Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa
File:                     ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa (raw, json)
Hash identifier:          G/6wD1rhvabHfQ/HZ9xlDdkDGrUL+vsPDOOyhAnY40k=
Subject key identifier:   AB:2F:57:E4:F8:2E:7C:C7:71:43:44:02:41:FD:86:77:53:07:8D:74
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584EA8EC460C16EEB1C0B53F17D0
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     62494
IP address blocks:        2604:9440:2300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:46:0c:16:ee:b1:c0:b5:3f:17:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=29c48b51-72ab-4951-825d-2958a7e2b917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:61:25:68:4e:d0:61:87:58:5c:42:85:f7:
                    21:f3:5d:f7:93:fc:b3:e1:5c:a6:c9:a8:4f:42:49:
                    37:9a:15:f5:38:3f:2d:29:16:cc:c8:8a:6b:a7:0c:
                    74:39:d1:8a:69:a8:99:b5:7f:5e:9d:67:c2:05:f7:
                    ad:07:24:16:44:7a:4a:fe:4a:10:24:f7:c5:e7:f9:
                    43:cf:31:7e:45:9d:63:44:ed:cb:0b:90:8b:1c:78:
                    ec:0c:9e:f5:12:cd:b0:4f:18:8f:a3:ae:c3:ed:6f:
                    65:e0:4c:f8:60:f6:60:b8:07:8f:dd:02:de:6f:d6:
                    ae:e4:2f:f4:17:09:08:f0:83:93:74:e1:26:88:e2:
                    f6:99:2e:e9:c4:dd:3c:0c:5f:c7:ce:bc:93:f6:37:
                    99:4a:9a:55:b9:cb:b1:ae:07:5f:ee:da:00:dd:3a:
                    01:a4:b8:18:c5:20:7c:a9:44:33:48:86:96:12:63:
                    48:86:a9:b7:78:28:fe:9e:92:eb:11:e2:09:c5:b7:
                    8c:62:07:f2:20:c8:e3:b4:65:8f:a5:29:74:12:cc:
                    3e:1b:41:23:d0:29:ca:22:4f:94:2c:37:97:a2:6d:
                    01:07:42:8e:74:6d:2b:8d:ac:11:d9:c2:54:ba:70:
                    96:4c:5e:4f:3b:2a:0a:b2:9e:7b:10:29:06:e5:ac:
                    f6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2F:57:E4:F8:2E:7C:C7:71:43:44:02:41:FD:86:77:53:07:8D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9440:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:b9:15:b3:fb:c4:3e:f9:4a:70:88:32:35:00:4e:0f:b6:
         01:58:7e:a8:bc:ed:d3:62:86:e8:40:49:21:56:e2:d5:60:97:
         9b:62:a9:23:d7:8d:e8:02:b2:61:a0:f3:f6:55:d6:ab:22:ce:
         ad:90:ee:08:fe:67:bc:cd:6a:48:49:da:55:56:0c:4e:4c:39:
         23:71:8a:77:d3:89:33:99:af:f8:59:92:95:49:3c:5c:aa:43:
         99:ef:f7:50:b8:b8:45:5f:97:b6:9b:09:84:3c:08:c3:0e:e4:
         c7:0b:60:ca:5e:e1:20:c4:ac:d2:66:38:5b:a8:54:62:bc:f1:
         b2:a4:b7:cd:6b:98:96:c1:58:dc:c6:12:b7:b5:07:95:ba:cc:
         15:a4:a4:52:6b:87:57:74:e8:89:e7:2e:4b:ba:b3:33:a0:95:
         b8:a5:66:e5:33:e6:cd:c7:fe:81:80:b6:a8:bf:c5:ef:0f:f6:
         ba:95:99:1d:1c:8e:c4:11:91:2a:72:4c:76:49:7b:14:f0:ea:
         86:58:f7:98:66:20:a9:eb:73:c9:ec:9f:5c:5f:47:d0:9a:38:
         80:c8:2d:10:35:4c:35:05:6e:ea:e2:f5:f9:2e:42:aa:f8:07:
         4d:37:17:d7:6e:01:ca:fd:d9:de:d7:00:9a:e3:8b:4e:da:19:
         42:e6:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:53:56 2026 by rpki-client