Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/d8cc4dff-a7d1-34e4-85ff-10796d48e7f4.roa
File:                     d8cc4dff-a7d1-34e4-85ff-10796d48e7f4.roa (raw, json)
Hash identifier:          ppxoVD/b6JGNkG2Apz+5XdcG6J2UE4GkkBZt6rUhdZo=
Subject key identifier:   07:BB:E2:7E:93:54:DB:06:79:EF:5B:A0:A5:2B:82:86:20:C3:67:7E
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584EBB11CB99C1F8FE5D190EB120
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/d8cc4dff-a7d1-34e4-85ff-10796d48e7f4.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     398700
IP address blocks:        2605:cc80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:cb:99:c1:f8:fe:5d:19:0e:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=67766c3c-e424-4149-9273-225d2ae633f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:78:2f:fa:45:24:11:88:00:7d:84:c8:bf:
                    32:25:77:23:ff:2c:34:54:21:be:f5:51:24:08:d6:
                    f9:f6:8c:89:64:f8:51:c5:d5:d9:57:8d:1f:f8:78:
                    7b:31:c4:16:aa:d5:54:01:9d:df:e0:c1:57:bb:d9:
                    c1:91:51:12:81:90:93:c2:a0:c4:c5:d3:ce:dd:c2:
                    b7:1d:10:a5:df:37:33:15:7c:29:ab:8a:a0:15:0f:
                    03:b0:af:bf:14:bb:fa:56:d5:93:2b:46:14:15:b2:
                    83:4b:0f:0f:32:6d:c7:ed:92:8b:09:5b:a5:1c:b8:
                    d4:39:7c:b1:bb:ab:8e:ab:3d:ca:83:9a:46:a7:6c:
                    7a:24:57:fc:e6:e4:49:44:30:96:21:4e:81:7d:ce:
                    cb:d1:5a:91:35:5a:b3:5a:93:2b:c7:3f:42:5d:74:
                    39:c9:ce:bd:ef:e5:d7:4e:36:05:6d:5a:5b:2d:34:
                    2a:e1:50:22:04:90:b4:59:92:29:4a:84:fe:50:94:
                    a6:fb:c4:f9:1e:b9:39:01:1b:d7:07:7c:01:b8:90:
                    b9:5b:d0:29:4b:0a:b9:03:fa:9c:fb:99:06:7a:c4:
                    06:a0:05:55:6a:a0:c3:fc:0c:c8:11:c4:79:55:f5:
                    e5:fb:6d:fd:32:e2:fa:8c:2c:ea:a7:78:80:d9:15:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BB:E2:7E:93:54:DB:06:79:EF:5B:A0:A5:2B:82:86:20:C3:67:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/d8cc4dff-a7d1-34e4-85ff-10796d48e7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:cc80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:62:36:82:be:9f:87:3e:c0:68:19:d8:cd:fa:b2:2a:89:62:
         14:65:a2:8a:8b:c3:77:3a:cc:80:0c:9b:5a:67:d2:1f:be:9b:
         89:31:04:75:20:24:06:ac:48:57:0e:de:df:6e:5f:32:74:cb:
         18:64:eb:77:34:9e:20:f6:81:08:b6:bb:23:eb:35:dd:7e:47:
         21:27:f7:43:39:85:bc:18:a6:cb:d0:64:72:4f:00:dd:e9:20:
         f2:44:a6:be:6e:8a:97:c6:9b:74:41:f5:75:69:b2:3a:76:af:
         c6:fb:de:3c:b6:a2:41:27:98:78:0f:82:6c:57:e9:6f:9e:79:
         01:91:3e:5b:48:cf:24:6f:80:a7:ca:c1:cf:b1:e6:d9:5f:9d:
         9a:3b:d9:25:93:a3:d7:1d:e8:0e:bd:ca:12:e4:6b:4c:ac:e5:
         6d:d4:d4:3d:26:bb:9c:58:e0:f0:5d:b0:aa:04:4d:da:fd:df:
         29:b2:34:d5:0a:ba:1a:a1:be:55:21:22:1e:bb:4e:90:51:8f:
         28:64:62:3c:0c:b3:c2:16:68:de:ac:94:75:1e:cd:18:b5:53:
         2a:4e:8a:84:a4:b0:1f:19:65:41:fb:3a:18:7a:5a:64:c2:58:
         d9:f2:e6:95:de:33:0f:62:e8:24:da:53:14:6f:0a:e7:8e:0e:
         90:92:8d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 01:24:32 2026 by rpki-client