Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/d6e46f7a-dd3c-3bac-9576-b6ce6c446fac.roa
File:                     d6e46f7a-dd3c-3bac-9576-b6ce6c446fac.roa (raw, json)
Hash identifier:          ybOHDn/dOaopWM3LOST+StVRgytleKZDEtB7BK/ctYs=
Subject key identifier:   60:A9:84:E6:A1:6C:83:FA:40:25:1E:97:2F:B4:73:32:E0:28:3C:31
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F4328584EA78764C4423C6528F77FC880
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/d6e46f7a-dd3c-3bac-9576-b6ce6c446fac.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396417
IP address blocks:        2631:a000::/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:64:c4:42:3c:65:28:f7:7f:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=22f28418-b740-46f4-86e0-b15ddaad1c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:d5:d4:16:7a:ed:66:39:03:a5:5a:04:17:
                    41:0c:30:0f:1c:47:1f:ea:b3:a5:98:05:21:37:7e:
                    c4:25:06:55:3a:5f:30:92:9e:cc:7a:b2:71:8d:7b:
                    69:7d:7a:84:84:cb:f0:0d:7f:08:5e:89:1f:18:cc:
                    70:ea:fd:74:cd:55:92:04:8d:4e:c9:3a:f3:38:df:
                    3d:60:54:79:4f:6d:b1:a7:1d:df:1f:8d:03:72:53:
                    8f:13:95:e0:a4:07:a2:f0:59:24:0b:64:84:cb:67:
                    ab:7f:fb:84:41:b0:c6:01:95:60:1e:09:37:13:8c:
                    3e:51:23:78:f5:91:76:90:60:31:4c:3e:1f:d5:a0:
                    b2:73:fc:39:72:ed:f3:6b:bf:ff:fb:09:f2:87:cc:
                    48:ba:8d:df:40:91:48:00:ad:76:ae:75:d6:31:cd:
                    1e:86:46:d0:0a:a3:24:a3:03:f5:d8:50:4f:2b:f2:
                    3a:2c:09:41:9e:94:dc:dd:28:e5:b7:68:44:8e:3b:
                    37:bc:9c:b1:38:51:96:d5:cc:b9:f9:32:88:59:79:
                    ff:26:56:83:b1:47:2e:80:38:3f:59:8e:b2:b8:77:
                    a3:19:54:fc:6f:d2:1c:b6:3c:15:d6:37:5f:21:03:
                    e5:bf:f5:5b:dc:5c:b7:e7:7e:22:e2:6e:e2:ea:d7:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A9:84:E6:A1:6C:83:FA:40:25:1E:97:2F:B4:73:32:E0:28:3C:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/d6e46f7a-dd3c-3bac-9576-b6ce6c446fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:a000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:46:c7:4b:89:82:22:5f:98:65:3d:55:26:da:01:b2:16:d1:
         4c:7d:38:0e:25:f9:94:8e:91:34:f1:a0:41:10:ba:f4:46:15:
         ec:56:5f:33:28:57:94:6b:e3:ee:89:6c:89:76:89:ea:fe:37:
         0b:c4:b4:e8:d6:f6:0c:46:f2:a9:b0:8a:22:a5:fd:4f:e5:26:
         93:78:1a:19:63:87:6a:a1:54:2b:92:c0:f4:df:c4:f2:15:3f:
         7b:2c:2b:b0:a4:38:58:8d:f7:ff:e7:27:53:62:ea:7b:cc:26:
         83:13:5a:4e:cb:29:91:d4:2f:05:07:a9:64:9e:c3:ba:91:eb:
         f4:eb:c6:34:c7:fb:4d:46:a3:7e:fa:e5:69:55:de:ef:d3:c8:
         4b:24:6d:3e:be:2a:49:0b:55:70:3b:f4:59:64:70:99:a0:fa:
         ae:58:33:d9:0f:65:2b:88:81:4d:94:97:37:fb:49:8c:1b:52:
         55:26:8a:17:a4:b7:36:0c:9c:e8:b5:7f:cd:c6:c9:86:12:1c:
         fb:f3:21:d8:68:58:6d:9b:f4:f9:66:0d:53:42:4f:8b:10:0e:
         da:02:9d:00:33:48:2b:6b:7b:8b:fd:c9:cb:c5:77:1f:16:58:
         dd:04:82:3d:22:f4:f1:32:20:d2:4d:e6:33:57:76:61:9c:77:
         e8:b3:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 02:06:34 2026 by rpki-client