Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/0ad429be-3be8-3597-bcf4-029734f66ce6.roa
File:                     0ad429be-3be8-3597-bcf4-029734f66ce6.roa (raw, json)
Hash identifier:          oUJ1C0yrOrkh42mgvZiBfbNJdvabw0lXm/w2agky+AQ=
Subject key identifier:   AC:F1:99:0D:31:4C:99:DE:7F:B6:19:66:EA:3B:C1:79:80:8B:B9:8C
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F4328584E43F479B46CCC457634658B00
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/0ad429be-3be8-3597-bcf4-029734f66ce6.roa
Signing time:             Tue 23 Jun 2026 09:00:12 +0000
ROA not before:           Tue 23 Jun 2026 09:00:12 +0000
ROA not after:            Mon 21 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2605:a7c0::/32 maxlen: 48
                          2620:df:4000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:f4:79:b4:6c:cc:45:76:34:65:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: Jun 23 09:00:12 2026 GMT
            Not After : Sep 21 09:00:12 2026 GMT
        Subject: CN=8dbc5106-1d35-4fe5-9e0c-2fa55144e06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:4f:36:ca:4d:47:c3:8f:d1:fb:2d:b4:9e:
                    df:90:97:57:8e:a5:5b:18:67:8e:64:53:f7:40:0b:
                    3e:68:c6:01:71:b9:09:ad:fb:0b:46:1c:49:3f:55:
                    1c:9a:a0:f4:c2:ca:dc:11:b8:96:74:c1:b9:9e:f8:
                    f2:72:23:57:c7:54:f4:b9:cb:4e:d5:6a:80:c6:ff:
                    59:96:dd:5e:11:38:a1:21:7d:54:62:31:21:82:dc:
                    1e:d2:6e:e2:90:d1:d3:1b:11:40:e0:70:9f:21:83:
                    31:3c:89:30:15:e9:1c:11:c1:12:35:44:c8:1e:7c:
                    de:26:ac:26:d0:cf:71:a3:d8:ed:ee:65:67:46:a9:
                    b0:16:89:22:3a:dd:bd:41:53:9a:98:b5:89:bf:77:
                    21:33:83:a0:ee:94:5a:9c:16:35:5e:d4:ba:d2:b0:
                    f7:b1:cd:d2:fe:72:77:f2:b0:f9:77:6d:f3:d2:49:
                    e6:17:d1:53:87:de:9d:66:0f:e9:54:87:26:b2:0f:
                    2c:96:ed:49:1f:9b:bc:30:4a:d8:c9:1a:74:ac:40:
                    a5:e0:34:4b:1f:1b:ba:b4:5f:be:f2:35:1f:4d:58:
                    e4:53:b4:44:0f:df:a3:40:69:fc:bb:98:27:9e:98:
                    68:e7:1d:33:5a:9c:aa:a0:e1:65:e6:49:22:93:12:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F1:99:0D:31:4C:99:DE:7F:B6:19:66:EA:3B:C1:79:80:8B:B9:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/0ad429be-3be8-3597-bcf4-029734f66ce6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a7c0::/32
                  2620:df:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:9b:df:d0:bb:66:68:e5:05:ae:22:ba:8c:08:00:8c:a6:57:
         13:47:8e:c3:15:9b:c6:4b:39:66:b2:ee:e3:d1:3c:fc:77:c7:
         58:cb:dc:8c:b7:7f:90:55:e9:1a:5d:91:dc:b1:7d:71:44:f7:
         70:55:7b:70:93:26:da:83:04:e7:e1:b3:ef:39:d7:6a:b0:93:
         36:d4:be:f9:02:5d:de:ce:1e:3f:42:60:79:30:b1:53:05:34:
         81:b3:27:c4:9a:24:83:c4:5b:c6:22:6e:ad:7d:ec:86:21:95:
         00:aa:3a:0f:b1:92:bc:c8:0f:60:8c:6e:9b:0e:b5:7b:58:14:
         2e:a1:a4:a3:83:24:1d:d9:bb:28:e2:c9:21:cb:89:dc:6f:7b:
         5c:96:7e:95:fa:e7:d8:09:7f:00:c5:90:d6:7b:59:e4:61:3d:
         58:28:c5:b1:10:53:57:96:5d:cd:2e:0e:c3:95:b0:95:f0:04:
         9a:21:18:de:df:86:5e:cf:c7:8d:a0:a5:9c:33:51:44:bc:79:
         90:a2:f9:1b:88:c2:a5:82:3a:ec:59:2c:ad:cb:38:d2:59:53:
         70:d3:2a:8c:23:e6:48:17:29:62:f0:9b:20:58:70:99:da:aa:
         31:bc:36:86:12:d9:45:a5:4c:32:59:9b:a1:25:73:c1:40:b3:
         51:3f:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:31:23 2026 by rpki-client