Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/d4641ccb-a449-3d7b-a997-e490d56418fe.roa
File:                     d4641ccb-a449-3d7b-a997-e490d56418fe.roa (raw, json)
Hash identifier:          7b8/x1HsE8fG4+JrMtArrwcRIzv6MnzTlORFZx1j1IU=
Subject key identifier:   25:14:3F:13:E6:07:0D:C9:67:A4:EB:47:23:00:46:7A:64:18:12:CC
Certificate issuer:       /CN=74b205b0-206e-45a4-8d98-55b99a30a8f4
Certificate serial:       010D0C9F4328584D343A1D28205D7F1519002C80
Authority key identifier: F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/d4641ccb-a449-3d7b-a997-e490d56418fe.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     12155
IP address blocks:        2602:fe7d::/36 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1d:28:20:5d:7f:15:19:00:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b205b0-206e-45a4-8d98-55b99a30a8f4
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=704f4318-3809-4d3f-b585-301b68147615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4a:b3:4d:81:bb:7d:e5:23:82:90:b3:db:98:
                    09:27:68:a9:5d:b0:78:37:ad:ae:a9:e3:dd:06:3d:
                    26:8f:f4:99:95:3d:92:09:bb:23:68:a1:08:2b:44:
                    94:c1:98:0e:4d:ca:63:93:e4:07:89:82:a2:d1:d1:
                    6a:28:d0:fb:11:33:b5:e5:77:86:df:62:4e:d7:1c:
                    06:54:30:ed:02:14:ac:1a:d0:03:48:c4:af:f2:3d:
                    55:73:a5:1e:6d:6a:13:8e:7b:e4:51:43:aa:8b:9f:
                    9e:79:47:27:d4:0e:e7:03:1a:16:ed:b9:32:08:ec:
                    73:e7:7f:c7:c7:82:40:10:d6:63:96:6b:21:f1:ab:
                    c5:bb:ab:03:73:72:89:37:4b:4e:56:95:5b:43:ff:
                    f1:bf:b7:ab:2b:b9:0c:80:6a:39:a3:1a:52:df:59:
                    69:18:51:47:6e:45:a4:02:9f:e1:57:2c:ec:cb:1c:
                    8e:ec:9b:23:8f:3b:b4:33:e0:4f:70:2e:b4:03:f4:
                    63:dc:b5:85:a6:19:97:5c:dd:c3:fb:2d:c8:f8:10:
                    6e:4f:f4:ed:c1:93:6d:1c:05:c8:6c:82:4a:42:07:
                    85:ab:1f:20:64:98:58:7b:f0:00:71:10:b6:d3:a7:
                    fa:8c:3b:03:6f:48:82:3e:a5:b5:11:de:98:31:b2:
                    ff:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:14:3F:13:E6:07:0D:C9:67:A4:EB:47:23:00:46:7A:64:18:12:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/d4641ccb-a449-3d7b-a997-e490d56418fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl

            X509v3 Authority Key Identifier:
                keyid:F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe7d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0f:95:3d:ce:82:1d:4d:45:6d:49:0a:54:7d:50:86:d6:85:
         8b:ac:00:28:98:bf:0b:5d:c6:8b:92:e5:5e:c1:aa:5e:69:89:
         f6:e6:c9:05:9c:cc:25:f0:6b:23:40:0a:2a:2a:cd:a7:3c:6f:
         8c:62:35:09:d5:33:4c:80:2a:46:59:ab:5a:96:1a:29:7e:7d:
         b4:3d:76:77:ba:0d:5f:3f:a0:9c:10:c1:9b:07:4f:50:0b:2f:
         37:0b:c8:98:67:d6:fb:64:ec:21:8c:7b:cd:c9:e3:61:c8:9b:
         c5:76:9a:02:be:cb:64:31:59:f3:94:1c:27:b1:f9:e7:50:b3:
         c3:97:89:f0:1e:c1:c8:e7:f7:1c:87:2a:0b:6d:4e:3b:fc:f6:
         56:79:8c:1e:f5:1a:69:9a:80:d4:dc:6d:8c:3b:07:92:7c:55:
         69:af:3d:c9:87:aa:c2:21:48:47:97:b9:2d:1e:b5:89:b4:03:
         22:05:ad:85:88:7e:88:98:32:73:f5:7e:7d:36:93:2f:9b:a4:
         13:55:7c:27:b2:cd:ed:f7:6d:c9:79:26:ef:ad:25:75:b6:88:
         72:cf:80:29:c1:ed:40:cf:fb:6c:40:4f:ad:8d:08:e3:5e:e2:
         f6:1f:0f:14:bf:24:6c:e5:3d:28:5e:44:59:5c:7c:9b:a6:c3:
         bb:d4:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:22:19 2026 by rpki-client