Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa
File:                     dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa (raw, json)
Hash identifier:          l29z05F1Lece6OjrxSzW6ip2k+dq1BUXAMvcBVTdCLg=
Subject key identifier:   3E:3A:BC:AD:04:9B:14:63:CE:36:EB:62:21:CA:F7:0A:F7:0B:9E:B4
Certificate issuer:       /CN=2aa2eb71-3102-4859-928f-a833f2c63713
Certificate serial:       010D0C9F4328584EA8EC3EF1EAC4BBF4D7941280
Authority key identifier: AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     6373
IP address blocks:        2607:7c80:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3e:f1:ea:c4:bb:f4:d7:94:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa2eb71-3102-4859-928f-a833f2c63713
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=729bcf23-44f2-4bf4-8daa-80611975919d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:38:d1:72:5f:3c:49:3f:84:f7:8f:31:e0:
                    df:32:78:5f:db:ee:9e:2e:0f:b0:8c:59:63:1b:97:
                    76:89:01:2b:3d:6e:12:22:db:b4:0c:83:21:d9:83:
                    ce:60:5c:b8:5b:c9:7d:53:d2:3c:b6:cf:3f:99:e4:
                    17:e6:a7:e7:7d:2e:1a:61:cf:ef:ae:4d:e5:07:4e:
                    eb:70:5f:e2:94:4c:e1:bf:25:42:da:7e:05:ce:18:
                    dc:d8:80:fd:2d:27:05:ef:21:93:30:82:a1:05:fa:
                    ef:ce:d0:da:56:2a:4a:7f:92:ee:df:06:aa:56:f4:
                    e3:72:e5:6f:21:c3:d5:f7:bf:0d:d6:76:0a:be:76:
                    f3:93:86:4f:12:c6:59:0c:e5:bd:ab:96:7e:a0:75:
                    42:98:03:fe:71:2f:0f:c2:e5:17:73:69:62:7c:77:
                    3b:ac:a7:cd:a6:35:40:a6:4e:b9:82:e9:fd:a7:38:
                    1b:5a:3b:48:43:4c:83:75:97:bd:00:6b:b1:43:ac:
                    0c:4b:4c:cd:07:d3:00:c8:d4:fe:83:c8:19:65:b7:
                    3e:fa:84:5e:52:dd:81:6c:40:d8:3d:43:b5:ab:d7:
                    81:14:fb:ab:77:c1:df:cd:33:71:80:4c:44:9c:98:
                    9c:ef:87:b6:cf:60:a3:7b:d3:4c:75:95:8a:cd:2b:
                    1f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3A:BC:AD:04:9B:14:63:CE:36:EB:62:21:CA:F7:0A:F7:0B:9E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7c80:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:22:93:81:1f:04:25:c8:2a:5b:8c:e0:7d:ef:94:50:01:27:
         13:5f:99:f8:b0:f3:8b:fc:d8:a1:98:44:81:c2:24:59:3d:dd:
         2d:25:af:02:73:12:e5:d1:3e:6d:95:8c:e2:62:ec:3f:4f:8f:
         7f:e3:b2:89:7a:6e:36:b1:1e:35:03:d2:af:20:77:1d:fe:d0:
         0d:09:33:78:ae:f4:5e:89:cd:ed:41:8c:4d:a8:7b:81:5b:11:
         1d:87:65:14:4d:ef:94:86:e2:d5:6b:19:d8:fe:b0:fd:e9:21:
         2e:c1:6a:c9:b6:dc:fb:08:66:6f:c5:4f:9a:22:eb:2e:ef:57:
         cb:56:b4:8b:98:71:22:07:33:62:61:f6:b0:44:4f:cd:9b:5f:
         29:c9:98:2b:3b:92:71:4a:fc:c6:24:e9:31:25:9b:9e:c7:4d:
         43:31:1e:41:52:a5:5e:20:eb:54:85:dc:30:44:a5:b3:59:c2:
         48:2c:68:29:da:af:59:fe:3e:95:05:03:83:24:38:75:ac:4a:
         65:cd:d0:2a:e1:b4:0f:68:26:d1:8a:1a:5b:b0:7a:5d:7d:6c:
         28:26:54:8c:36:56:6d:d9:64:25:83:16:4d:d5:a8:3d:93:8c:
         90:fa:3f:d9:97:99:5e:cf:de:09:d3:2f:45:d0:61:d1:1f:ba:
         0c:f1:2a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:47:59 2026 by rpki-client