Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa
File:                     9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa (raw, json)
Hash identifier:          PY3kbbz8I+RnsE2x7C6lVZJAB6BBsw62ngohlQYdrc8=
Subject key identifier:   1D:AB:BA:D9:2D:34:F6:3B:6F:7D:55:C2:E8:52:64:3F:10:D6:E2:BE
Certificate issuer:       /CN=bb3e1744-5186-489a-9b86-cb31cef73874
Certificate serial:       010D0C9F4328584E66DA148D3A33FF3A44FB3880
Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        2620:20:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:14:8d:3a:33:ff:3a:44:fb:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=7db54095-fa09-4f40-a14c-57ca93e7bc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:6b:47:21:73:29:8c:36:63:4b:95:55:97:
                    17:48:0c:c3:22:39:8f:c8:1b:d6:cb:2f:e1:08:d1:
                    f4:d4:56:39:92:cc:37:3a:a2:57:8f:47:53:ba:f2:
                    74:70:83:91:9d:52:04:e0:b7:70:66:56:04:cb:c6:
                    ed:c7:1f:91:03:2e:83:4f:58:f7:ae:39:4b:92:74:
                    67:24:a1:b6:f3:9a:fd:71:42:2d:87:5d:fa:76:d2:
                    a7:0d:b9:61:76:00:4c:14:79:26:15:0a:8e:8b:a6:
                    f5:08:3e:a7:b7:e3:cf:de:04:e6:1e:92:73:87:47:
                    78:87:9e:27:0f:ab:c7:a0:e2:df:c5:3d:14:d1:69:
                    49:fd:bc:6a:80:38:7f:47:6e:11:65:27:95:dc:7e:
                    cc:b9:a0:3e:b6:4c:26:9a:43:c9:ca:d5:2f:85:d8:
                    bb:89:47:53:fb:2e:66:1e:79:12:68:0f:fd:9b:f4:
                    aa:27:3c:e7:47:26:f3:46:ce:fe:0f:e5:78:7c:05:
                    a1:82:15:4e:66:29:6c:34:a5:36:dc:87:86:3e:ad:
                    49:fd:1e:09:b8:20:ed:1d:62:ea:4a:b0:69:33:08:
                    16:36:e0:8f:fe:50:2f:95:01:e8:be:c4:03:91:43:
                    b1:b6:b0:4d:5a:b6:ab:7f:f4:da:62:79:46:d1:76:
                    cc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AB:BA:D9:2D:34:F6:3B:6F:7D:55:C2:E8:52:64:3F:10:D6:E2:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl

            X509v3 Authority Key Identifier:
                keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:20:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:33:87:38:58:df:70:0a:97:09:f7:ea:c0:bf:c3:89:9c:d4:
         ab:50:45:9e:50:0f:66:45:61:9f:f1:ce:bc:0d:31:1a:24:2a:
         92:d0:b3:1f:59:f8:55:ca:3d:77:6e:3e:ed:04:92:0e:11:fb:
         66:9a:6b:0b:72:60:4a:e7:ad:aa:8b:c5:e9:c4:ac:f5:33:6c:
         29:a8:54:9d:e7:7b:6f:c1:a8:66:24:10:c0:9f:3e:cc:0d:de:
         31:b4:23:c9:ca:88:0c:de:85:21:35:33:05:cf:34:4d:05:f6:
         be:c0:80:c5:1e:0a:1d:d5:dd:89:6d:f6:76:7d:12:04:ab:ee:
         2a:1c:8e:4e:9e:06:54:06:f0:d9:e3:cf:7b:1b:2e:b6:59:2b:
         20:28:e3:1b:68:ca:52:5a:19:79:61:ae:e9:fd:20:e0:6a:d9:
         09:36:f6:65:09:a4:8c:54:65:dd:ce:99:0e:c6:25:ae:be:ed:
         7e:ae:46:f1:19:a0:6c:1a:75:24:c9:8a:b8:2c:2e:31:e8:59:
         88:cc:da:f0:e5:c4:f0:3d:87:37:45:27:13:54:20:d5:6f:e3:
         52:03:07:c1:7b:58:0b:20:62:d4:dd:77:28:64:29:81:a6:45:
         91:06:e0:01:06:9e:98:b8:1e:a6:57:5a:2b:22:9d:be:de:b4:
         e8:61:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:23:33 2026 by rpki-client