f5:6a:bb:e2:f1:1d:48:73:4a:c4:34:83:6b:d2:e6:97:06:
         71:a5:54:d1:8e:f7:ce:fb:f6:38:ac:e6:4a:ec:e8:66:7a:a4:
         50:06:0c:aa:49:c9:e4:e8:d3:6f:ec:64:86:27:09:73:0a:e7:
         00:a1:41:f4:45:25:73:bd:87:02:a4:bf:86:0c:ad:a4:c6:89:
         1d:b9:64:b8:94:ba:4c:20:33:3d:8f:d9:f0:cb:33:31:13:17:
         f4:1b:bd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:23:03 2026 by rpki-client