Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa
File:                     b908c36a-0e1e-3898-b007-634966e865f9.roa (raw, json)
Hash identifier:          59eLLjakhIQ9l8XTccrMhMwrLxbt1CnMBWAGNoPipKU=
Subject key identifier:   90:E4:9B:0F:BD:AF:49:56:91:90:88:23:68:80:54:3C:23:FD:FC:E8
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584EA7884E2B2A53CE915960B940
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     61112
IP address blocks:        2602:fa4f:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:4e:2b:2a:53:ce:91:59:60:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=312dcc19-79e8-40f1-bdb4-3d386efd08f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ec:71:f9:62:97:da:4a:21:7f:95:ed:11:00:
                    2b:94:37:ee:34:99:1c:f2:bc:a4:15:2b:aa:15:5f:
                    d7:6f:be:3d:0a:f7:fb:82:a5:e1:ab:ff:1b:c4:29:
                    2c:2f:24:bb:87:b7:b0:6b:73:43:23:5d:38:08:d2:
                    bc:56:ab:58:d3:19:3d:22:af:20:9a:41:a3:10:d5:
                    60:b0:7e:8f:3c:42:29:d3:d6:f8:b4:f0:b1:9e:cf:
                    53:d9:39:dd:55:96:2e:98:c9:5c:fb:3a:e2:e3:1b:
                    f9:f8:0d:fd:df:32:07:e4:ce:f4:15:43:52:2c:a9:
                    64:bf:68:04:9f:68:08:89:c2:ec:cf:9c:49:e2:c1:
                    f0:f4:6d:34:a6:65:af:07:3b:b1:92:1f:f9:90:a2:
                    5a:66:e2:fa:1d:6e:0d:ed:f8:60:c5:f1:46:2b:af:
                    09:7f:6a:52:54:bc:74:59:32:fa:aa:f9:02:fc:c9:
                    95:9f:71:2a:1f:5c:0c:28:83:e6:f3:e5:c7:16:79:
                    5c:6f:dd:30:7e:a0:56:eb:68:05:d0:1a:10:17:eb:
                    33:f3:5c:37:73:a4:c2:eb:33:a0:f7:b9:0a:42:8c:
                    ee:ca:11:5c:11:01:80:58:93:0e:05:13:8c:3e:b8:
                    29:93:ab:fa:4b:da:ef:4c:77:e8:39:7c:25:07:ed:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E4:9B:0F:BD:AF:49:56:91:90:88:23:68:80:54:3C:23:FD:FC:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:61:cb:b7:c7:8c:fc:40:e2:23:42:1f:c3:10:dd:a0:4a:09:
         8c:27:cf:58:fb:a8:14:5a:38:cb:2e:ad:8b:65:67:ee:0d:bf:
         ed:9e:39:15:a1:37:94:8e:be:4a:50:d5:45:5e:a9:ac:cb:de:
         f5:92:36:e9:af:8a:c7:ef:ea:af:52:fb:cf:44:6a:b0:30:44:
         f4:b2:1e:18:b9:14:06:b2:c9:e6:f0:ae:3d:8c:74:98:fe:75:
         e6:a2:63:2b:ef:22:7b:bf:88:52:98:66:12:e4:eb:09:04:80:
         52:d6:85:c0:88:29:2d:8b:9a:77:4b:0d:92:d1:26:d1:f2:b5:
         e4:de:83:23:04:da:34:2a:4f:ab:cd:b4:92:6b:87:57:04:ff:
         be:31:6d:3a:c2:0a:85:6c:06:5c:0b:20:46:52:0b:c9:82:6e:
         c0:f7:48:87:f4:41:15:1d:27:f0:48:51:10:d3:f4:47:4b:ea:
         8a:fb:d0:98:48:e7:12:12:38:a6:54:91:a8:a7:a3:27:83:88:
         10:6f:c9:25:00:0f:3f:94:fa:23:b7:90:97:59:0f:79:5b:be:
         4f:43:e8:aa:bc:de:ae:14:f0:2b:3b:e5:79:c8:62:98:5e:99:
         0e:8b:99:4b:f7:ed:a3:42:31:36:c6:21:bc:97:67:13:fc:b3:
         26:d3:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 16:29:42 2026 by rpki-client