Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
File:                     7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa (raw, json)
Hash identifier:          HJd5actqa+y6upY3pWBnecZZDz/7Wj9UVthDz2Y3PpY=
Subject key identifier:   2A:85:1D:56:61:72:0C:78:CB:05:A5:2B:40:20:DC:F2:7F:1E:7B:31
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584EE0C20047C0B8ABFED7A94480
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     397894
IP address blocks:        2607:f4a8:200d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:00:47:c0:b8:ab:fe:d7:a9:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=ba749646-867f-48d4-8aca-dd46e051efd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:7d:67:a7:2c:b3:61:65:52:e1:01:63:23:
                    2f:27:2e:4f:90:6a:48:fc:5a:d9:23:30:db:a4:bf:
                    1c:cb:8e:18:11:36:15:43:c1:d9:15:51:b8:44:93:
                    35:84:19:e4:fe:6a:de:94:af:5b:71:fd:52:00:7f:
                    a2:ab:21:6c:44:0c:85:c4:fa:9b:e3:0c:6f:b4:5f:
                    d8:0a:a9:ee:bf:41:59:7d:46:b8:55:a3:34:9c:f8:
                    93:dd:1e:0c:cd:86:65:c4:d3:4b:13:60:cb:0d:a0:
                    69:f2:41:f3:b6:a8:6d:92:c2:7e:3e:50:3b:b5:48:
                    2a:d9:47:59:e0:29:f3:2c:a6:7e:22:48:69:63:f1:
                    3a:08:f6:66:3b:73:64:09:24:5e:ec:1d:e2:14:c0:
                    70:16:9b:5f:ae:be:80:86:be:8e:80:2b:3c:65:51:
                    e7:9b:ac:b0:f8:3a:e0:43:7b:22:a1:3c:07:ac:56:
                    75:56:08:69:0e:34:3d:ee:80:f8:63:f6:2e:3e:3d:
                    76:3f:fb:2b:fb:c0:27:a9:39:4e:8b:ce:63:1d:67:
                    f8:8a:c3:c7:b6:94:a7:08:26:81:71:3e:37:b4:1f:
                    ee:0b:70:0e:a2:2a:e7:f7:d4:af:cd:7c:73:d3:41:
                    1b:99:62:82:51:d1:03:bf:db:94:5a:62:13:97:59:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:85:1D:56:61:72:0C:78:CB:05:A5:2B:40:20:DC:F2:7F:1E:7B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4a8:200d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:25:f0:0e:b9:f9:c1:9f:11:a5:d3:9a:47:27:9a:d9:f7:ef:
         17:51:5b:ff:89:f0:0c:c2:88:b5:69:48:4e:cf:fa:e5:54:7f:
         4f:c2:34:f6:95:11:9f:ad:f6:c8:21:91:38:9a:28:ec:5a:c3:
         eb:04:66:3b:4f:08:1d:e2:4c:2a:9a:53:1e:16:c6:88:03:2c:
         55:19:13:49:eb:4f:1f:1b:d4:45:89:be:d8:a9:9e:4a:e3:a2:
         d8:85:6b:81:01:ae:f9:b8:f1:f0:94:e3:4c:4b:8c:d9:af:b8:
         ad:77:cd:bc:5a:60:20:3e:3c:2f:a8:67:0b:66:0d:73:ba:d0:
         e6:9e:13:68:3f:d7:92:b2:e3:ce:9d:ff:83:50:d8:12:39:f4:
         73:0c:c0:ea:34:3d:b9:5d:f6:b5:0d:45:a2:f5:8d:32:81:cc:
         bb:7d:12:c4:69:a3:42:45:87:79:34:7e:6c:42:7e:fd:eb:80:
         72:f4:57:4a:d2:ca:d7:e9:85:a2:55:1d:0d:25:d0:8d:b2:37:
         23:f4:4b:a0:02:b4:8e:4a:3f:ef:13:59:3a:f6:9c:f1:79:8d:
         f1:11:e2:0b:e1:61:ff:9c:45:ab:a1:fe:ec:df:b7:e3:e5:8e:
         a5:13:ad:10:3c:35:32:f5:aa:59:f5:e1:b6:e5:d9:df:f3:f0:
         43:0e:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:39:27 2026 by rpki-client