Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98a144c3-7846-3b48-9f34-e69502d5b5c7.roa
File:                     98a144c3-7846-3b48-9f34-e69502d5b5c7.roa (raw, json)
Hash identifier:          KUilR7s7gyo9doZUYIl3ENKs6fEauZ558vs6ll1bOq4=
Subject key identifier:   38:FF:49:87:B0:CD:7D:9A:05:AD:4C:45:14:CE:DF:20:76:27:C9:00
Certificate issuer:       /CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
Certificate serial:       010D0C9F4328584EA79090FE72D260898BD38480
Authority key identifier: 8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98a144c3-7846-3b48-9f34-e69502d5b5c7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30330
IP address blocks:        2602:803:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:90:fe:72:d2:60:89:8b:d3:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c4aa7714-72e8-41c6-9c18-672525af3569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:59:1b:97:1e:ea:47:bb:b0:11:7b:ca:57:
                    ad:d7:bc:a8:ed:ae:c3:dd:13:7c:2b:43:72:77:30:
                    d1:bd:02:9b:6a:6f:ac:a7:87:1e:e9:f7:f7:70:fb:
                    55:c6:1d:7c:ca:54:a9:7e:f0:3e:e9:06:3b:3f:6c:
                    9d:c8:d6:c1:8c:68:08:f4:3d:93:05:48:2d:2a:01:
                    0d:2b:d2:30:b4:a6:a5:45:38:17:8e:b0:a0:7a:4a:
                    64:af:e0:5f:fc:87:9c:35:a3:96:a8:7d:c7:8f:42:
                    16:a0:e7:ff:21:25:ac:cd:9c:6f:e9:58:fd:03:87:
                    e4:70:a1:75:96:66:32:74:9f:7f:96:72:25:c6:a9:
                    74:d5:95:a4:fd:b5:5f:b3:d6:ff:d2:49:20:14:56:
                    40:01:11:8d:77:dd:7d:1b:63:14:ff:a9:19:d8:5c:
                    62:d6:8f:56:71:a0:65:23:27:42:07:59:c9:c2:95:
                    77:c6:86:bb:87:03:09:ca:51:f3:45:da:e6:c9:af:
                    f0:34:81:ac:9a:9e:23:c7:59:dd:8b:42:a5:ec:80:
                    f9:29:db:8a:02:a3:b4:27:33:ab:df:f9:fc:24:bc:
                    e2:16:49:46:53:0c:98:83:65:cb:13:5b:a2:4a:51:
                    94:20:49:a6:1d:bf:a1:61:09:f2:96:ab:a2:48:e5:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FF:49:87:B0:CD:7D:9A:05:AD:4C:45:14:CE:DF:20:76:27:C9:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98a144c3-7846-3b48-9f34-e69502d5b5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.crl

            X509v3 Authority Key Identifier:
                keyid:8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:d7:e3:21:8f:23:64:34:cd:dc:58:29:0f:66:99:b1:74:
         af:54:ed:20:45:da:46:1a:44:05:70:92:67:df:39:18:8e:b7:
         e5:19:68:41:c9:39:03:56:f2:ad:8a:00:0b:9f:b8:3b:86:fe:
         db:32:d7:ee:03:2f:d1:36:c1:e0:c8:e6:1f:df:de:55:51:71:
         48:6d:2f:5f:92:9b:3e:ab:6f:d3:98:a4:f2:c5:65:d5:c8:71:
         53:c0:a7:44:d9:40:b2:e3:0d:b4:ca:0a:7f:5e:b5:61:b6:97:
         23:76:7e:6b:38:37:27:2f:89:0c:23:d0:37:70:81:bd:53:de:
         05:21:c5:90:29:fd:f5:9a:46:7d:88:c9:5c:d7:9a:d6:3b:42:
         5e:cb:d8:d3:e0:a2:d9:ed:25:53:1c:4a:68:f4:8a:af:7c:97:
         94:cb:dd:34:2b:4c:6e:db:73:69:6b:99:4b:9f:86:2b:af:e3:
         f6:6a:d7:08:0e:57:42:94:5b:5f:bc:01:0b:49:ce:b7:65:ff:
         a4:0c:e2:26:36:ff:6a:b1:a8:7b:e3:28:db:01:6c:df:26:ad:
         7f:68:19:45:87:9c:02:15:6c:fc:8d:ac:48:2a:b9:1d:47:0d:
         58:fe:d0:98:8a:1e:54:09:d6:51:21:03:85:1c:68:53:a1:06:
         dd:7c:cd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:05:37 2026 by rpki-client