Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa
File:                     3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa (raw, json)
Hash identifier:          sjWJawZK6mon29FDho3kXVNkSQ1vDazkUpB5AWntYLo=
Subject key identifier:   E5:38:BD:5F:CD:78:66:EE:D8:15:ED:23:2A:24:D6:64:50:84:42:6D
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584EC0A724C43CC3875268D6D380
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     32982
IP address blocks:        2607:f368:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:24:c4:3c:c3:87:52:68:d6:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=89ffcc31-7305-4b8b-ba2d-a68ebfb8c6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f0:f7:68:e6:d8:42:c5:d6:0f:b3:1a:6f:e3:
                    85:6a:93:12:c6:7b:65:97:26:da:a5:8f:95:18:9d:
                    fa:ca:bd:41:1c:a4:ad:3d:cc:d6:27:86:16:1c:67:
                    d5:26:d9:8b:80:67:cb:d0:4f:c9:d2:de:4e:9f:83:
                    7f:0e:10:04:e8:64:5a:b1:34:75:c3:63:36:48:35:
                    58:a9:ee:d9:d2:dd:65:19:73:d9:12:be:8b:6e:f1:
                    bb:3b:ec:5c:23:43:2e:39:a4:fa:56:2e:b2:b5:ce:
                    a6:6a:05:79:c3:6c:22:8a:1f:03:7c:68:06:a8:ec:
                    8d:75:34:f7:ff:a4:d7:1f:a9:c3:94:d8:ce:40:fe:
                    ab:ee:9d:cd:b8:66:0e:78:8b:68:85:bb:53:b6:9a:
                    b6:9e:bb:a9:5b:cf:82:a7:2e:6b:31:7f:51:df:38:
                    65:6d:e1:4c:b8:15:c0:91:69:90:54:94:4c:a3:b9:
                    95:1d:3b:e8:95:ec:3a:be:ea:6f:58:61:82:8c:7b:
                    67:54:63:02:db:b5:3c:58:59:bb:fe:90:c8:57:25:
                    98:0d:0a:13:62:42:0c:5a:1d:59:d5:46:93:c5:88:
                    41:0b:e6:9a:79:09:9d:91:04:67:f9:b9:55:25:45:
                    a2:35:49:37:34:1a:be:55:94:11:1c:99:e3:8e:90:
                    19:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:38:BD:5F:CD:78:66:EE:D8:15:ED:23:2A:24:D6:64:50:84:42:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:17:22:c8:d1:66:5c:a3:d0:0a:b2:14:8f:e8:8f:7f:1e:67:
         18:86:32:ea:17:64:17:db:04:41:29:1a:59:10:a8:96:2d:d0:
         66:f2:a3:db:f8:5a:30:d5:1e:c5:9f:17:cb:9d:2a:7b:76:89:
         3f:03:43:21:e4:d0:06:39:72:b8:2f:6f:aa:79:69:0c:5d:c1:
         5f:0a:59:19:73:fc:74:01:3d:df:e5:1e:14:e6:ba:58:37:f4:
         c9:ec:c0:ee:48:fe:ca:65:43:4c:ba:b2:40:88:b4:d3:e7:eb:
         c0:cd:e8:e2:91:0c:1a:9c:a8:f3:d1:c3:26:70:43:bc:c8:98:
         77:71:3a:de:dd:fc:93:d9:0e:fb:59:99:6d:29:4c:41:3a:42:
         11:77:80:f6:25:de:43:b2:f1:ea:9d:35:48:bc:b7:9b:be:0a:
         70:7f:2a:a7:ba:e3:55:8b:43:2b:b4:d5:18:50:be:be:b8:0f:
         a1:f0:a0:8c:3b:a0:9c:e8:d0:62:e3:1a:21:30:4f:ce:0a:14:
         55:e3:77:6a:ef:70:23:ba:ff:28:26:4f:8d:b0:16:54:85:56:
         02:f0:e1:55:08:bf:fe:16:7b:b7:dc:c7:1c:28:69:f7:c2:30:
         36:a7:8f:93:3c:62:f6:dc:a0:19:4a:e7:d2:2f:bf:bd:3c:1f:
         20:5a:96:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:37:15 2026 by rpki-client