Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa
File:                     922fa9c7-bd18-3321-a549-97584b01d98d.roa (raw, json)
Hash identifier:          k9DDRMBbW27Ov4jejnH/H/nwFYBfz1ieQQujW5Nytf4=
Subject key identifier:   1D:83:F5:B7:92:E6:E2:5B:C8:DE:5F:24:44:6A:25:7C:D2:1D:4E:DF
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F4328584E3E5F1FACC86458CDFC56F1C0
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     396982
IP address blocks:        2607:1c0:1320::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:1f:ac:c8:64:58:cd:fc:56:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=2964d46e-84cd-421e-91e1-69e68c935db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:2f:8a:d4:c9:a2:c5:8f:36:d5:ae:d7:f5:
                    36:b4:10:50:40:ad:11:a1:eb:b8:5e:9c:75:bc:b3:
                    5c:89:ad:6a:a2:d6:de:72:49:5c:8b:e5:6f:7f:09:
                    e6:eb:14:f1:51:f5:ec:ba:4a:04:81:ce:ea:e6:78:
                    98:2e:08:6d:b2:2f:21:f5:ac:b5:a9:14:30:8f:95:
                    53:93:43:39:45:aa:c4:08:2d:12:24:a1:e4:76:60:
                    64:de:d3:5b:85:59:91:53:60:38:16:81:b2:21:3d:
                    7c:b0:a6:c5:70:af:93:c2:cc:69:8e:e7:d8:70:b3:
                    77:35:df:11:f9:45:5a:7d:58:5b:13:95:ad:d5:4a:
                    2d:12:ce:93:5d:fc:32:6e:8c:53:59:20:6f:dd:32:
                    79:bf:ed:93:d7:a8:eb:2a:90:25:7f:70:60:8d:e8:
                    b9:de:63:9d:3c:b9:fa:6a:a8:17:11:bf:c8:61:7a:
                    7b:fb:a1:1c:e5:d0:cc:93:39:03:32:34:7d:ef:d2:
                    99:ab:01:b2:5e:ff:e5:9d:45:35:1d:31:c0:0b:3a:
                    3f:31:7a:71:4c:b0:b8:b6:50:0d:5b:c5:1d:a4:5b:
                    57:56:e8:e1:62:4f:1b:8d:26:33:0c:87:ff:10:e1:
                    2b:a7:71:44:72:b2:be:85:9a:4f:15:1f:91:3f:6e:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:83:F5:B7:92:E6:E2:5B:C8:DE:5F:24:44:6A:25:7C:D2:1D:4E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:1320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e6:35:79:b2:68:6c:da:99:7c:54:60:94:6b:44:e2:89:dc:
         6a:2d:87:f0:d1:e3:ac:c9:df:e8:1a:9a:0c:62:d5:14:a8:69:
         51:ab:c5:93:e1:69:38:7a:9a:b4:bd:f6:52:df:ae:3e:8f:37:
         58:04:a8:19:b4:74:89:a4:b3:a7:e0:5b:3c:a8:59:c5:3b:6d:
         2b:ca:f0:0e:1c:46:eb:3f:fb:b4:a9:9c:c6:94:fb:5e:bb:e3:
         2a:8d:c5:8e:9e:00:b9:af:fd:f7:86:c7:cc:b3:18:1d:42:a7:
         23:ae:cc:72:ac:25:f1:83:e6:51:d8:9a:2b:2d:0c:c7:58:e4:
         5b:6f:75:30:c6:46:f1:7b:be:18:77:7d:03:38:bf:6e:a6:ad:
         12:b5:00:c7:10:d6:07:66:d3:9f:5d:39:f9:71:6e:68:78:4e:
         76:ef:89:25:68:22:57:52:da:6e:a0:bc:23:e7:51:69:dd:df:
         26:b4:a5:e4:60:9d:7d:7f:47:cb:82:45:2f:6f:05:df:3f:3a:
         d4:5c:67:57:0c:d5:c2:be:a4:6e:7d:16:05:98:16:37:0b:10:
         b3:d4:3e:08:33:f0:14:56:4e:9f:80:9f:dc:90:07:8c:16:7c:
         74:17:d9:fd:5c:86:f9:53:4d:17:b3:55:b2:42:cb:a8:b9:3e:
         47:20:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 17:39:11 2026 by rpki-client