Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/4a72223c-9e60-37af-b03d-43b6176b4114.roa
File:                     4a72223c-9e60-37af-b03d-43b6176b4114.roa (raw, json)
Hash identifier:          KEYFSoveonleXWfbgrbDs04uf2j+nUnsI9ScBdwnSfE=
Subject key identifier:   9E:02:98:F9:5B:7F:41:83:16:24:67:A1:E9:C3:F0:0D:9F:5E:F9:EC
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584EC63C763264C06A0DE9104E80
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/4a72223c-9e60-37af-b03d-43b6176b4114.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        2604:e700:41::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:76:32:64:c0:6a:0d:e9:10:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=7df40765-5481-4345-b604-4b5b1f253c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:99:84:d9:bc:a8:1f:34:7c:6b:52:49:a7:
                    f1:93:dd:56:e4:d5:d1:0f:13:99:47:5b:7e:e4:8f:
                    f1:e3:77:d1:30:9c:ac:8d:ef:59:eb:28:27:fd:24:
                    59:99:11:d2:3f:47:32:6e:aa:d9:80:ba:f4:ff:e0:
                    f8:04:47:e2:43:98:eb:7c:af:10:43:fc:37:72:a8:
                    4e:77:1a:5e:30:5a:eb:79:6b:76:8b:a6:36:96:65:
                    eb:d0:2c:6b:dd:da:d5:d0:2f:91:6f:12:5f:ad:3f:
                    1b:80:d5:69:4c:b7:3f:20:75:4b:6a:15:36:ac:22:
                    31:6c:65:10:25:79:e6:03:6d:da:98:46:42:73:47:
                    41:5b:9f:16:e8:8f:0c:19:2c:89:56:ac:04:08:73:
                    67:8b:96:be:25:62:e6:71:cb:0a:28:3f:f3:92:3e:
                    f5:e8:80:c1:22:4e:0b:59:26:52:2f:e0:00:6e:65:
                    21:21:35:66:ee:8a:ba:bd:c9:ac:6e:ad:2d:ab:4d:
                    20:7a:b6:ef:d1:0f:0b:31:a9:f3:2c:dd:89:57:6e:
                    a1:6f:4b:67:07:a0:7b:a3:bc:af:38:e2:e8:13:fb:
                    39:42:8e:50:9c:5d:0f:1b:43:4d:6d:06:00:9b:cb:
                    87:c8:b0:4c:ab:16:13:9b:fe:ee:1f:b8:c6:51:db:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:02:98:F9:5B:7F:41:83:16:24:67:A1:E9:C3:F0:0D:9F:5E:F9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/4a72223c-9e60-37af-b03d-43b6176b4114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e700:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c1:2d:26:f0:39:3f:d3:de:43:bf:9d:73:3d:eb:d2:3c:55:
         b1:3a:58:b4:fb:27:b5:46:7b:6a:3b:c0:7d:08:f1:2d:b7:cb:
         aa:ec:58:9c:02:49:1f:22:ae:2d:e4:c7:7e:9b:03:15:cf:54:
         c6:b0:89:a3:50:10:22:4d:54:fa:a6:4c:c5:62:45:e2:c3:dc:
         00:f1:de:17:17:2b:56:aa:43:8f:94:1d:ff:b5:6d:21:aa:be:
         a7:b2:b7:67:cb:06:6c:72:90:66:a2:d2:d6:da:0c:28:cc:b6:
         20:28:72:1f:a4:ef:78:d6:2a:6b:45:eb:22:4f:90:35:36:78:
         5c:f0:bc:6f:18:aa:15:2a:de:b5:00:25:ac:dc:ff:43:50:21:
         8f:b9:29:a4:2f:a8:a3:8b:a7:7b:36:e6:be:6c:4d:ab:4e:08:
         c9:1d:b8:02:25:cb:a6:40:55:38:77:db:c6:f7:34:8c:f8:68:
         5c:36:80:0c:b0:42:94:70:58:79:f5:fc:9c:c3:ae:d3:f7:53:
         90:07:14:cb:e7:8e:6b:ad:66:4d:23:f5:fa:7b:72:f5:f2:b7:
         53:d7:84:09:48:a1:7f:6c:b1:77:a2:d6:a7:6c:e5:94:31:04:
         13:85:b5:18:3e:09:5c:27:84:8b:1f:25:66:3b:df:44:ca:5c:
         8a:54:75:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:04 2026 by rpki-client