Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/07226b61-0d14-34fd-ab25-c8d44f9e0376.roa
File:                     07226b61-0d14-34fd-ab25-c8d44f9e0376.roa (raw, json)
Hash identifier:          5refEzw9H35u2EEUHpNXd8Q5WZQErXwh1WxqEjh231U=
Subject key identifier:   21:7F:42:C9:32:8A:C7:6F:FF:52:3E:CF:C2:11:86:C0:1E:06:1C:95
Certificate issuer:       /CN=dda1859b-9b6c-47e8-8de0-488bb1a65637
Certificate serial:       010D0C9F4328584E2AB1AB35F61E58B6212E1F80
Authority key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/07226b61-0d14-34fd-ab25-c8d44f9e0376.roa
Signing time:             Sun 14 Jun 2026 07:50:27 +0000
ROA not before:           Sun 14 Jun 2026 07:50:27 +0000
ROA not after:            Sat 12 Sep 2026 07:50:27 +0000
asID:                     399646
IP address blocks:        2602:f486:ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:b1:ab:35:f6:1e:58:b6:21:2e:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637
        Validity
            Not Before: Jun 14 07:50:27 2026 GMT
            Not After : Sep 12 07:50:27 2026 GMT
        Subject: CN=661f4e10-dbef-4303-b772-1b498dd3a8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:68:2a:c0:4c:bd:74:ac:ed:59:14:d5:72:
                    d1:c0:ed:75:02:ab:51:5b:e1:ce:1d:cf:55:c3:53:
                    53:89:0c:bc:b1:3a:1c:5b:e8:e7:0e:6d:aa:80:d8:
                    ca:e8:77:f4:2a:d2:e0:30:85:7e:36:d4:25:d6:8b:
                    6b:65:26:dc:e7:58:db:a3:94:b0:e2:8a:f2:e9:12:
                    0d:d1:8f:4d:da:7e:f4:27:35:b6:ee:fb:7a:09:67:
                    88:a7:e4:46:79:8c:99:cb:14:f0:84:41:55:ea:6f:
                    7c:70:8b:0e:9e:eb:a0:2b:d7:13:7b:a7:de:2a:3d:
                    77:18:c5:85:5e:ad:5e:c9:a6:41:7b:e1:51:d1:4e:
                    63:40:0e:89:e3:c6:67:03:c1:3b:6c:77:f7:56:a5:
                    43:c9:1f:b7:22:d6:57:5f:65:ba:a2:04:02:20:27:
                    92:aa:15:25:1d:fe:4d:ac:6e:1a:a0:07:c8:2a:fc:
                    96:0e:30:0c:75:63:20:cd:2d:38:d4:a4:c2:32:78:
                    7f:39:8d:c7:ba:ad:75:b0:30:f5:5c:19:ea:3a:30:
                    19:c0:bf:13:d4:99:3b:10:db:72:48:50:e9:48:c3:
                    27:2c:d3:03:33:fd:96:83:8f:42:5c:57:a7:7e:a7:
                    98:0a:8e:fe:3f:e8:e2:6f:ac:c2:39:68:08:a7:15:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7F:42:C9:32:8A:C7:6F:FF:52:3E:CF:C2:11:86:C0:1E:06:1C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/07226b61-0d14-34fd-ab25-c8d44f9e0376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f486:ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:02:58:cc:21:6c:86:b2:9a:38:5a:2d:fc:2f:1a:01:f2:b8:
         d6:04:bf:6a:fe:81:ca:f1:08:e8:e6:92:df:9e:d1:02:d0:81:
         65:0c:19:97:c1:32:72:7b:c0:3c:d9:1f:95:53:73:20:1a:97:
         0c:57:73:43:2b:37:1f:21:31:e6:c4:6c:2e:e4:da:33:99:59:
         10:cc:b7:73:c6:94:62:a1:4a:9f:2d:c2:aa:29:4a:f8:f0:25:
         14:98:f5:05:7c:3b:e3:08:36:72:11:b4:53:fd:4c:b1:cd:30:
         c6:6e:3d:d9:35:93:d6:d6:3a:75:7f:bf:ae:e5:0c:9b:58:1c:
         85:d7:9f:94:81:1c:c5:4e:03:8a:f5:a1:fb:89:68:c6:56:41:
         7a:32:82:38:2f:ae:fb:a9:0a:a9:21:7d:7d:fa:89:b8:a9:59:
         44:e4:20:9f:05:95:f5:81:67:5e:af:8b:c3:46:a4:fe:de:11:
         91:61:4c:e1:35:e7:49:a8:8e:86:cb:27:5e:f7:28:0b:3d:ed:
         7c:19:c2:20:08:fa:59:5c:ac:11:a3:df:ec:47:0f:d2:c3:d4:
         4d:9a:31:57:e2:d0:f5:d9:2b:11:89:bd:a9:fe:47:99:63:83:
         7f:68:16:78:62:25:5b:a7:30:8f:9f:ac:70:c7:c2:b6:60:f8:
         ee:c1:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 02:58:22 2026 by rpki-client