Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa
File:                     2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa (raw, json)
Hash identifier:          1TkfsGGhB+NS7hrdftzrEVsigXNDSeLLLTLT9E7jIyw=
Subject key identifier:   E4:90:58:CD:CA:76:80:1D:DC:7F:6A:E7:86:48:19:A3:59:65:FD:C2
Certificate issuer:       /CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60
Certificate serial:       010D0C9F4328584EAE81A6C5E34FB247024E4D80
Authority key identifier: 56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     397059
IP address blocks:        2620:4a:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a6:c5:e3:4f:b2:47:02:4e:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=711be7f8-0363-4d22-82f5-8e31e57641ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:3c:13:a6:ea:24:20:00:b2:32:61:4e:64:
                    a8:5e:65:03:03:36:7b:ab:3e:d6:1c:6d:81:7f:f1:
                    9e:5f:49:29:c9:5d:36:1e:c1:19:b3:2a:76:a9:c0:
                    96:97:ae:96:be:47:fb:56:61:a9:96:cf:66:99:d2:
                    f3:84:6b:d3:50:3c:33:dd:e0:78:23:da:7a:8c:ed:
                    9a:ae:48:39:5a:03:7d:f9:3a:7f:4d:6e:98:45:97:
                    da:4d:0a:5f:50:22:3b:75:78:ad:ba:24:46:ff:40:
                    ee:80:25:62:70:d2:17:48:ab:2f:09:25:70:5a:33:
                    45:f1:cf:52:3c:c0:e2:e9:6c:4b:ba:95:e8:fa:84:
                    bd:87:0f:e6:a8:6a:a3:02:16:5c:7c:0c:cb:d9:0d:
                    2c:8b:96:7c:cf:f5:ed:8c:cc:05:c1:77:59:7e:5f:
                    86:ab:e0:0a:88:6c:64:54:9d:d0:35:d2:2c:5c:80:
                    22:4f:87:ba:37:1f:e9:ad:d1:2a:b6:b5:c8:44:2d:
                    f9:6b:26:74:5d:f7:67:0c:f7:9e:02:88:ab:a0:0d:
                    4b:97:ee:69:ac:5e:ad:de:96:20:18:ec:93:09:e4:
                    00:93:ed:bc:2f:b6:a7:10:40:35:d1:0c:24:8c:e4:
                    26:f9:69:62:ca:2c:f2:22:14:ed:2b:dd:41:8c:94:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:90:58:CD:CA:76:80:1D:DC:7F:6A:E7:86:48:19:A3:59:65:FD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.crl

            X509v3 Authority Key Identifier:
                keyid:56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4a:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3c:91:f7:8f:13:63:13:96:1a:db:65:12:e8:c7:21:2a:44:
         bb:65:5d:44:9c:5e:94:6c:14:69:c9:ce:48:f0:4f:e0:af:26:
         1d:b4:49:4e:7c:67:5d:b0:9e:bd:59:45:8e:72:0b:2d:57:9d:
         73:be:5a:ab:e0:8d:33:10:9b:b6:42:e9:4a:65:9d:b7:72:03:
         3a:8e:71:1a:82:8b:bf:bd:60:95:29:8c:03:9e:6b:7b:8d:b9:
         d0:be:5d:a3:93:91:5b:cd:75:e5:af:eb:d7:9c:a3:70:ec:b3:
         37:0f:63:b3:e7:f7:35:0b:cf:9b:74:a1:9e:e3:8d:b3:08:d4:
         69:3b:16:13:dc:12:30:66:00:14:89:41:1c:58:3a:17:13:0e:
         46:f1:38:7a:79:dd:59:38:cf:d2:63:29:49:35:68:34:d7:41:
         9a:ea:e5:ba:7f:c4:99:10:4c:fe:ce:69:3e:eb:38:ee:7a:36:
         55:16:f4:ff:c7:bd:82:63:3a:7d:76:23:f7:07:5c:c8:c5:20:
         2c:16:ad:fc:63:07:06:ac:5b:d3:ad:7a:51:92:d9:90:fc:bb:
         98:76:b0:fa:e9:ad:e3:eb:41:53:bf:a4:7b:ea:61:d3:99:b1:
         e5:16:ee:4c:42:f9:a2:9d:c3:53:ea:eb:84:cc:73:a4:82:bb:
         91:08:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:10:42 2026 by rpki-client