Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/965c0ac6-08bb-3167-80c1-1c8cd8870588.roa
File:                     965c0ac6-08bb-3167-80c1-1c8cd8870588.roa (raw, json)
Hash identifier:          ImEjrDEpzaz/YY0Y68tgxsHCdnNfbIjj40ekl0MfQUI=
Subject key identifier:   3B:B1:64:71:87:DD:F1:F6:38:EF:44:9A:F6:5A:C6:15:D7:CA:AE:E1
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584EB6E1A092378BD2D032459100
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/965c0ac6-08bb-3167-80c1-1c8cd8870588.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     8075
IP address blocks:        2604:e700:40::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a0:92:37:8b:d2:d0:32:45:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=b3d15099-e68a-4c3d-af75-22959e97bf4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:b7:9a:19:a0:0b:75:c8:d6:0f:bf:dd:ab:
                    76:0c:73:aa:f5:ab:8c:24:97:c8:5e:4f:bd:bd:7e:
                    b9:30:47:d3:1b:e9:b1:99:64:27:c6:9a:aa:a6:3a:
                    b2:d8:21:c5:ca:fc:8d:fe:8b:a0:0c:61:68:78:6e:
                    67:c7:66:4e:5e:96:47:c9:07:f9:a6:44:58:37:6b:
                    4c:3c:54:a4:b9:87:8d:06:00:20:5b:70:56:bc:fa:
                    7b:f0:54:dd:5e:cb:f9:05:fb:45:23:e9:0c:28:62:
                    a1:de:d1:57:38:31:18:ab:14:cc:88:55:b5:48:da:
                    c5:f5:12:ee:fa:0d:f9:e4:91:34:37:d4:7e:6b:6f:
                    03:d0:1d:9d:51:3a:31:30:db:a6:82:af:9e:a5:42:
                    2c:1c:39:05:41:0b:5f:9a:a4:1b:9d:8e:8a:16:52:
                    91:96:97:c4:77:f9:6d:84:37:dd:cc:75:07:3a:4f:
                    19:63:66:a0:40:9c:f0:f3:50:d5:9d:2c:ae:77:53:
                    81:ad:f8:da:4b:2f:17:e2:10:71:38:89:9c:f6:07:
                    ea:f3:7f:5d:ca:80:75:29:55:49:91:58:37:cb:33:
                    32:7e:c2:0d:b1:80:40:d4:26:a5:1a:0e:92:15:93:
                    26:a1:4f:d1:91:1e:00:66:9f:da:21:89:51:71:ad:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B1:64:71:87:DD:F1:F6:38:EF:44:9A:F6:5A:C6:15:D7:CA:AE:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/965c0ac6-08bb-3167-80c1-1c8cd8870588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e700:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:1a:41:f3:33:2a:64:ef:47:dd:4f:b6:b1:88:cd:c7:03:
         15:46:66:f5:f5:8c:a0:6d:00:78:a2:f7:50:74:31:81:d6:e3:
         3a:31:be:ac:d5:48:17:4e:85:13:83:e6:1c:2e:a4:c7:a0:45:
         b5:c2:c0:b8:04:c0:87:b6:a8:31:f5:a2:fb:a7:1a:6a:de:3b:
         ab:f9:5c:4f:e9:5e:60:97:1b:14:30:17:a1:79:ee:84:e3:2f:
         c4:82:e7:03:8b:fb:c8:9f:55:22:c4:d9:ff:2a:e9:f7:e5:6b:
         f5:02:94:47:76:15:6a:ec:3e:86:bd:fa:01:6a:3b:aa:f4:68:
         a8:f1:fa:56:83:6b:0b:8f:62:25:c3:6d:5c:d3:27:a9:44:57:
         24:5d:81:e6:b7:6e:13:4a:9c:a6:12:b8:8e:5c:b4:b5:0b:89:
         01:44:c0:d4:19:d2:07:16:57:90:57:6d:77:21:38:e8:aa:94:
         55:47:d0:db:85:c6:cf:4e:cd:48:7a:7d:be:b8:17:ef:c0:ca:
         c9:ae:0b:f5:40:b4:ab:a1:e3:26:ad:0f:70:9b:aa:8f:47:07:
         15:41:f6:9f:ab:76:1a:3c:a0:6a:5a:ff:93:05:0b:7e:9c:f9:
         06:aa:3c:36:80:a9:9e:1c:48:d1:5a:ed:95:26:46:f7:56:a4:
         34:ec:01:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:27 2026 by rpki-client