Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa
File:                     5da813c6-3362-3a15-8c8f-01d933e11263.roa (raw, json)
Hash identifier:          RWTiRwE3PuKJLNXrv+tNEcqrM7IOvSMpXD33dmTG3Dw=
Subject key identifier:   93:18:3D:75:D1:29:7F:43:06:EC:1F:14:30:C3:8D:96:B9:2E:4E:25
Certificate issuer:       /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6
Certificate serial:       010D0C9F4328584EAE8197FBDA34688040365080
Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     16509
IP address blocks:        2620:10b:b008::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:97:fb:da:34:68:80:40:36:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=c6fbd120-1733-4889-b1a8-3705c46c9943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:76:3a:10:d4:34:e5:25:14:0b:f2:7d:ad:
                    25:95:2d:78:76:da:12:db:b1:dc:d8:d7:51:e6:25:
                    75:2e:50:21:85:8e:14:14:2d:95:a4:19:aa:32:54:
                    c0:ad:38:3e:8c:56:e4:5a:4b:2a:00:db:42:79:52:
                    66:54:25:78:18:3d:20:88:7a:42:31:3a:73:cd:2a:
                    cc:48:6b:ab:23:73:b7:f0:38:c7:ee:9c:53:97:73:
                    56:bc:3f:4c:2e:4b:81:dd:91:c9:4b:44:a8:b3:b7:
                    27:8d:55:70:9a:02:10:15:5f:0f:5c:da:4c:90:d1:
                    87:59:ac:18:c9:4e:9d:b3:d3:ea:8b:cf:53:0c:4a:
                    d2:48:7e:a3:6d:77:28:17:35:1e:ae:b9:2f:6e:f2:
                    01:c1:b7:f6:88:3b:ec:fc:df:14:fc:93:29:27:ee:
                    a8:a7:2e:07:a7:6b:bd:cc:c7:74:b0:3e:d8:19:b5:
                    7d:7a:eb:57:fe:22:ab:46:fb:9a:74:02:a1:a0:15:
                    e7:89:8b:3b:ee:fe:32:cc:4c:25:9f:18:33:48:63:
                    b3:61:f6:89:03:79:8a:e0:f5:2c:8d:77:0a:c5:36:
                    c4:54:d6:ef:31:f8:c1:f8:a0:af:7b:3f:a6:a4:91:
                    10:bc:f4:62:2c:7d:45:b2:4b:f1:ff:ff:57:9a:70:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:18:3D:75:D1:29:7F:43:06:EC:1F:14:30:C3:8D:96:B9:2E:4E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl

            X509v3 Authority Key Identifier:
                keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10b:b008::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:47:2f:9e:d2:3c:b7:aa:49:98:62:8f:4b:0a:d4:c1:4a:
         8f:3b:ed:f8:37:76:60:42:1f:ad:8c:7d:84:2f:34:1d:c6:76:
         31:20:8d:8d:c8:d3:f8:c7:2d:ef:8c:0f:46:33:39:79:b5:53:
         e1:79:57:4d:9c:09:37:dd:56:9e:c5:7e:19:67:07:60:a6:cf:
         02:a5:f9:ac:ca:62:9d:23:23:e0:3f:6b:77:79:72:e7:89:0e:
         38:a3:4c:9d:a6:9c:c8:54:96:6a:c8:01:23:15:35:79:40:82:
         7b:4e:f0:cc:0a:a8:ef:83:ec:5a:7d:f9:0e:f3:b4:ac:38:13:
         d7:a8:0f:1f:f1:b6:b2:41:6f:72:1f:5f:2c:e0:97:ba:cf:ca:
         15:2c:65:6c:67:84:33:6f:3e:d7:e8:17:cd:ac:39:d6:e9:65:
         f9:bf:97:a1:6a:83:99:30:bb:e3:85:c8:e3:39:7c:ed:8e:7d:
         09:e8:55:17:60:1b:30:59:ba:ba:da:73:0d:de:07:7c:d1:86:
         7b:d6:0b:4c:2b:5a:2e:b9:a4:57:67:21:e1:73:64:88:ea:5f:
         93:e9:21:39:73:45:84:75:80:76:d5:96:58:62:4e:9a:11:ff:
         44:63:ba:36:d7:62:2a:7d:bc:f3:08:f2:67:06:94:f9:dc:9e:
         c1:82:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:56 2026 by rpki-client