Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/7408436e-8a90-30e0-ad61-aa6858502fc2.roa
File:                     7408436e-8a90-30e0-ad61-aa6858502fc2.roa (raw, json)
Hash identifier:          hUMHeAbuxBaT9GDzPHjglNX2eUsKMQtRxssuAoGjY0M=
Subject key identifier:   EC:7D:F6:B3:95:82:E2:FC:43:49:A1:A9:74:2D:F7:53:F0:46:19:7F
Certificate issuer:       /CN=c3ad4f2f-87c3-436e-b0e5-3532e2109f9f
Certificate serial:       010D0C9F4328584E9334F477375F4C0F0984D080
Authority key identifier: 72:BF:7F:A2:49:19:D0:1A:D3:D7:C6:27:B5:D1:B9:FD:CF:DA:D3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/7408436e-8a90-30e0-ad61-aa6858502fc2.roa
Signing time:             Tue 21 Jul 2026 18:19:02 +0000
ROA not before:           Tue 21 Jul 2026 18:19:02 +0000
ROA not after:            Mon 19 Oct 2026 18:19:02 +0000
asID:                     36224
IP address blocks:        2620:10c:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:34:f4:77:37:5f:4c:0f:09:84:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ad4f2f-87c3-436e-b0e5-3532e2109f9f
        Validity
            Not Before: Jul 21 18:19:02 2026 GMT
            Not After : Oct 19 18:19:02 2026 GMT
        Subject: CN=6d9ea999-c9fb-4777-91d0-a63a67d484e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:a2:85:7c:2e:ab:85:23:8d:c3:f6:f5:bb:
                    37:d3:cf:69:51:9d:e6:ea:a8:c4:6f:bb:e0:f2:85:
                    34:c9:67:74:33:65:68:fc:b1:ea:af:9c:23:a3:93:
                    18:35:4f:93:1d:0b:7d:b1:cc:5c:9d:19:af:b2:4d:
                    49:57:79:32:f2:5c:b8:1f:eb:60:47:03:c1:32:4b:
                    00:89:47:21:96:5d:d5:cb:62:7d:58:3b:f4:15:de:
                    15:7e:53:4b:46:80:63:cd:a9:0b:77:6b:95:02:e9:
                    e0:b6:f8:96:9e:db:ef:26:0e:88:44:ed:c6:2e:38:
                    c1:a8:87:59:6e:4a:a2:42:06:cf:74:bf:05:e3:76:
                    c0:6a:0f:69:37:d5:2d:b1:30:16:cd:11:21:e3:09:
                    c5:3a:cb:3f:4a:c4:92:09:ee:7b:f5:34:23:94:dd:
                    09:06:67:8a:2f:e6:81:80:2b:3a:20:ad:74:f2:7b:
                    6d:08:f2:a3:ea:52:f6:bd:55:e3:9a:33:95:3b:8c:
                    13:99:c1:68:be:62:7e:0f:1c:e5:97:12:50:a6:d5:
                    42:61:77:49:ff:6b:96:24:5e:fc:95:75:b7:94:9c:
                    70:04:a8:82:11:fa:a0:87:cc:4b:0a:1d:9b:2b:35:
                    cf:8c:71:d3:ca:b1:23:30:67:83:a7:11:ce:81:43:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7D:F6:B3:95:82:E2:FC:43:49:A1:A9:74:2D:F7:53:F0:46:19:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/7408436e-8a90-30e0-ad61-aa6858502fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.crl

            X509v3 Authority Key Identifier:
                keyid:72:BF:7F:A2:49:19:D0:1A:D3:D7:C6:27:B5:D1:B9:FD:CF:DA:D3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10c:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:01:68:de:ab:93:0c:49:09:9c:79:e4:17:d9:73:6c:72:7b:
         ed:de:06:e3:ba:6a:af:50:8a:e2:0a:18:23:b7:bc:b5:f1:16:
         62:22:c7:71:ab:74:55:b8:cd:0a:16:21:bc:9f:e9:57:5a:2c:
         0f:0d:45:24:ef:db:ed:91:35:77:75:81:47:23:24:8e:43:9a:
         d0:81:c3:9a:f7:d0:ff:97:07:e1:a3:fe:b1:e6:af:40:0e:9f:
         4a:06:01:b7:e3:92:48:33:b5:63:cd:30:e2:26:7d:a6:bd:18:
         cd:85:31:e4:79:07:33:4f:fb:eb:5b:fc:7c:ed:91:bf:15:bb:
         3e:65:7f:b6:4a:3c:9a:e2:8c:4b:c1:56:6e:42:b0:9f:c7:f7:
         8a:f7:06:c8:ed:1f:d1:49:95:78:84:24:9d:f0:02:5a:e3:c7:
         4b:7e:dc:8d:5f:8b:0b:9b:14:20:4b:89:a5:f8:5d:86:99:a7:
         ae:22:8b:60:9e:91:8a:96:36:5e:8c:ef:63:bd:ab:69:1b:ad:
         b3:8a:14:6f:0c:50:c9:cc:8c:5c:47:ed:a6:6b:98:25:0b:cb:
         eb:16:24:a5:ca:72:e0:a5:06:33:70:95:46:63:30:e9:79:9f:
         2c:33:e8:00:5c:14:0a:d7:db:e0:bc:68:09:00:dc:f3:e8:ba:
         55:e0:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:02 2026 by rpki-client