Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/b3d06358-bc50-3177-be66-23fc4b4b45c5.roa
File:                     b3d06358-bc50-3177-be66-23fc4b4b45c5.roa (raw, json)
Hash identifier:          10i5eMYq/5D/Isa2hki32wcnU84GgJ7UDgA/7pKEAYY=
Subject key identifier:   33:EE:98:F8:85:F7:39:7B:5F:CE:71:9B:4C:14:DC:E8:F1:A7:A8:6B
Certificate issuer:       /CN=2066f865-d2fa-47da-8496-ab361acb9ef1
Certificate serial:       010D0C9F4328584E842A330D97394E1BFEA0C280
Authority key identifier: E0:4F:0E:DA:0D:36:E0:C1:06:27:5F:00:8D:41:2B:68:D1:0C:48:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/b3d06358-bc50-3177-be66-23fc4b4b45c5.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     23255
IP address blocks:        2605:9ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/2066f865-d2fa-47da-8496-ab361acb9ef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/2066f865-d2fa-47da-8496-ab361acb9ef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:33:0d:97:39:4e:1b:fe:a0:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2066f865-d2fa-47da-8496-ab361acb9ef1
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=1e13768e-2dbb-4497-9dd2-85492b43a24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b0:95:1e:3f:91:ef:1d:28:bc:a4:98:71:34:
                    cf:a0:f8:15:af:44:bc:5b:77:d2:5f:1f:4d:c3:ad:
                    a7:b0:4f:72:79:82:4d:16:98:ce:03:e3:74:6b:02:
                    da:2e:40:c1:81:d1:55:f8:70:34:dd:70:5c:ae:65:
                    6e:15:46:05:79:3f:db:c4:8b:9b:89:75:e3:c3:57:
                    c4:92:ff:98:39:e1:91:e2:fc:8a:97:13:24:df:50:
                    39:00:04:39:f7:c2:92:57:f6:8b:83:6b:aa:cb:a3:
                    6e:6b:e2:08:c7:a1:26:20:b8:ff:d5:be:42:03:8e:
                    eb:01:dc:1e:cc:3f:e7:d5:0b:fe:bd:7b:94:ac:f0:
                    fe:07:4d:7d:7f:70:fd:d8:37:16:89:b4:a7:6d:57:
                    ff:84:b1:7a:39:50:3d:28:98:86:ee:c5:12:56:84:
                    66:79:2b:1d:35:c1:dd:98:47:a7:f3:f9:d4:b4:47:
                    8a:8e:6e:8a:ba:5d:4f:79:e5:b2:40:cd:7d:f7:b4:
                    68:ea:21:3e:7c:84:2a:6f:70:22:70:c3:c4:7c:98:
                    a5:52:38:77:4e:82:ef:0b:7b:f9:80:9d:72:cc:d0:
                    7b:3c:49:d4:00:68:c6:1f:6a:2d:52:6c:91:7a:d6:
                    51:da:44:89:b3:9f:c7:73:f4:fb:a0:6b:63:e0:ff:
                    b0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EE:98:F8:85:F7:39:7B:5F:CE:71:9B:4C:14:DC:E8:F1:A7:A8:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/b3d06358-bc50-3177-be66-23fc4b4b45c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1/2066f865-d2fa-47da-8496-ab361acb9ef1.crl

            X509v3 Authority Key Identifier:
                keyid:E0:4F:0E:DA:0D:36:E0:C1:06:27:5F:00:8D:41:2B:68:D1:0C:48:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2066f865-d2fa-47da-8496-ab361acb9ef1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:23:a4:d7:01:a0:d4:ad:d9:de:eb:fc:c6:b4:71:2c:85:8f:
         d1:e7:63:ef:ff:27:d4:f2:00:c0:21:7a:9f:38:c4:4d:cb:c2:
         e3:6f:78:65:f8:26:d2:83:34:c5:80:65:85:e9:7f:42:ca:12:
         2b:52:e7:b7:b2:7d:9b:a8:80:f5:fc:45:bb:0d:17:8f:97:b2:
         e4:23:93:c9:97:d8:dc:fa:bd:a3:ff:6d:6b:59:c4:33:6e:72:
         91:c1:af:58:13:64:8c:89:82:e2:64:af:de:24:62:e1:ad:bd:
         12:cd:d6:ac:32:76:28:4e:0b:ce:c8:c7:51:71:bf:c5:ec:7f:
         dc:24:16:0a:56:c3:73:ba:00:d8:43:d2:7e:f2:3c:db:2c:be:
         9c:81:f4:0d:a7:41:2b:11:a8:4c:bb:ce:58:f8:a4:98:77:9d:
         cd:7f:5a:61:96:74:93:17:35:75:ee:57:f8:33:db:d5:8b:44:
         2b:97:c1:f5:1e:12:23:50:9e:15:19:e7:f4:34:19:65:e6:77:
         9f:3c:b9:5b:35:90:9c:3c:49:ed:d8:34:b1:23:48:0a:01:5a:
         b1:a3:b8:3d:40:06:17:11:fc:0e:a0:3a:db:7e:bf:da:9b:29:
         22:0b:f6:d1:ca:d9:60:6c:7d:de:e4:1e:be:71:14:db:f3:8c:
         f8:88:80:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:09:04 2026 by rpki-client