Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa
File:                     9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa (raw, json)
Hash identifier:          RCiqvEXOe1uGYL/inaeXKz6imuSTuvXTZcvJ8nGP3GY=
Subject key identifier:   92:33:F5:8E:45:1F:03:02:CE:14:89:A2:E8:1D:EE:7B:92:3E:C6:CE
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584E296F0C367C2BD04D692653B0
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     203283
IP address blocks:        2602:2db:11c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:0c:36:7c:2b:d0:4d:69:26:53:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=d4fd2e35-26db-42a4-9d45-b7845feb928c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:4a:3b:bf:b1:d0:76:85:8e:8f:42:47:9b:
                    de:59:e9:4f:93:97:ba:be:43:48:f5:a5:61:ba:19:
                    d4:d8:55:b5:fa:cb:52:79:13:ae:7e:16:00:6b:ed:
                    56:8b:55:6f:b1:85:28:78:34:ff:87:8f:5f:c7:12:
                    0b:2e:1e:b1:e3:c6:17:7c:78:eb:84:2a:d1:88:c2:
                    6c:95:5c:7e:f9:b4:7e:9f:ca:d2:36:de:6a:67:41:
                    d1:53:d2:57:fb:4a:c4:c7:93:2f:3d:c8:c0:cf:e5:
                    0b:23:b4:9a:1e:70:1e:95:ac:12:5a:7e:9a:21:eb:
                    4e:1b:94:12:73:54:5a:12:2d:23:5a:8e:9c:c7:1c:
                    fb:2e:41:a8:3f:62:41:17:c4:3e:f8:c0:67:04:8b:
                    80:a8:32:97:d7:bd:ae:4c:24:df:d1:f5:82:f4:59:
                    be:d1:e0:a4:5d:44:33:ff:b7:02:2e:3f:5e:a6:c8:
                    91:58:a0:87:f8:d6:1a:ed:6e:0b:15:ee:0a:92:4f:
                    8f:1d:8a:32:65:ef:65:c2:1d:f6:19:df:df:ac:7a:
                    6e:8c:17:60:b7:ca:0f:18:6f:cf:eb:0a:1f:e7:b0:
                    05:7e:97:8c:83:79:3d:80:e5:98:39:c5:d5:a4:60:
                    af:05:a5:8d:64:07:34:90:67:45:dd:6a:cd:ee:54:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:33:F5:8E:45:1F:03:02:CE:14:89:A2:E8:1D:EE:7B:92:3E:C6:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db:11c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a1:8d:36:5d:11:c5:b3:68:6e:b3:4a:0b:79:7c:a1:8e:0e:
         9c:06:c1:71:0d:6a:6c:e4:54:2b:13:67:e1:8e:14:56:0f:0f:
         3e:f0:6b:7c:c0:95:98:d7:37:44:26:05:8e:3f:90:fe:78:bb:
         14:c4:35:ef:bb:c5:d3:f7:fd:82:72:53:47:cf:00:9f:73:82:
         b1:90:8c:89:02:2e:04:50:65:da:64:94:1e:e0:4c:70:4d:d8:
         d6:29:31:65:cc:5f:31:6f:ee:f5:c8:6c:7a:21:98:c1:da:a9:
         f8:51:70:83:60:89:66:65:ce:87:26:e6:ba:b6:95:fd:43:f7:
         31:cf:eb:d4:a8:1e:ff:e2:59:56:3a:47:ea:51:c0:fe:e6:f6:
         24:cc:b7:bf:9f:26:c1:53:a4:48:af:ca:72:46:83:03:10:0d:
         d8:77:97:d0:fa:c5:fd:d3:78:c8:43:d9:94:68:6b:b9:2c:89:
         62:9a:a1:26:f0:10:da:4f:20:91:97:53:fb:74:3d:a0:10:98:
         09:58:43:35:42:73:7b:fd:28:79:cd:74:04:ae:18:a1:e2:17:
         19:48:6b:85:e1:e1:f6:77:14:a1:81:c0:cd:0d:27:c4:d6:65:
         67:16:be:75:19:4b:74:21:7f:19:5a:17:14:3b:3a:cc:4d:5b:
         35:32:25:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:49:55 2026 by rpki-client