Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/a0e1613d-3f62-3987-9429-22cd77f9e423.roa
File:                     a0e1613d-3f62-3987-9429-22cd77f9e423.roa (raw, json)
Hash identifier:          vB9FY5qzgHKHVtU/hDelHoI3Wc7D4f2wVICuioW4/LM=
Subject key identifier:   3E:90:DE:68:B9:6C:13:8F:15:EA:E6:68:2F:77:36:17:36:1D:96:99
Certificate issuer:       /CN=2066f865-d2fa-47da-8496-ab361acb9ef1
Certificate serial:       010D0C9F4328584E842A366B8FB26CFF14153E80
Authority key identifier: E0:4F:0E:DA:0D:36:E0:C1:06:27:5F:00:8D:41:2B:68:D1:0C:48:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/a0e1613d-3f62-3987-9429-22cd77f9e423.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     399938
IP address blocks:        2605:9ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/2066f865-d2fa-47da-8496-ab361acb9ef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/2066f865-d2fa-47da-8496-ab361acb9ef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:36:6b:8f:b2:6c:ff:14:15:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2066f865-d2fa-47da-8496-ab361acb9ef1
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=131758e9-aee0-4ba1-884a-5f6d39d4539d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:65:00:ed:c8:07:26:d0:44:c5:de:40:e6:
                    ab:83:44:54:c5:4a:9a:11:4f:88:14:b6:fa:17:90:
                    c1:9a:a4:98:cd:ec:fc:9f:cd:41:46:5f:35:c0:ea:
                    8a:8c:d5:40:59:a5:3b:e0:1a:26:97:0a:a2:12:63:
                    55:62:e7:c6:15:ad:fe:f6:85:b9:bc:64:5a:a5:b0:
                    8e:b1:d3:ae:c4:92:b6:24:55:26:fa:0c:24:17:b7:
                    43:4c:77:47:4c:e5:b6:86:08:37:e6:fa:7f:2d:35:
                    84:f3:b0:f8:01:5e:a5:e4:b7:a7:3e:e0:66:c9:16:
                    c0:7d:05:ba:d7:b8:04:c3:21:dd:bd:01:69:8d:4b:
                    a9:3c:ce:dd:9b:5d:43:68:68:ed:0a:16:04:bf:96:
                    a3:e0:87:b4:e4:a7:d7:c8:98:2e:a8:ad:53:b6:24:
                    0c:bd:fd:e6:87:40:a4:ff:a9:d5:ee:7a:64:02:de:
                    52:3e:37:54:d1:36:24:45:3c:63:11:93:a7:38:65:
                    54:6b:09:7e:5e:5f:85:33:1f:b1:b5:ef:37:0a:b4:
                    b6:21:fd:df:b6:71:ab:6d:0e:c9:7e:1e:57:63:e8:
                    03:27:19:6a:5b:f9:9d:6e:4d:a4:e1:08:8a:e9:77:
                    68:7e:c0:b9:99:2d:03:9a:58:ac:f8:61:d3:db:c1:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:90:DE:68:B9:6C:13:8F:15:EA:E6:68:2F:77:36:17:36:1D:96:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/a0e1613d-3f62-3987-9429-22cd77f9e423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/2066f865-d2fa-47da-8496-ab361acb9ef1.crl

            X509v3 Authority Key Identifier:
                keyid:E0:4F:0E:DA:0D:36:E0:C1:06:27:5F:00:8D:41:2B:68:D1:0C:48:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:94:bb:a5:6d:b3:f1:41:87:a8:d3:1c:27:e9:8d:ce:2d:32:
         72:be:2b:a2:d2:c7:bc:62:c7:07:22:af:0f:32:07:37:83:1b:
         97:85:80:4a:e4:f9:e4:93:84:79:77:b5:e2:57:4e:57:96:70:
         36:10:2d:7b:40:70:cd:b3:2d:85:fa:ee:96:85:d4:3f:71:45:
         85:2a:3d:e9:07:f0:b1:b9:57:11:9c:56:88:b1:60:c0:2b:e5:
         97:16:5b:ca:24:e3:68:65:e2:ca:a6:9b:fe:97:13:51:5a:6c:
         7c:13:1d:c8:64:ff:b9:34:93:78:34:6a:97:94:ab:8d:62:2e:
         b7:cb:28:c2:00:46:4a:aa:49:d5:d5:fe:63:f3:7d:a5:4f:43:
         f0:32:36:56:aa:e9:56:79:1d:d5:ce:e9:23:ee:17:92:41:a1:
         5a:27:52:f0:5f:f1:a8:38:58:1f:c7:01:75:4f:e2:f3:46:6f:
         4b:bf:73:e8:e7:a5:ba:d9:e7:cb:96:ea:58:65:d9:b2:0c:64:
         ee:93:04:dc:c1:8a:69:cb:01:44:c8:e0:a4:48:cf:64:fb:ef:
         06:e3:66:66:c8:21:9b:8e:53:7d:3e:97:9f:cf:31:28:77:e8:
         3d:83:de:d4:54:d4:19:f2:fc:94:7a:a0:16:57:c9:0d:81:99:
         8f:6c:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:12:07 2026 by rpki-client