Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/6efa98ee-db36-34b0-94ad-e629f25e1218.roa
File:                     6efa98ee-db36-34b0-94ad-e629f25e1218.roa (raw, json)
Hash identifier:          xday72c0Elc0MIPFCZoFfQAp0/0LmUtKfenrE8IVjFY=
Subject key identifier:   FD:14:26:0D:F3:2D:4B:9B:16:6E:21:D4:84:F6:E0:A6:61:7B:A5:54
Certificate issuer:       /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Certificate serial:       010D0C9F4328584EA798D0944CEDD2C1B889A900
Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/6efa98ee-db36-34b0-94ad-e629f25e1218.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2602:814:b00a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:d0:94:4c:ed:d2:c1:b8:89:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3acaf0ca-9dd1-47f7-8091-41a0deb1f638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:72:6e:7e:b4:3d:58:82:81:ec:d3:7b:73:02:
                    b4:32:01:72:47:32:76:16:8b:89:84:cc:dc:2b:c5:
                    58:34:3a:50:0c:9a:f1:e7:cb:2c:11:fb:52:b7:8e:
                    d8:1e:59:33:6b:1b:39:fb:82:6f:d2:7c:9b:0c:7c:
                    25:7a:2a:d9:01:ce:7f:ca:52:b3:16:8a:81:08:88:
                    14:5b:68:2e:9c:eb:97:1d:12:c2:3e:d4:d5:42:ad:
                    d4:e9:8e:49:d9:44:14:ad:09:31:f0:92:c4:42:53:
                    5b:bf:05:8b:bc:f8:ca:d3:e5:46:e7:1a:59:47:f2:
                    45:71:de:04:39:b3:63:80:c0:d3:14:2e:97:34:f1:
                    06:bd:a7:5b:58:13:7e:44:93:54:9d:10:bb:0f:6d:
                    a1:ab:b2:f5:a6:9b:d7:b2:04:b0:96:e6:3f:da:93:
                    ec:e3:d4:76:a3:d9:e9:59:11:1b:2e:ae:2c:38:89:
                    eb:47:0a:a8:6c:fc:18:29:5e:6d:73:62:92:c2:38:
                    37:24:a1:98:b5:58:8b:f7:9c:fb:f8:38:2c:22:ec:
                    c6:3d:32:b9:2a:51:ee:c6:8a:92:4a:a4:da:ca:68:
                    9a:4b:2d:cd:1c:ae:f6:00:cd:03:8e:81:ae:9b:3b:
                    71:52:ca:b3:f2:1e:70:0d:41:75:c0:ba:44:2b:3c:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:14:26:0D:F3:2D:4B:9B:16:6E:21:D4:84:F6:E0:A6:61:7B:A5:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/6efa98ee-db36-34b0-94ad-e629f25e1218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:b00a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:d6:65:df:e4:d9:04:e6:d1:5a:e0:91:14:ad:dd:c8:bd:
         c4:15:a6:e0:99:e9:5b:88:9c:e0:ce:01:85:b1:b9:fb:70:8f:
         2a:82:5d:59:bc:3b:af:e3:27:e3:4d:5c:01:2e:f0:4a:84:c8:
         5d:38:4c:3e:5f:4b:d1:58:0f:e7:ef:d7:45:10:9d:b1:b6:ae:
         6a:e0:ee:94:5d:67:8c:f1:55:69:0d:c7:f2:8f:96:7e:db:18:
         2f:12:37:67:2a:66:7b:51:92:10:4f:e9:80:ff:de:ef:c9:ac:
         b9:6b:e2:55:eb:25:ca:18:c7:86:41:10:2f:7b:26:94:27:cf:
         f8:4d:0f:92:0c:4d:c9:02:27:66:e4:f0:66:84:bb:3c:dd:15:
         64:3d:e2:3b:12:cf:8b:98:df:4b:d9:7d:fc:a2:62:05:be:5f:
         b5:4a:35:95:c5:50:c7:4f:66:45:78:45:fb:a4:01:e2:30:86:
         f9:72:c2:92:e2:ae:23:29:7e:e2:26:c0:43:89:1c:43:ad:9c:
         fe:db:35:a3:c6:28:42:4c:b4:ae:66:97:73:3e:16:b9:8f:17:
         58:16:b2:39:ac:f1:1b:7c:f8:23:28:0e:54:1a:2c:62:b5:ea:
         fb:91:e8:9c:6f:dc:be:76:c9:97:c4:85:c0:4e:cd:e9:7a:6b:
         43:c1:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:53:44 2026 by rpki-client