Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4f29837-bef7-4602-845c-79906ce481e3/d4c40300-b5dd-3d89-b33d-54062e932e5b.roa
File:                     d4c40300-b5dd-3d89-b33d-54062e932e5b.roa (raw, json)
Hash identifier:          H4DeBFAaj32qwDUI3HaAasPuOq7Ii9qMo0p8XnJ++aU=
Subject key identifier:   9E:11:9C:85:2D:AD:30:EE:35:A3:2F:63:D5:0E:53:D6:5F:52:2E:B3
Certificate issuer:       /CN=e4f29837-bef7-4602-845c-79906ce481e3
Certificate serial:       010D0C9F4328584EBAA7889E69B28BC5D2465180
Authority key identifier: 9D:1F:12:71:36:C5:A8:80:D4:A5:74:AD:5A:B7:40:59:52:1A:86:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4f29837-bef7-4602-845c-79906ce481e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4f29837-bef7-4602-845c-79906ce481e3/d4c40300-b5dd-3d89-b33d-54062e932e5b.roa
Signing time:             Tue 04 Aug 2026 21:26:25 +0000
ROA not before:           Tue 04 Aug 2026 21:26:25 +0000
ROA not after:            Mon 02 Nov 2026 22:26:25 +0000
asID:                     395846
IP address blocks:        2605:7fc0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4f29837-bef7-4602-845c-79906ce481e3/e4f29837-bef7-4602-845c-79906ce481e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4f29837-bef7-4602-845c-79906ce481e3/e4f29837-bef7-4602-845c-79906ce481e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4f29837-bef7-4602-845c-79906ce481e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:a7:88:9e:69:b2:8b:c5:d2:46:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f29837-bef7-4602-845c-79906ce481e3
        Validity
            Not Before: Aug  4 21:26:25 2026 GMT
            Not After : Nov  2 22:26:25 2026 GMT
        Subject: CN=a09250a5-8282-46cb-b8e1-ac51af10ba0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:90:09:f4:a6:df:4d:a7:6c:7c:d9:72:67:
                    e0:82:2a:ee:f7:9f:62:d5:97:c2:57:43:d2:ba:d5:
                    9c:15:f9:a8:f8:14:30:1c:f2:27:0b:71:0c:fc:bc:
                    60:2a:68:a7:e4:0d:9c:79:10:37:d1:ce:af:3e:05:
                    48:ed:16:e8:c4:c8:96:82:32:f5:d2:5e:48:e0:00:
                    9b:38:a5:07:27:50:04:87:1e:80:4c:c3:e2:30:d3:
                    6e:06:90:d5:7b:e8:45:8c:54:df:08:52:ae:97:5b:
                    f0:61:80:1f:9d:1e:47:31:45:09:ed:9f:59:cf:0e:
                    38:e8:91:b5:b7:5a:40:a1:a7:ed:f1:ef:20:f7:d8:
                    76:fd:8f:0d:40:79:01:2e:37:97:e8:4d:c2:5c:86:
                    46:f6:f5:51:2e:52:ee:e7:67:b4:eb:41:2a:93:b1:
                    5e:93:3b:59:06:2f:1f:37:ab:f2:50:5f:61:7f:c9:
                    78:0e:6e:58:69:f7:a2:91:4c:25:62:91:31:52:2b:
                    83:ef:e0:33:8b:cc:07:cc:fc:ab:2f:36:62:84:fa:
                    9f:24:76:b5:5d:7b:fa:2b:fc:39:e3:8b:49:4e:21:
                    11:d2:0a:fb:6f:e7:f7:0b:b7:df:6c:1b:c0:bc:f2:
                    2f:9d:43:e1:f6:e2:51:f1:08:6a:34:88:4c:ee:4b:
                    c2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:11:9C:85:2D:AD:30:EE:35:A3:2F:63:D5:0E:53:D6:5F:52:2E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4f29837-bef7-4602-845c-79906ce481e3/d4c40300-b5dd-3d89-b33d-54062e932e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4f29837-bef7-4602-845c-79906ce481e3/e4f29837-bef7-4602-845c-79906ce481e3.crl

            X509v3 Authority Key Identifier:
                keyid:9D:1F:12:71:36:C5:A8:80:D4:A5:74:AD:5A:B7:40:59:52:1A:86:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4f29837-bef7-4602-845c-79906ce481e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:8f:cb:f8:ca:fb:0e:e0:fb:06:e5:0b:4c:12:7f:b7:e0:0f:
         69:69:b9:09:a5:6d:cb:bf:89:ef:da:27:c6:5d:97:b1:97:35:
         9b:fd:47:3b:76:1b:d2:0d:85:15:62:72:2e:8f:20:ed:51:95:
         57:ba:94:09:ea:e9:54:10:b7:74:a1:dd:e5:2e:3a:ca:26:36:
         59:ac:7f:42:5e:87:47:27:ed:60:f0:9f:4b:97:99:8c:19:e4:
         8b:43:20:0a:b2:54:8c:a0:25:18:f1:da:0d:49:5d:0b:8c:a5:
         a0:cd:dc:00:f9:d8:26:ca:5a:11:a1:68:33:82:a9:49:d7:2f:
         62:5b:7d:ef:e3:56:af:da:b8:07:b6:01:95:eb:83:b6:11:87:
         a0:dd:f1:1c:a7:40:5c:ee:7f:d7:59:cb:a5:36:9e:1b:ee:58:
         12:a7:f7:c2:7c:4c:66:37:3f:21:e3:1d:bf:fc:2a:81:ec:16:
         c2:ef:69:e2:f9:14:fd:3a:2f:d6:5d:91:d0:db:5c:16:0a:d7:
         6c:c9:eb:5f:e9:a4:44:0e:90:f9:ca:91:43:40:9e:81:89:8a:
         da:d8:1c:1d:69:72:9f:6c:bc:d0:a1:a8:fe:c7:63:db:c8:b4:
         7c:09:40:d3:05:35:cc:be:6e:91:d9:47:6b:07:92:c7:ee:2f:
         60:fa:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 10:16:37 2026 by rpki-client