Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c55d9086-8725-3dd4-828f-538cd10282a0.roa
File:                     c55d9086-8725-3dd4-828f-538cd10282a0.roa (raw, json)
Hash identifier:          rVoUVFBlfBcET35/vf20x910/d+CC3EA7eMdg/sbDzI=
Subject key identifier:   12:97:B4:33:04:78:F5:94:0F:A0:CC:6B:C9:71:F3:95:CE:94:1B:98
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F4328584E6F3EC8A53ACF9F6B88A2D260
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c55d9086-8725-3dd4-828f-538cd10282a0.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        2607:8d40:f40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:c8:a5:3a:cf:9f:6b:88:a2:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=36f123e2-7ccb-4c45-8490-08e35e43c370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:d3:2a:6c:0f:bd:39:5a:d2:5d:e6:29:42:
                    4d:c7:bb:a4:d1:07:0e:db:2b:e7:bd:12:59:df:40:
                    de:04:9a:53:3e:b8:01:f6:a2:b0:63:9f:3e:5f:9f:
                    d9:39:ef:30:30:c3:8a:a4:f3:3b:a0:18:5b:f4:88:
                    5a:fa:2b:aa:8c:94:19:a1:d7:e3:74:00:1b:d3:d4:
                    5d:46:a1:60:e5:cd:7b:cc:04:86:2e:c5:60:60:9b:
                    ea:ab:c3:a9:0d:51:b5:11:78:6a:85:76:74:60:6b:
                    84:d4:eb:f0:6e:2a:15:bf:29:bb:f0:6c:88:fa:c5:
                    94:c8:78:59:3f:fd:f7:28:aa:ea:10:4b:65:6e:d7:
                    5e:f1:b2:9f:d4:6e:44:ed:fb:3f:0b:f3:73:3f:5a:
                    eb:85:ec:6e:9d:56:93:7a:dc:8a:0e:c3:45:04:9c:
                    d7:d6:eb:97:c7:f5:36:0f:cd:f0:fe:47:1f:ab:b6:
                    1b:9f:50:65:5c:11:a8:5f:fc:b9:9e:51:75:fb:c4:
                    c9:d7:43:50:a8:6d:c1:0d:a7:cf:7e:18:8f:b8:6a:
                    4c:33:d8:06:25:d3:36:07:a3:6e:1a:df:82:2c:f5:
                    94:5e:de:d3:5c:22:e0:6c:3e:3e:66:e9:92:82:59:
                    7e:c3:94:c1:36:8c:5b:db:92:ca:28:04:17:25:82:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:97:B4:33:04:78:F5:94:0F:A0:CC:6B:C9:71:F3:95:CE:94:1B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c55d9086-8725-3dd4-828f-538cd10282a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40:f40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4f:95:43:e2:f7:88:46:67:a2:a3:92:dd:e5:5a:84:8c:e6:
         44:84:97:b8:3b:0f:d6:21:89:ae:dd:ac:f4:f7:38:e4:c2:51:
         1d:1c:f5:64:68:4b:b8:d4:bb:81:64:e0:74:a8:e7:eb:03:ae:
         f8:fc:fe:59:41:8c:61:30:2b:80:2d:58:4c:0a:a7:04:b7:67:
         d9:fd:b2:73:19:6c:af:b7:e1:52:5f:93:96:03:15:3e:23:a2:
         d5:ef:2c:de:37:ac:b6:1a:23:52:dd:cc:ce:68:4a:29:c1:1a:
         b9:98:f3:65:40:ed:9f:82:04:10:13:7f:11:63:2a:9c:72:c0:
         e6:f9:ff:c8:9e:ad:fa:14:2b:2f:44:34:2b:f9:28:4b:99:be:
         49:69:f7:da:38:f9:f6:81:b5:2c:1c:f4:58:d7:99:0f:9b:c3:
         82:d5:e7:c2:03:53:c7:2e:65:b0:7c:0b:61:57:90:27:cb:f3:
         fd:f9:aa:f6:60:31:f7:07:bb:6f:5a:71:75:89:41:b7:e6:6a:
         f6:50:28:8f:f7:f7:8e:68:b5:19:5a:b9:dc:75:10:98:81:a3:
         26:66:db:a4:1c:ac:91:83:84:27:69:ef:d3:7f:49:17:b2:3a:
         55:fb:21:e6:89:e3:02:7c:69:19:63:3f:b0:49:2c:0c:93:d0:
         13:b2:84:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:08:25 2026 by rpki-client