Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/24bc4dad-42a7-36d7-ab97-cbae75ff1966.roa
File:                     24bc4dad-42a7-36d7-ab97-cbae75ff1966.roa (raw, json)
Hash identifier:          6CIwBvErE5fDKJ+YFfNAQ5WDiKCBFraGg8JYloYPNsE=
Subject key identifier:   B2:4A:B6:47:91:B8:E6:86:EA:19:BA:C9:2F:64:94:8D:44:8D:98:12
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584E3190820B242BB89FF2ABEE40
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/24bc4dad-42a7-36d7-ab97-cbae75ff1966.roa
Signing time:             Tue 16 Jun 2026 18:54:17 +0000
ROA not before:           Tue 16 Jun 2026 18:54:17 +0000
ROA not after:            Mon 14 Sep 2026 18:54:17 +0000
asID:                     53471
IP address blocks:        2607:8240:103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:90:82:0b:24:2b:b8:9f:f2:ab:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jun 16 18:54:17 2026 GMT
            Not After : Sep 14 18:54:17 2026 GMT
        Subject: CN=96541c49-b8cb-45e5-b8ac-3999e7ba9e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:46:2d:8a:b2:08:41:95:e3:a8:3c:5c:d1:
                    be:d4:68:73:aa:79:61:34:03:86:3a:b8:f8:07:5a:
                    fc:ad:7f:9c:30:14:12:e6:e9:a6:71:b2:7e:d4:8b:
                    f6:0b:32:84:e6:5e:27:9f:5c:c4:fe:f4:f3:fa:53:
                    68:9f:d3:d7:2d:54:66:04:5c:4f:60:62:de:cc:e7:
                    8c:0e:5c:d2:95:34:1a:9f:58:db:70:2a:3c:cd:d6:
                    25:52:35:a6:f4:d7:a9:99:00:24:c9:f2:0d:46:65:
                    15:f3:a9:06:56:84:ee:a1:5e:bf:36:99:23:ed:a3:
                    72:c5:9c:a9:9c:b2:b9:b1:a6:9f:e6:20:31:1a:d1:
                    63:e3:4e:aa:a9:19:78:6e:c5:49:1f:8f:9f:08:dc:
                    1c:1f:da:fc:7f:f6:99:9d:09:d1:3d:c0:6c:8a:f4:
                    79:0f:97:66:95:1a:28:3c:f3:52:3b:1e:d1:9e:a7:
                    dc:c3:af:ed:cb:65:ef:98:94:88:ba:0a:ec:b2:52:
                    df:9a:7c:0c:3d:ed:79:59:27:91:e5:59:e0:89:b6:
                    d5:fa:d0:53:c9:f7:6d:ba:da:c5:fa:02:4a:53:a4:
                    e8:25:18:ef:21:ad:a7:a2:96:f5:55:e3:c2:af:a8:
                    e9:48:38:aa:c3:86:e3:ab:b2:5c:3a:92:b5:f2:bc:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4A:B6:47:91:B8:E6:86:EA:19:BA:C9:2F:64:94:8D:44:8D:98:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/24bc4dad-42a7-36d7-ab97-cbae75ff1966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:1f:71:c9:de:03:bf:2d:ee:66:c9:fd:43:f8:c5:26:a5:2c:
         de:a5:b2:7f:0e:fb:e4:4e:86:cf:bb:82:71:4f:ff:31:89:1d:
         4b:ae:34:08:6f:6d:ad:4e:d8:92:cb:d6:9b:e1:55:d8:7b:0a:
         86:5d:e4:e7:f1:ad:61:55:1b:99:d6:25:d4:55:cb:0f:cf:9d:
         f6:fa:26:f5:91:b5:84:cd:a3:3e:b3:77:59:e2:4c:41:6b:4e:
         46:46:88:96:7d:70:0e:a5:ca:83:bd:42:ff:1c:ef:f5:55:0b:
         20:3f:57:3b:64:2d:a8:6a:90:34:47:cc:d5:27:ba:1a:19:6e:
         92:48:62:c0:4c:94:8d:0d:75:c4:5a:14:b6:de:65:1f:2e:e2:
         61:bb:21:0f:60:dc:e4:7d:26:2c:82:2f:42:6f:01:56:96:69:
         9f:b8:e2:3e:28:0d:38:60:03:15:67:08:d9:19:ee:bb:0e:3e:
         19:72:e3:0e:b1:2d:f6:2f:5d:63:43:be:97:a0:0c:09:92:ed:
         b1:36:78:34:b1:cd:5b:e1:b0:b9:13:26:89:72:71:c8:be:ac:
         2c:9c:8a:66:88:86:7d:a6:e0:51:5e:f7:76:6f:7e:6f:84:85:
         d4:bd:6c:89:e3:02:41:81:7d:ad:5c:e0:66:41:a3:6d:71:37:
         27:20:6b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:33 2026 by rpki-client