Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/295cb1ee-8016-3635-a0bf-50d5f9a7f3de.roa
File:                     295cb1ee-8016-3635-a0bf-50d5f9a7f3de.roa (raw, json)
Hash identifier:          NL90nqNC4SU5qJdrouSFWvLk1szfER0JIJIJsu118iU=
Subject key identifier:   BC:06:C9:92:08:A7:F8:83:8F:D2:0D:46:5B:AD:ED:26:0C:0A:38:11
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E3E5F3DBCFA6FEF7029F887E0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/295cb1ee-8016-3635-a0bf-50d5f9a7f3de.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     32703
IP address blocks:        2607:fb08::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3d:bc:fa:6f:ef:70:29:f8:87:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=e649c8c5-8e5b-44de-bbe0-3adbe34711db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:dc:23:9f:bc:46:31:58:06:f0:67:93:de:
                    77:3f:01:e0:5c:66:ef:b9:f7:11:b1:c7:b6:bb:e3:
                    a4:ae:84:1a:7f:65:47:a4:aa:91:77:bb:8c:74:0a:
                    0e:9f:f3:e5:dc:f3:42:85:44:1b:8a:e5:be:d1:e9:
                    c7:4f:69:ec:85:c8:4a:b3:19:f0:85:fd:fe:1e:1a:
                    25:d9:75:80:43:cd:0a:e9:9a:dc:70:35:3d:16:e1:
                    c5:d4:33:af:f3:04:82:e9:c6:1e:50:8e:0c:b2:d8:
                    f0:20:5c:8d:b7:6b:ee:fe:3c:14:1a:0e:a4:13:1e:
                    36:d7:3a:7e:fd:ae:e2:4f:eb:6b:2a:4b:4a:d4:77:
                    cb:c1:a1:ac:1f:04:59:cc:d0:e3:3b:45:ac:90:e4:
                    6e:9f:6c:ad:b1:87:83:a6:af:e0:3d:06:4d:9c:f7:
                    d1:8e:31:ff:9a:c3:c5:8a:94:b6:e5:c0:5e:30:6c:
                    97:4e:00:a7:04:48:25:42:17:05:e7:49:40:05:29:
                    45:42:f4:95:ac:b5:64:a9:77:09:70:93:bf:b8:0e:
                    d8:d9:17:63:6f:63:b7:0e:de:a5:8e:59:7f:82:ed:
                    2f:09:27:53:13:9d:06:44:18:8f:ba:a4:08:b3:83:
                    9f:5a:b1:af:be:a7:ee:5e:3a:67:2d:c9:40:bb:0d:
                    8c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:06:C9:92:08:A7:F8:83:8F:D2:0D:46:5B:AD:ED:26:0C:0A:38:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/295cb1ee-8016-3635-a0bf-50d5f9a7f3de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb08::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:e0:de:0b:38:03:11:46:0a:34:99:53:64:8e:e8:b5:0f:
         27:c0:86:12:3d:62:ae:6b:d6:38:09:8a:0e:ff:3e:b9:42:eb:
         45:42:f8:b7:e1:24:c7:2c:91:db:b4:15:f6:5c:fe:bc:c8:4f:
         10:3d:c9:db:46:28:a6:5b:f5:bb:8c:b1:01:d1:f7:38:2c:8e:
         09:be:ae:0b:28:d3:9c:e4:dd:1b:12:21:40:15:81:fa:23:fc:
         71:9b:2a:4a:c8:12:52:82:49:13:53:d3:f0:65:42:da:a5:b3:
         e6:4a:a6:8a:5f:ee:f8:74:be:82:03:1e:13:70:4f:29:b9:ee:
         d7:27:09:9e:ec:2d:7b:c1:46:85:68:2b:87:ca:0b:a4:e9:e3:
         56:5b:49:6d:e3:f2:78:25:63:6c:32:7b:ec:7f:f0:df:12:0c:
         d5:b9:a9:d9:94:7f:13:49:86:fe:48:73:0e:58:e0:38:18:63:
         d9:6f:bf:4f:36:a1:e1:fb:25:21:bf:9b:1d:b0:82:b4:55:15:
         dd:e1:2d:94:cd:0c:de:9e:10:9f:fc:dd:0b:ba:03:27:2b:e9:
         95:72:f5:78:ba:b6:bf:34:72:af:ec:d7:60:4e:c2:eb:f4:16:
         fb:3b:ab:50:ad:37:db:8b:58:20:8b:89:cf:b4:38:53:fe:af:
         05:22:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:50:22 2026 by rpki-client