Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa
File:                     844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa (raw, json)
Hash identifier:          /kLMJy5mkUQIXd/vNvYNIVKrWUM/TUzcrjXA6Jdc5HY=
Subject key identifier:   FD:C6:AF:F3:DF:FC:D0:8D:A8:A9:CD:1B:A7:FA:5A:D4:89:99:31:DA
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584E4C548B8882EC1C5D60B6C540
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        2605:84c0:56::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:8b:88:82:ec:1c:5d:60:b6:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=997552cd-e9ea-426b-b64b-0478bc62cf4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:c3:b0:b5:d2:a1:bb:11:7a:62:f2:8a:0f:
                    94:62:39:2d:3f:9b:74:38:49:31:38:49:2e:b5:2f:
                    86:70:c1:56:ad:13:07:76:17:1b:a9:92:74:96:96:
                    ac:ea:51:c0:bc:ea:80:04:de:99:aa:8e:73:d6:2e:
                    7f:c5:a3:96:08:c3:a8:f6:59:40:5a:03:ae:e6:6e:
                    ed:59:d9:d0:5f:90:66:e2:54:c7:fe:f0:f1:a6:21:
                    35:e3:80:ab:af:2d:59:da:11:86:06:81:3f:7f:fb:
                    d2:3d:56:0e:96:b3:3a:76:ff:3c:aa:8b:43:75:79:
                    77:8d:af:ac:97:74:7d:5b:3d:d9:41:08:73:27:73:
                    df:4e:85:06:41:e0:a5:66:38:f3:db:ef:0d:93:17:
                    e7:00:b5:0b:60:d1:37:dc:73:d6:33:dd:b6:48:0d:
                    60:1c:03:f4:53:05:45:e2:b4:dd:a6:b0:c8:a6:1c:
                    e6:cc:b5:4b:a8:79:01:a8:2b:1d:d2:18:15:32:dc:
                    49:86:9f:fd:25:8a:57:ff:19:c6:7a:d6:b9:a6:6b:
                    82:85:43:ae:91:2d:5d:4e:f3:d2:38:39:de:cb:70:
                    11:d7:f0:83:8c:e1:5a:19:0e:69:4e:77:2c:ea:83:
                    31:66:70:6d:bc:8b:ff:8c:bc:7b:a1:11:e7:53:0d:
                    df:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C6:AF:F3:DF:FC:D0:8D:A8:A9:CD:1B:A7:FA:5A:D4:89:99:31:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:56::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:db:b1:84:62:b1:93:72:01:56:f1:09:d5:6a:9c:5b:c0:ce:
         55:09:1e:44:65:3f:3a:7e:48:25:54:58:75:fe:bc:38:3f:96:
         27:08:e2:00:db:71:f0:de:af:f5:95:d9:55:dd:05:ae:3c:79:
         49:74:0a:00:5e:db:76:61:28:da:c3:a7:ca:a7:07:76:87:32:
         5c:b4:23:c5:97:88:a3:ac:3b:7a:6b:1a:5a:a4:42:0f:53:91:
         36:0c:44:92:7c:76:c4:7e:52:97:d6:45:e1:df:af:f2:f3:98:
         49:b5:1b:86:17:17:9b:e0:c4:90:b4:d3:4d:65:31:85:28:2d:
         ab:96:20:19:a3:85:d1:0e:c8:52:02:fd:87:34:29:85:9a:71:
         e6:52:09:3b:76:23:6c:36:e0:59:ad:28:42:39:43:84:44:88:
         b8:08:e3:1f:d2:5f:7f:e6:1b:84:08:ff:7b:f1:e3:d1:e0:08:
         49:48:fc:b9:9f:93:ae:40:1d:f6:0c:68:b5:e2:6f:dd:71:74:
         72:87:7b:c1:99:d2:34:fb:cf:d8:eb:59:f6:ca:38:a3:e1:5e:
         5e:06:f7:6c:d0:28:9d:9a:5d:ec:f1:09:4b:e3:a8:9e:79:ad:
         a8:6a:71:96:cc:45:14:a1:ca:d8:d6:97:c8:41:5f:6a:f8:2c:
         84:00:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:21:59 2026 by rpki-client