Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/ff86f246-89ba-3402-8d9d-9c95a4a80405.roa
File:                     ff86f246-89ba-3402-8d9d-9c95a4a80405.roa (raw, json)
Hash identifier:          U8LpQ3U3ZhDDQH3wHsp2L+zYaq8T+D8Q0Zslf/r2ekQ=
Subject key identifier:   CF:45:76:F3:0A:52:DC:40:31:5B:5B:C1:0F:EC:69:0A:73:7A:99:45
Certificate issuer:       /CN=1b03e342-d588-4239-8704-6688d01760d9
Certificate serial:       010D0C9F4328584E35FF138FD18E5F20B9008900
Authority key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/ff86f246-89ba-3402-8d9d-9c95a4a80405.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     397031
IP address blocks:        2620:57:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:13:8f:d1:8e:5f:20:b9:00:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b03e342-d588-4239-8704-6688d01760d9
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=28b6c65c-25e7-4f3b-ab01-9c85dcf93f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:46:36:11:e7:8f:a4:be:32:13:db:7d:99:a0:
                    7a:d7:d4:18:0c:d3:e7:a4:c2:8a:f8:a8:4a:33:f4:
                    a9:0e:b4:3f:18:51:b1:46:1b:3c:2c:86:b7:50:d3:
                    2b:76:64:bd:bf:23:eb:80:96:38:9a:59:ed:ab:3a:
                    3b:2e:d8:d8:d8:95:c2:ab:c9:c5:50:21:14:19:72:
                    fb:14:5b:fd:08:2f:c9:fe:a1:33:c9:af:b0:6a:7c:
                    fb:37:1c:09:dc:59:f7:8a:99:25:53:5e:88:d6:a6:
                    45:3a:9e:23:65:37:01:b3:71:0a:58:0f:a7:4d:28:
                    88:92:cf:d4:8d:89:75:d4:9a:4c:e1:a5:53:8d:8d:
                    37:90:6a:ef:bc:2d:21:72:9f:96:be:87:21:96:c3:
                    82:b3:64:1d:c1:04:df:2f:35:a2:0d:ab:7a:2d:0a:
                    30:d1:73:98:e9:13:3a:ac:db:07:bd:8c:51:e8:d8:
                    b9:dc:b6:29:6f:74:29:63:4e:3d:ea:51:c1:d7:ac:
                    b2:d6:73:80:ea:c6:cc:5b:1f:c5:eb:e3:2e:9f:2c:
                    d2:c1:63:a9:8c:de:89:3f:91:f9:4c:49:12:42:a7:
                    d9:38:83:e6:3b:83:2d:ce:dc:cc:1a:47:e8:10:50:
                    b9:41:63:d5:7f:94:59:5b:84:36:99:15:3f:ea:09:
                    94:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:45:76:F3:0A:52:DC:40:31:5B:5B:C1:0F:EC:69:0A:73:7A:99:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/ff86f246-89ba-3402-8d9d-9c95a4a80405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl

            X509v3 Authority Key Identifier:
                keyid:13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:57:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:87:f7:d4:80:51:0a:23:3c:df:b9:20:02:e6:13:57:a8:
         18:28:9f:b0:d5:d4:16:25:9e:3b:1c:36:0b:5d:97:9d:44:24:
         37:55:39:2c:d2:83:23:c4:5c:aa:15:41:77:b1:ea:0d:2a:16:
         d7:2e:2f:8f:29:cd:66:e0:55:8d:99:e9:93:89:99:42:eb:20:
         63:52:96:fd:1c:e1:b6:55:30:56:d7:43:86:1d:aa:fc:70:ba:
         3a:17:48:fe:67:5b:83:b9:a7:8e:a1:1c:bd:17:1c:76:b8:44:
         95:a2:1a:55:2d:56:3a:85:cd:c7:be:5e:7e:79:c5:cf:cf:6e:
         5b:c3:90:67:14:36:20:cc:03:8b:28:25:50:0b:6e:8e:92:9e:
         e7:ec:9a:9c:13:89:31:8a:0b:65:e3:32:d5:01:f8:13:4d:25:
         bb:b2:72:8a:e2:d2:8d:57:85:7a:b9:1d:3e:73:5d:29:f0:fa:
         24:96:b0:1b:36:bd:27:74:33:05:d8:2b:13:01:3f:b1:16:f4:
         90:0f:56:32:55:1f:71:a7:ce:a7:e9:de:77:15:37:c4:4f:1c:
         4e:bc:d8:46:f4:65:16:66:03:a7:ba:09:91:2a:e0:5b:2f:bd:
         6c:0a:3f:2c:69:bc:e6:5d:c3:db:bc:23:ad:83:33:22:52:ed:
         1b:07:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:02:48 2026 by rpki-client