Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/6b4e4335-ecfc-359a-9f3e-55d8c36b1d06.roa
File:                     6b4e4335-ecfc-359a-9f3e-55d8c36b1d06.roa (raw, json)
Hash identifier:          557KEf/7b+0RaSKN2fUN+f47oNujmo6TMHgBqTmMDcE=
Subject key identifier:   2A:8B:3B:DE:1E:E8:18:F2:5F:60:F6:07:A0:84:9D:45:DC:D9:F9:50
Certificate issuer:       /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial:       010D0C9F4328584EA797CF8C9BCFF82B935CAF00
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/6b4e4335-ecfc-359a-9f3e-55d8c36b1d06.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        2602:f8b4:2::/48 maxlen: 48
                          2602:f8b4:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:cf:8c:9b:cf:f8:2b:93:5c:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bbf55e6e-2b3d-47f9-a0f0-550cc4deb2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:54:6d:a3:c3:40:09:1f:72:62:26:a2:d2:
                    15:bf:cb:cc:76:50:42:a3:3d:c5:39:58:1a:bc:6a:
                    51:b1:ce:c2:ea:97:a3:d6:d4:86:14:bc:1d:cf:45:
                    19:0e:f5:1a:70:89:05:c3:67:45:8f:38:8a:05:2b:
                    68:45:3a:32:52:c5:d7:1d:81:86:2e:0f:a8:ce:32:
                    18:00:57:56:5b:b6:9f:c7:d5:d9:67:a8:6e:94:92:
                    8d:2b:a0:df:7c:83:a8:0f:20:09:6a:f7:74:d6:db:
                    39:77:e4:22:35:d8:6f:e9:b1:b0:ef:e6:c9:15:31:
                    58:75:cf:ba:6b:19:93:7a:a8:19:70:b3:cb:f0:66:
                    d5:90:16:e0:97:d9:0a:6c:10:6f:25:11:f8:4a:f0:
                    d0:eb:52:c1:ce:0a:43:4e:54:93:05:7c:fd:8d:4b:
                    81:1a:63:4e:6f:b9:cb:db:5e:39:0f:37:e1:2f:db:
                    54:fe:89:3a:50:db:10:10:7b:11:93:da:55:d4:94:
                    16:d5:19:c7:3d:96:cd:d6:1d:6a:20:04:85:cb:af:
                    3c:16:4f:f0:a7:99:1f:31:c8:10:fc:68:74:a5:e0:
                    f5:8c:cb:0c:c3:52:f1:2a:5a:7e:e4:54:37:a6:87:
                    2f:da:07:a2:15:72:07:98:03:9f:01:d2:d9:63:b6:
                    23:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8B:3B:DE:1E:E8:18:F2:5F:60:F6:07:A0:84:9D:45:DC:D9:F9:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/6b4e4335-ecfc-359a-9f3e-55d8c36b1d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl

            X509v3 Authority Key Identifier:
                keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b4:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a2:20:7e:19:e8:5b:dc:55:6a:e4:95:7d:31:b2:d7:41:3f:
         55:7f:dc:61:e0:43:7e:79:f0:13:f1:6b:56:46:5c:4d:5a:17:
         14:89:89:1e:d1:3e:a7:c2:a9:47:1b:aa:8d:0b:64:22:fe:21:
         ea:c7:8a:15:02:46:0d:f7:4d:7a:f5:c4:0b:2e:e5:11:b1:40:
         b6:ac:d0:a0:e5:d0:fb:2b:c4:44:41:c7:01:19:3b:e2:ed:b7:
         52:ff:90:cf:0b:7e:be:cc:6c:dc:ea:97:fe:4f:46:be:3f:f8:
         fa:f8:48:61:05:fd:2c:eb:fa:6d:c9:f3:26:df:8c:0e:8d:37:
         e8:0e:15:06:45:e9:b8:7a:11:4e:69:a9:4e:fc:5e:bb:6c:77:
         df:e7:65:d2:65:43:c8:18:89:81:67:0e:2a:e5:94:14:87:40:
         10:c5:01:46:9d:ec:37:3a:f1:f7:5d:3a:ab:69:f5:25:a5:7f:
         c0:f2:f3:d2:ad:e8:13:63:be:6e:cc:48:37:5e:9a:c5:26:f8:
         c3:3f:f5:37:97:bf:4a:31:eb:88:27:47:eb:e2:fc:30:46:4b:
         85:ae:7c:b2:d8:0e:c9:7f:49:30:77:2d:4e:f7:b7:fa:58:37:
         48:76:18:ad:c5:71:00:1a:7d:86:09:a9:78:b5:4e:6b:16:55:
         f0:f3:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:33 2026 by rpki-client