Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4119a5a7-c170-3693-ab45-9cec8eb09f41.roa
File:                     4119a5a7-c170-3693-ab45-9cec8eb09f41.roa (raw, json)
Hash identifier:          g9PeJleu8Co6lVZeZWa4MkCenJFCzu6a5hVyWwa7IbQ=
Subject key identifier:   0C:4A:EA:3D:63:B1:FB:CA:F1:A9:B8:BC:AB:17:41:B4:6A:FC:BD:F0
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF436DF9D524AABB1DC2D700
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4119a5a7-c170-3693-ab45-9cec8eb09f41.roa
Signing time:             Thu 06 Aug 2026 13:03:46 +0000
ROA not before:           Thu 06 Aug 2026 13:03:46 +0000
ROA not after:            Wed 04 Nov 2026 14:03:46 +0000
asID:                     396190
IP address blocks:        2607:f5b2::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:43:6d:f9:d5:24:aa:bb:1d:c2:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 13:03:46 2026 GMT
            Not After : Nov  4 14:03:46 2026 GMT
        Subject: CN=b4a33e57-1d73-445c-b1dd-a30f11d75cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:c3:db:f0:90:ce:c5:de:7f:03:a2:6a:13:
                    f9:05:ad:0c:0a:b7:13:31:e5:2a:05:5a:40:dd:bb:
                    33:1d:e9:76:58:3b:a5:38:1e:a0:4d:e5:10:69:2e:
                    a6:b5:f7:51:e7:cf:5f:c6:0e:35:5d:c8:4b:a8:b5:
                    b0:03:d4:03:2c:01:f9:8c:9f:2b:ad:f7:76:b9:07:
                    f6:61:ce:d0:ea:d4:c8:2b:81:b0:b1:53:ad:91:90:
                    a3:91:e8:6c:b4:95:41:d5:8b:ee:74:8a:7d:cf:d2:
                    b6:6c:4e:98:19:f9:6a:05:b7:1e:55:f1:9c:04:0a:
                    7e:25:0a:18:c7:5f:65:e7:32:2d:fd:95:ad:4e:ed:
                    cf:d7:cd:b7:b4:b7:32:9b:be:7b:ce:23:66:0d:a1:
                    6c:74:3c:d0:a3:2d:cb:c6:f4:61:62:75:5e:46:48:
                    f8:c8:43:1e:51:b2:36:60:94:bd:40:0e:55:30:23:
                    6d:70:f5:2b:9d:72:59:7c:ce:ce:e4:e7:22:dd:0d:
                    97:c2:40:6d:fd:85:26:dd:1e:79:f1:ec:29:07:23:
                    93:10:15:12:7c:6a:56:29:aa:87:fe:31:23:63:56:
                    d1:f6:d6:41:ef:30:92:c5:55:3e:db:ff:21:34:4e:
                    bf:47:3e:df:c1:80:f0:0b:14:96:32:db:65:91:3f:
                    b7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4A:EA:3D:63:B1:FB:CA:F1:A9:B8:BC:AB:17:41:B4:6A:FC:BD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4119a5a7-c170-3693-ab45-9cec8eb09f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b2::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:14:cb:01:ff:9f:67:90:75:ec:32:fb:74:66:d2:d1:dc:a7:
         bd:eb:5b:94:e2:5b:ad:04:c7:c2:9a:27:e7:82:a2:bb:1e:ff:
         c1:7a:19:96:5b:e3:af:75:50:b9:4f:fa:4a:2a:22:6d:10:ef:
         a8:57:e5:c2:e0:c7:61:68:7c:dc:84:7b:81:4f:c0:97:62:c3:
         1d:d7:ef:86:10:6c:46:eb:1f:0b:f1:30:a4:75:be:6b:f5:6c:
         dd:1c:41:45:8a:6c:91:43:c4:ed:96:d0:37:3b:63:f8:31:43:
         2a:0e:fd:a1:57:4e:5d:cc:be:3a:77:79:70:77:23:d4:a2:8d:
         f4:b6:7a:2e:ab:f0:8f:f3:ab:8f:f2:14:de:b9:d3:6e:21:53:
         fb:b3:60:e1:90:b6:4e:2f:96:49:30:fe:3b:67:a7:18:65:b9:
         d3:e0:ef:f7:8c:82:b7:4e:80:3f:25:57:51:0a:ed:6e:24:26:
         93:f6:4f:68:96:79:d8:38:35:51:01:be:72:3e:7d:ca:1c:f5:
         7a:2a:71:14:f5:81:c6:6b:b3:f5:3a:b4:57:89:66:4c:ba:6e:
         86:dc:0c:87:6e:0a:d0:71:4e:e0:e3:8d:91:a2:2b:ce:5f:42:
         3f:43:39:bc:4d:14:21:e0:fb:98:7c:76:0a:b2:c8:0e:cc:25:
         51:26:06:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:05 2026 by rpki-client