Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa
File:                     ccc01a9a-613a-39d0-9585-0e61958db9f6.roa (raw, json)
Hash identifier:          pkkH5BBHuO8ywh23NFU0rcRwtdn+hzysV3PMx2M9/CA=
Subject key identifier:   06:2C:1F:F6:0C:49:60:C5:DD:A3:80:BC:36:72:32:4D:D4:41:9A:5B
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F4328584E4129CAE3927382A7E16BBB80
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     30698
IP address blocks:        2620:11c:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:ca:e3:92:73:82:a7:e1:6b:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=60a69405-0370-479a-86ee-0d57f345a33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:7f:2f:bd:c6:e2:9d:42:f0:d0:21:fd:51:
                    f9:8a:50:93:ca:dc:cb:c5:57:55:46:3b:df:30:29:
                    fe:92:77:3e:c8:67:11:05:2b:8d:a2:8b:01:f2:29:
                    6b:b6:3c:c0:a7:42:68:d2:68:86:2f:2c:09:fa:71:
                    e9:7c:db:ef:23:0f:29:f6:52:4c:47:b5:c5:1b:95:
                    6f:3f:af:0b:66:97:af:35:d0:9d:dc:8c:5c:97:0a:
                    7b:a3:c6:12:97:ac:fb:02:92:29:29:38:08:9e:d9:
                    9b:0e:33:85:eb:99:8f:52:25:7d:b7:c4:04:0f:e8:
                    03:ea:f3:40:28:ab:d5:22:cd:93:32:ab:88:b5:b6:
                    43:5a:53:1a:56:3a:71:59:11:1a:b3:83:2b:bf:cb:
                    09:c5:f4:44:2f:85:6f:92:8c:50:a5:28:fc:37:b4:
                    5c:71:1f:46:57:c9:bc:20:7f:df:46:b8:f9:54:00:
                    a8:bf:d3:0e:a8:a0:1b:ac:ff:88:6c:e1:62:1d:82:
                    e8:d7:ec:87:3a:a1:00:23:02:43:70:ca:9f:5e:a9:
                    88:78:81:c1:7b:a6:24:3a:86:c8:ef:c3:69:0a:df:
                    1e:1b:b4:4a:c5:03:55:2c:e2:96:79:64:14:7d:56:
                    b3:58:44:96:04:11:27:48:6a:d2:f0:32:d6:7c:7f:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2C:1F:F6:0C:49:60:C5:DD:A3:80:BC:36:72:32:4D:D4:41:9A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11c:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4d:08:4b:bf:0d:b0:9c:f3:26:ae:e5:41:89:df:b8:d0:d1:
         61:c7:30:5f:71:f1:50:fd:1e:4b:49:cd:1b:45:07:5b:c7:12:
         a0:11:26:ec:f9:46:90:b6:2a:1a:74:9f:1a:28:a3:fa:b2:b8:
         e3:26:50:7a:68:8f:46:cb:19:25:d4:b2:23:b6:a5:0e:e9:22:
         58:d4:81:87:1f:26:7f:25:95:40:49:47:fb:23:18:c8:85:09:
         52:a9:c4:fa:69:bf:6a:04:b0:2e:53:44:7c:76:6b:0e:bb:f2:
         cb:f6:6c:5f:cb:0e:0f:d1:1e:53:26:87:48:e7:3b:28:4c:0d:
         24:42:a6:39:76:e9:7a:5a:d4:84:2e:91:8f:81:38:1b:20:48:
         d8:50:8e:34:c0:a6:2b:0c:a6:41:78:d2:66:d7:4a:e1:7e:1e:
         c8:c0:29:a4:68:76:60:c9:64:07:f3:95:4d:52:32:06:0a:e5:
         12:7c:76:2f:02:36:0d:a4:48:dc:b5:d5:0e:bf:ae:32:a5:a3:
         5e:8b:25:4a:97:25:73:99:7f:d8:b4:6d:dd:a0:6c:ab:72:94:
         e5:2c:4d:a5:9c:5c:5c:62:40:02:f5:09:2d:94:59:47:60:93:
         44:6e:a6:9d:04:a8:14:fc:5f:46:35:2d:13:4c:a6:3d:15:49:
         77:e2:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:48:17 2026 by rpki-client