Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/62e51151-f56c-3a38-b24e-40421c70b31d.roa
File:                     62e51151-f56c-3a38-b24e-40421c70b31d.roa (raw, json)
Hash identifier:          f8r7Hx8W2nBqaSVAqrZH9TNMnbRCS7nNGEeJO4V7vac=
Subject key identifier:   C8:A1:D0:F2:70:E2:AC:33:2F:33:93:95:75:53:27:E1:EB:58:E6:CA
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584E2D9F117C6829BCC3D2B1B700
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/62e51151-f56c-3a38-b24e-40421c70b31d.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2605:84c0:cc2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:11:7c:68:29:bc:c3:d2:b1:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=d7b87608-9140-4f5b-8664-f01383081f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:89:a3:ab:70:58:8d:30:56:4f:0b:58:35:
                    a3:2d:02:c6:48:b4:5c:3f:d0:69:5b:d1:4c:2c:29:
                    96:b8:27:ec:07:80:fe:e3:56:5d:33:dd:a2:ac:26:
                    24:7c:a9:d9:70:b3:87:c1:e8:01:3f:d6:d1:e7:18:
                    de:97:81:f2:dd:fd:df:4e:23:35:ac:29:9d:58:0d:
                    dd:72:5a:61:70:be:98:f8:cc:4f:bd:40:c0:26:26:
                    7c:28:9c:fb:08:13:46:9b:e4:b2:1f:53:0a:d4:c4:
                    fa:38:42:6e:40:ec:59:e9:ba:ce:9c:73:5e:1a:da:
                    26:33:a3:34:58:d2:a7:39:04:f8:4f:69:8a:3a:00:
                    ac:ea:61:98:b8:92:74:b4:61:a2:fc:b6:3b:0f:bd:
                    79:95:6f:f3:c4:9e:39:d4:cf:70:2c:7e:27:18:67:
                    ef:50:ea:97:aa:1a:3c:65:a3:e1:0d:39:ba:8e:20:
                    6e:49:19:7a:63:b1:74:f5:3c:73:83:80:4c:d6:63:
                    2b:e9:c2:9c:f3:f3:52:e1:e3:d3:ab:fd:cf:70:ec:
                    73:69:dc:39:e2:54:1e:12:6b:7c:c7:b3:16:e9:17:
                    fa:40:1b:c7:a6:eb:3b:23:43:87:b6:6b:d7:aa:5b:
                    f8:8f:6c:30:34:5f:b7:11:53:d9:3e:97:93:18:5b:
                    09:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A1:D0:F2:70:E2:AC:33:2F:33:93:95:75:53:27:E1:EB:58:E6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/62e51151-f56c-3a38-b24e-40421c70b31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:cc2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:77:a4:3d:8b:34:88:ca:45:df:03:90:db:d4:23:7f:14:
         8f:f6:89:15:12:5c:11:81:e8:c8:37:42:01:5d:69:29:18:14:
         ec:ae:17:29:1b:bf:b3:df:8a:d4:20:11:2f:0a:bb:00:91:55:
         2a:98:3c:01:50:ad:af:24:c3:f9:24:e2:ad:4d:30:72:ab:10:
         2a:f0:74:9d:7a:c7:5d:fd:80:fc:79:99:05:71:d2:22:c3:29:
         ef:78:42:ac:37:ac:51:be:be:48:aa:fd:74:e5:ff:c1:0a:8d:
         c1:49:95:72:71:2a:6a:20:a2:ff:01:d7:96:9b:8c:92:38:c9:
         51:e0:1a:d3:df:9b:a5:fc:24:fa:fb:e3:2b:8b:1e:26:4f:a6:
         55:36:99:95:3d:ba:41:a6:b0:a5:2e:d0:85:22:e8:c6:b9:ed:
         0e:30:62:f4:e3:99:44:9f:e0:b3:47:5c:92:31:e3:6f:11:6f:
         da:05:67:62:0b:b1:0a:d5:09:c2:4b:55:14:8d:38:4a:e3:b8:
         6d:46:7e:76:e0:b8:ff:62:ba:ae:43:b9:46:96:58:56:03:84:
         78:76:0e:5c:41:c4:f0:cb:b4:8a:b0:8e:1d:72:f1:31:af:e4:
         92:53:e1:21:6a:fe:49:6c:90:07:12:11:b1:69:44:2c:86:05:
         02:d3:2d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:18:38 2026 by rpki-client