Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/dc648177-57c4-3f82-a708-ca071a8277f4.roa
File:                     dc648177-57c4-3f82-a708-ca071a8277f4.roa (raw, json)
Hash identifier:          9z7efAbxNHZg2RJD5B5dwIV5gFZ7eCM9xGRp1+HDOkI=
Subject key identifier:   13:76:F4:7E:AE:62:E0:B6:AB:A2:6B:EF:7E:05:9A:E1:E2:42:6D:AC
Certificate issuer:       /CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382
Certificate serial:       010D0C9F4328584E3FC4741C1D98D0ACFA7D01C0
Authority key identifier: 5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/dc648177-57c4-3f82-a708-ca071a8277f4.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        2602:f54e:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:74:1c:1d:98:d0:ac:fa:7d:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=3dcc2e8f-5aef-4ace-b85c-907c8a8279e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:c8:cb:5b:e5:1a:e1:67:14:f4:bf:99:6e:
                    1b:26:65:67:c9:6f:94:be:79:7c:6d:c5:1a:69:08:
                    73:af:72:a3:9f:0a:e7:45:a2:52:a4:48:6d:7e:34:
                    36:ac:a5:8f:08:f7:e8:50:94:4f:87:82:77:d4:0e:
                    62:d1:37:b2:2b:21:5e:a4:91:28:59:80:58:81:32:
                    d2:c5:24:f6:ee:28:e9:68:41:7b:e8:98:de:95:3d:
                    9e:4e:04:2a:5a:c4:a2:56:b1:c2:f5:1c:03:d2:db:
                    b6:d9:2e:88:5c:8c:1d:a2:42:ab:f6:7e:c5:ba:94:
                    58:26:ac:b4:37:59:0e:5d:3f:e3:9a:d5:0a:5c:dd:
                    67:36:e1:f1:e7:f0:88:48:71:d2:29:02:d0:a6:6d:
                    bd:55:8b:35:0d:0e:c8:71:c3:73:06:06:b9:34:27:
                    a5:9a:4f:c3:46:2e:c7:f2:29:60:83:fd:5d:c5:a3:
                    10:b8:88:c8:5a:97:74:8b:01:f9:ec:40:ea:b3:75:
                    31:60:81:b1:48:6f:16:18:23:58:27:46:94:54:29:
                    93:67:c5:66:2b:bb:77:d0:72:e1:89:3b:2d:4e:ab:
                    60:15:78:48:6a:de:78:78:4d:88:49:2d:a3:0b:a1:
                    9c:8a:05:4f:c9:e0:84:e8:e4:01:42:12:4a:15:11:
                    33:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:76:F4:7E:AE:62:E0:B6:AB:A2:6B:EF:7E:05:9A:E1:E2:42:6D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/dc648177-57c4-3f82-a708-ca071a8277f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl

            X509v3 Authority Key Identifier:
                keyid:5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f54e:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e5:80:f4:f0:3b:4b:9c:ea:79:de:52:7f:6f:a1:a4:f3:b9:
         1f:7c:5b:46:bc:0c:2e:f8:ca:82:73:6c:31:c9:43:85:5b:c0:
         60:5e:82:b8:a1:f7:10:8b:f3:e1:7c:a4:17:cb:e2:fd:43:69:
         e9:80:32:03:4c:0c:28:2b:68:48:47:7d:15:9a:1f:1a:75:1c:
         43:c2:6c:e4:80:dc:a8:29:71:fe:56:aa:67:05:87:40:1f:fd:
         67:9b:da:80:97:b2:75:d6:22:f4:d5:c0:64:5e:9a:85:dc:2a:
         42:bc:0d:f4:14:5a:59:ce:c1:b8:b0:d9:31:bb:16:b0:d6:d6:
         b4:5d:97:02:25:cf:4d:01:3b:d9:a3:14:d6:4b:ba:41:8e:23:
         5c:a8:be:ee:66:ae:b4:8e:65:da:6d:3b:3d:54:a4:66:b3:14:
         e9:3e:cb:d0:52:ae:38:fe:94:7a:1c:34:98:4a:55:95:b2:73:
         89:ae:ac:09:c8:9c:35:c6:cf:89:d3:a4:8e:74:62:82:c4:83:
         ae:20:a8:f9:50:71:d1:f2:ce:0d:e0:1c:4b:c8:1a:79:6c:ff:
         d1:6e:81:cf:c3:83:19:33:97:29:97:0c:3f:a0:90:a4:f7:e7:
         99:91:da:f5:12:73:3b:7e:01:da:c9:6b:46:79:a9:16:11:ea:
         6e:de:8f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:52:51 2026 by rpki-client