Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b9be449-988f-3659-87b5-14edd19c4c8b.roa
File:                     0b9be449-988f-3659-87b5-14edd19c4c8b.roa (raw, json)
Hash identifier:          eMho9D7pip4QGeAUtntPLXGFRBsjoK9yU+aoVb3dWyc=
Subject key identifier:   E4:F4:35:39:E6:52:07:36:A5:57:E8:1E:A5:D1:11:BE:F4:6B:E7:E8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3E5F23FD9CFF19C2857A8380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b9be449-988f-3659-87b5-14edd19c4c8b.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:2062::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:23:fd:9c:ff:19:c2:85:7a:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=c167dfdb-f5dc-4e9c-8a52-9a242da18428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:d4:4a:ec:46:69:ca:b3:e2:98:aa:fc:73:
                    77:fa:c0:0a:67:e7:97:06:06:5c:d7:e0:f3:70:54:
                    7e:70:ea:51:f3:5b:c9:db:e1:fe:b7:eb:81:a2:bb:
                    bb:33:52:0e:20:83:31:bd:8c:6f:77:7c:5a:85:d0:
                    c0:37:99:0c:8b:6f:fa:2e:e4:99:3a:15:b0:9b:42:
                    c6:b9:77:5d:51:a0:c2:6b:44:89:ac:d7:56:5e:19:
                    09:9e:ac:b0:e6:d8:9e:16:1b:3d:25:88:9f:ce:73:
                    8f:b0:ef:de:cb:07:fd:a9:86:21:4d:b1:43:3c:96:
                    9d:3e:ce:85:a8:d0:ea:13:67:0c:c3:bd:df:fc:b2:
                    17:89:0f:e6:13:ac:f4:f5:8c:bb:96:1b:de:51:cb:
                    86:cf:63:7d:6f:ec:49:cd:ae:3d:1c:93:91:c6:f7:
                    1f:4c:84:40:40:ee:55:84:87:de:02:7b:85:03:02:
                    df:d0:23:0a:6e:23:00:c1:1e:5e:0d:15:cd:bd:6b:
                    44:cc:5f:be:ba:cf:92:26:10:bd:38:11:3d:54:3d:
                    0b:d4:f7:3e:2c:67:e3:7e:05:e1:52:54:8c:39:83:
                    89:43:0e:51:bd:57:21:f9:3a:4e:e6:6e:1b:d5:e2:
                    80:e4:4e:33:30:bd:28:b1:2f:0e:4f:45:ba:70:42:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F4:35:39:E6:52:07:36:A5:57:E8:1E:A5:D1:11:BE:F4:6B:E7:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b9be449-988f-3659-87b5-14edd19c4c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2062::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:89:05:6c:44:2d:4c:39:49:1c:83:12:f9:ba:aa:84:b9:c0:
         84:6d:56:07:cd:13:63:95:3c:ab:b0:3a:2f:b6:ef:b2:81:3a:
         66:0f:e7:49:f5:9b:94:20:09:18:c7:00:47:9a:45:f5:67:2b:
         c4:68:59:2b:8f:aa:08:4b:c2:bf:0e:7b:24:10:7d:78:22:62:
         dd:37:0c:6b:e5:7d:92:98:ad:6d:51:47:59:a2:7e:fc:15:bc:
         5d:b6:07:fe:31:f5:0b:62:07:f0:ba:bc:0e:84:d7:b6:fe:e2:
         42:46:34:0f:01:97:f4:ce:43:93:d1:99:cf:d1:08:8b:19:5d:
         47:6e:8f:a0:84:41:7f:55:8b:f7:58:68:d1:86:81:40:f4:81:
         f8:52:69:65:39:fb:6a:05:e7:2a:ba:95:ab:d4:d1:c6:8b:74:
         7f:de:2f:3e:80:82:5d:a5:59:b9:f3:18:f3:df:3b:43:ed:db:
         e3:58:dd:9e:a2:79:88:cd:01:e9:a6:c6:75:fd:37:e7:c6:2a:
         a2:9e:8b:fb:a0:17:1b:12:81:46:1b:42:9b:cd:31:e8:42:e0:
         c0:10:2a:c5:7a:62:b8:0a:db:ca:19:f2:cf:10:a6:fc:aa:bb:
         85:70:c5:d7:18:00:5b:83:b3:d7:eb:20:a3:4e:68:ad:92:e3:
         bf:d7:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:58:45 2026 by rpki-client