Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa
File:                     a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa (raw, json)
Hash identifier:          u9Cghy+KD5swd7mq/bVkSpBhJg5GyBY/U/YPDZAT80Y=
Subject key identifier:   F1:E1:07:29:AD:01:D4:32:D8:44:7C:E5:AF:F6:3E:C3:22:D6:5F:DC
Certificate issuer:       /CN=a68d2f38-09d2-4f0c-b179-52244e19fa2a
Certificate serial:       010D0C9F4328584E6DD4D4E40D6DD475699CDF80
Authority key identifier: 30:77:84:8C:FD:82:E6:3A:05:8B:32:1C:76:68:7E:FA:27:F5:04:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     401219
IP address blocks:        2602:f881::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a68d2f38-09d2-4f0c-b179-52244e19fa2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a68d2f38-09d2-4f0c-b179-52244e19fa2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d4:e4:0d:6d:d4:75:69:9c:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68d2f38-09d2-4f0c-b179-52244e19fa2a
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=3f0cc7ec-d7fd-4e4f-aefb-68ff05748f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:d9:fd:25:1e:ac:de:4d:06:29:22:72:03:
                    1d:d1:09:37:be:18:99:28:b4:1a:a0:e7:55:a7:2a:
                    e0:0a:07:87:f6:02:5a:8a:96:47:71:03:c4:1c:f2:
                    59:bf:70:76:4b:e2:9e:af:1f:73:f8:14:dd:1a:84:
                    41:13:49:52:8d:a4:60:5c:14:6c:1b:63:f0:22:58:
                    a9:08:ec:74:75:8e:2a:80:6a:fc:7a:3e:35:bb:8b:
                    a2:f3:30:4a:42:9b:4f:91:f9:3b:c3:54:33:9c:20:
                    97:79:24:1a:2f:84:78:cd:f5:ee:ec:4c:8e:54:d4:
                    3f:38:ba:10:5e:ee:ed:c4:60:c3:43:c3:55:ac:6c:
                    46:d8:3f:70:15:b2:4d:46:2a:bd:e4:b5:15:78:93:
                    0e:7d:e4:af:6e:9a:39:5c:eb:43:78:42:ae:5d:4e:
                    36:99:c4:6b:07:77:79:77:8d:5d:d4:6e:f8:66:5b:
                    b0:4f:47:3e:29:d6:1b:b1:b7:66:3e:cd:a2:f7:a2:
                    6a:da:07:72:ee:81:7e:a6:d8:3c:f9:1c:e3:4e:a7:
                    be:3b:fc:44:1a:44:b8:a2:7f:17:54:ae:d5:e5:9c:
                    c3:05:7c:4b:27:f7:79:89:cf:14:70:9b:6d:cd:11:
                    24:0e:7a:4f:df:88:9d:42:22:fc:20:ae:37:a6:f2:
                    dd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E1:07:29:AD:01:D4:32:D8:44:7C:E5:AF:F6:3E:C3:22:D6:5F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a68d2f38-09d2-4f0c-b179-52244e19fa2a.crl

            X509v3 Authority Key Identifier:
                keyid:30:77:84:8C:FD:82:E6:3A:05:8B:32:1C:76:68:7E:FA:27:F5:04:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f881::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b9:17:ae:41:59:0b:5e:9a:67:74:ff:c6:92:e7:86:9e:31:
         03:6c:59:6c:f9:59:70:45:f1:c4:bb:3b:75:49:f5:fe:c4:8e:
         d9:e6:73:33:b6:e0:18:72:61:70:1d:c6:13:be:69:2b:aa:39:
         d1:d2:c9:30:4c:ab:99:a2:4f:34:8d:21:12:d0:3f:e0:4a:86:
         68:0b:34:2f:75:64:e9:93:3e:a7:79:ad:2c:f9:fa:3a:d1:b7:
         79:6e:25:28:32:80:0f:6b:e4:7f:8c:06:47:01:4e:16:ad:10:
         dc:67:cc:ab:08:be:70:38:f9:1a:79:78:ae:3b:d1:26:88:f3:
         a2:83:09:f1:e0:67:64:92:a9:a0:73:98:76:60:96:41:67:57:
         91:c8:0a:19:a8:65:36:40:cd:70:de:55:f8:d9:0f:8f:62:8f:
         76:2b:7a:04:d8:74:74:75:ee:6e:a2:ee:55:c9:bd:41:3b:f0:
         88:ec:dd:a7:ba:04:0f:50:38:f5:1f:10:61:0f:33:e7:ae:d5:
         5d:05:eb:21:8e:ce:b8:db:0a:90:8a:d5:5f:f3:6c:e3:07:88:
         d1:a8:34:94:df:bd:f3:f0:d8:b1:35:fb:db:91:cc:84:4f:94:
         47:2f:2f:65:63:b9:a7:53:2f:67:1e:ba:c3:ae:41:2d:b6:f7:
         d1:af:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:04:12 2026 by rpki-client