Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa
File:                     998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa (raw, json)
Hash identifier:          bM0tV5bCsl4KVQ9qfG3YyjXd+fLZuGQylPjl1uUxwko=
Subject key identifier:   EB:4C:69:F0:EA:14:AF:63:55:E7:40:DF:10:13:3C:CE:FB:B7:26:77
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ED9C75B7AEB308FE3E9187360
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     60781
IP address blocks:        2607:f5b5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5b:7a:eb:30:8f:e3:e9:18:73:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=57667174-3d95-4407-af3b-aee89cdaf958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:eb:72:ec:63:a5:8e:78:6a:00:1a:94:04:
                    3e:40:69:29:9d:a7:aa:b0:8f:62:1c:7c:4e:4d:9d:
                    97:d2:a8:cf:2e:39:ec:cb:cf:96:23:fb:c4:f7:a5:
                    8b:d6:40:04:c4:19:11:23:01:f7:26:a7:1c:76:06:
                    54:a3:63:44:44:ba:a0:f5:66:81:42:b7:91:d4:3d:
                    76:86:d1:28:93:54:4c:ea:34:99:e1:d9:04:e1:e3:
                    0c:e2:8a:d9:19:dd:c2:58:d3:50:e2:06:33:91:ea:
                    d3:eb:be:14:ef:9a:43:12:d6:92:9f:54:01:41:92:
                    3e:34:95:8d:ac:1e:b1:5a:67:4f:b6:5b:d1:5a:d0:
                    1b:48:ab:4a:06:00:5f:23:c1:7e:11:00:4f:02:a6:
                    4c:f1:9b:e4:5b:e5:33:45:98:ec:8c:10:c5:e5:b5:
                    90:1a:fb:56:11:77:66:19:68:a1:fd:05:4c:64:10:
                    03:4f:bf:65:d8:10:96:40:94:6e:68:2b:44:65:c8:
                    22:71:18:a4:f1:7c:53:d8:d2:ac:2a:df:1c:d6:1b:
                    ec:b2:c1:87:5e:82:8b:00:ee:7c:3f:8b:9a:48:aa:
                    f7:f7:a8:c2:d1:25:58:d1:23:bf:60:28:79:b9:32:
                    05:4b:9b:e4:25:60:5c:16:5d:94:1c:7a:6e:00:70:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4C:69:F0:EA:14:AF:63:55:E7:40:DF:10:13:3C:CE:FB:B7:26:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:5d:5f:06:87:c5:33:8e:23:7f:e8:ac:bb:e3:6f:57:15:9f:
         8a:70:2e:36:e5:27:1b:e9:c2:61:1b:0a:cb:cc:de:53:48:bd:
         fc:89:18:aa:2f:ab:29:40:e3:21:49:bc:25:31:42:0c:a9:aa:
         45:80:1e:33:21:3b:21:e6:0f:46:ce:08:b0:b5:bb:6d:29:ab:
         87:c8:a8:0e:21:4d:9b:bf:eb:49:9b:6a:7a:01:9a:cf:8a:ec:
         88:e1:89:7b:88:f2:e2:37:ff:2c:c5:71:90:5f:56:64:47:4c:
         9a:09:45:b6:e6:22:6a:9b:1c:b7:96:f1:61:f8:c9:e4:e6:0d:
         76:31:08:90:9e:10:86:fc:ad:ec:8c:83:f0:af:de:e4:f3:9f:
         ed:26:c1:a5:3e:7a:b9:02:5b:6a:d2:a7:e7:fc:cc:41:4d:b1:
         12:83:42:f0:84:14:2f:d1:99:e7:d3:f3:ea:39:81:15:ce:7c:
         13:a2:cd:b9:70:18:53:7e:23:3a:28:0d:91:e0:bf:ed:05:2e:
         c2:a5:ab:b1:a4:d1:54:3a:9f:f9:d8:a0:3a:75:6c:80:57:71:
         ad:44:e4:bc:86:9a:13:63:db:74:be:19:99:a7:36:b3:ab:ff:
         0f:3b:77:b7:dd:56:3e:c3:4b:62:b6:7e:32:fe:f7:c8:82:de:
         01:c8:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:49 2026 by rpki-client