Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa
File:                     a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa (raw, json)
Hash identifier:          4f79I+wru6twsWb7DmNvTNpt3+q+nPQ+owu6ukAGrBg=
Subject key identifier:   1B:84:E5:8D:70:34:2C:4E:26:8C:6F:FE:26:D5:21:11:D9:2E:26:F2
Certificate issuer:       /CN=cc16c3db-6181-4312-8911-054e81ccea5f
Certificate serial:       010D0C9F4328584EB6E1A4DE1D70B65EA9B77140
Authority key identifier: D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     5719
IP address blocks:        2620:101::/46 maxlen: 46
                          2620:10d:1000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a4:de:1d:70:b6:5e:a9:b7:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc16c3db-6181-4312-8911-054e81ccea5f
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=3d8be745-8a80-49e3-a5f4-09fe3074705e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:c9:1e:cd:61:45:e2:94:e7:60:d9:9d:bc:
                    32:75:ae:5d:b5:52:2d:05:ba:04:ec:5f:ba:06:09:
                    3d:41:dd:a5:d0:ee:5a:37:02:e1:de:2b:de:2d:10:
                    59:55:48:8a:5d:cb:cd:8a:61:4b:08:f9:20:4c:e1:
                    ee:16:49:ff:ef:b7:52:40:cc:ba:16:9d:4b:87:0d:
                    41:f9:e0:2f:c7:70:55:b7:d2:1b:4f:5f:d0:4b:42:
                    55:f3:16:8b:14:3e:84:e5:b8:70:fe:3d:9c:59:b3:
                    b4:9c:5f:52:7e:39:e3:f5:30:95:b6:60:61:1d:c4:
                    0b:f2:a9:bf:2d:ae:cd:05:90:83:b1:7a:73:bd:d6:
                    7a:e9:9b:48:d0:18:57:60:98:71:7a:13:cb:ea:c5:
                    06:4c:ae:91:cf:5e:63:2f:47:82:67:87:19:82:40:
                    f8:75:15:46:a3:bb:5b:8c:cd:3e:b5:47:9e:cc:05:
                    61:ae:f1:da:c5:af:c7:42:3c:55:90:f9:d6:7e:2b:
                    48:d8:75:be:be:24:74:f8:49:0f:1d:9b:6e:32:69:
                    34:63:c4:74:6c:0b:61:c1:f6:f3:f0:ba:0a:52:db:
                    b0:76:e9:2d:e2:05:e1:f9:62:7a:63:ec:9b:16:4b:
                    51:22:63:3a:41:7c:b0:4d:dd:cd:54:b1:f8:85:41:
                    00:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:84:E5:8D:70:34:2C:4E:26:8C:6F:FE:26:D5:21:11:D9:2E:26:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.crl

            X509v3 Authority Key Identifier:
                keyid:D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101::/46
                  2620:10d:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:a9:4a:d2:fa:f5:ba:e6:91:ba:29:9c:c0:2c:41:4c:d7:f9:
         3d:1c:6a:3e:90:33:da:9d:5f:2c:92:1a:32:54:2b:bc:69:cb:
         56:d3:a8:15:b3:e9:a5:a3:b2:2c:51:1e:05:bc:00:c4:2d:a4:
         6f:db:da:10:23:a5:64:d0:3d:fa:2b:12:ee:b9:77:1e:d0:53:
         be:3a:0c:57:1e:e5:64:51:e6:86:bd:61:70:e2:47:4a:b9:3e:
         08:7b:6f:5f:a2:b4:e5:f9:8d:e5:85:80:a6:fc:b7:0a:c3:ea:
         0a:38:9b:4f:fc:90:6b:5a:0a:87:9b:ca:1d:e1:84:3c:bd:12:
         2a:0c:1f:54:ae:c3:24:0d:b5:53:11:1a:0f:bd:6b:12:c8:bd:
         e6:b4:87:5a:c3:91:ac:13:44:4a:2b:53:c3:c8:43:22:ab:e5:
         66:26:0f:88:d7:24:1a:cf:60:ba:df:58:03:13:74:e9:58:c1:
         8c:7b:50:97:bc:a3:c3:34:36:5d:66:49:fb:5f:d4:a3:e4:fd:
         ee:21:9f:4e:a0:cd:81:75:18:4c:c7:1f:b6:17:d4:50:cc:34:
         45:ee:56:dd:63:01:17:3d:6d:b2:f2:e0:0b:df:bc:cb:a8:0d:
         4a:a4:bb:b2:df:1f:6b:63:b4:e7:d6:16:8d:74:29:99:8c:3f:
         46:ca:c9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 14:37:23 2026 by rpki-client