Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa
File:                     f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa (raw, json)
Hash identifier:          X6IUj0mixsRnnKQ5fSmTgqjI8r2E08FnjbSxY2KgnYQ=
Subject key identifier:   7B:DF:2F:96:51:94:AC:03:4E:40:2D:B9:E8:59:BD:FD:59:F0:E7:76
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584EB57C5590DDF2B43A314EF080
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     65012
IP address blocks:        2607:9bc0:1020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:55:90:dd:f2:b4:3a:31:4e:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=aa965240-7d2b-4bc3-9199-b6c52b0d2636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:66:2b:72:11:42:03:cf:4c:d8:81:e0:3a:
                    df:a6:5d:d5:68:41:e9:5e:89:0b:31:78:73:83:7a:
                    a4:5d:75:81:2e:1e:66:29:7e:51:04:30:49:1e:08:
                    3f:03:55:da:67:40:1a:c4:0d:9c:65:fa:b4:fe:b3:
                    38:7c:44:9b:2e:9b:18:c6:7b:5c:4e:7c:97:69:08:
                    46:ac:95:07:2c:8d:0c:ad:2d:c9:7e:f2:48:75:89:
                    50:f2:a4:64:9b:23:57:df:f8:80:f2:55:2f:6d:c5:
                    d0:f4:aa:42:f3:3f:45:30:3d:ea:81:41:0e:cf:00:
                    b5:17:6c:39:dd:0a:ee:dc:01:c7:24:85:c3:ba:be:
                    0c:bb:3e:c7:af:06:b8:16:62:94:e1:1e:a0:7e:fb:
                    ba:90:25:99:a1:7f:dc:44:0c:bf:cd:9f:96:27:3b:
                    0a:70:56:aa:07:05:61:2e:6c:db:36:c2:0d:2d:30:
                    ac:ff:6c:f0:d9:b0:25:22:a3:ab:c0:b5:e0:ef:3b:
                    7b:fc:01:fc:76:b6:79:fc:2d:66:da:da:cd:a7:bd:
                    0a:96:be:d8:08:e2:b9:ea:9f:ee:58:6a:6f:50:e2:
                    5c:0f:88:6c:8d:06:31:76:eb:df:c3:7e:8a:b0:3f:
                    47:ef:cc:e1:2f:40:2d:05:54:dd:6c:d6:cf:1b:68:
                    f8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DF:2F:96:51:94:AC:03:4E:40:2D:B9:E8:59:BD:FD:59:F0:E7:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:03:9f:e1:4b:d1:78:9c:c0:18:88:53:e0:87:5f:99:3c:dc:
         14:aa:13:97:fe:81:ec:f6:1f:3c:7a:24:f0:d4:91:d7:82:f8:
         e7:c3:94:92:9d:23:eb:e8:07:84:bc:d7:33:00:d1:0b:81:87:
         2a:1e:5d:f8:df:86:98:05:3b:87:9a:9d:16:36:b3:a9:d7:1e:
         93:84:78:01:5d:bd:bd:bd:52:e8:83:73:75:e7:e7:54:d6:ff:
         ec:e9:c3:a9:ef:69:2a:ba:45:b9:85:82:b0:df:1c:8d:d1:e1:
         67:5c:82:f6:3c:60:d6:82:31:00:7b:66:24:b8:6c:a1:e5:a3:
         1b:06:24:6a:09:82:b1:e7:b9:f6:3d:31:71:3b:8a:74:27:11:
         8e:3f:9d:e2:3a:5a:2f:8b:90:76:a1:06:2b:38:80:66:6b:16:
         e8:17:4d:c2:3b:88:3f:87:0d:a5:25:8b:28:f3:59:aa:a4:ca:
         48:e5:30:4d:43:f2:d5:d9:6c:a1:a3:ec:ea:22:df:a8:e5:ba:
         7b:95:2c:93:8d:ae:cc:38:1a:cc:4d:58:00:39:5d:08:33:40:
         17:75:f4:e6:05:3b:93:a8:6c:e6:14:50:93:2b:f3:b2:a6:8c:
         5b:4a:3d:df:e9:4d:39:5d:2f:05:9c:8b:14:ac:f0:11:61:e8:
         70:f2:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:36:31 2026 by rpki-client