Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/c1c6c128-c410-3d3d-acc4-6e8883f42aa6.roa
File:                     c1c6c128-c410-3d3d-acc4-6e8883f42aa6.roa (raw, json)
Hash identifier:          Nc20ZMkellUKWtUOjFnroEiPF/JNMxfSNRW9DJJRVas=
Subject key identifier:   B3:C6:4B:E6:01:85:03:20:4A:47:1E:E0:65:72:87:ED:AE:EC:AC:53
Certificate issuer:       /CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047
Certificate serial:       010D0C9F4328584D1B19ED640AC5746F91FD8900
Authority key identifier: B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/c1c6c128-c410-3d3d-acc4-6e8883f42aa6.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     0
IP address blocks:        2620:12f:e0f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:ed:64:0a:c5:74:6f:91:fd:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=a58f0b30-7f0d-4e8a-b870-834f6cd4ee6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:6d:3b:1b:f1:f3:a6:78:7d:fa:5c:c4:9e:
                    b3:26:0f:f8:52:2b:51:9f:b7:4c:3d:83:a3:df:3e:
                    17:4b:2f:4e:1a:cb:e9:74:a9:3a:fa:f3:82:8c:14:
                    68:de:0e:83:7a:53:9b:2d:bb:6d:b8:e6:ee:fe:2e:
                    20:42:27:b1:78:93:b8:20:b6:00:32:ac:6b:07:29:
                    06:06:35:2f:85:48:63:66:d5:fc:c3:36:96:e5:11:
                    eb:88:d8:c0:4d:90:b7:f2:09:03:eb:3c:24:02:f1:
                    35:b9:bc:5a:d9:e4:10:87:a3:9c:70:b1:1c:e2:49:
                    4d:63:39:69:ae:94:43:29:ed:99:ad:5e:7e:5e:13:
                    6f:40:13:e4:7f:5b:27:45:2b:a2:a2:d8:0b:e9:ee:
                    11:d4:cc:9f:09:70:a5:d7:1a:27:8f:22:48:0a:b6:
                    d7:f0:71:d6:64:58:e1:84:61:1c:19:be:b4:5c:5e:
                    5f:c4:86:04:a8:6c:37:01:63:28:0c:27:e4:1c:09:
                    fc:33:99:e8:99:98:aa:a8:4f:16:ea:0b:f5:09:14:
                    7f:6c:0e:0b:04:28:4b:e7:b5:72:2f:99:eb:8e:85:
                    92:b4:41:e0:6f:a3:40:50:3f:a0:88:03:b0:63:2a:
                    da:c6:7c:e5:7d:9d:6d:56:dd:4c:83:8d:c2:9d:ed:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C6:4B:E6:01:85:03:20:4A:47:1E:E0:65:72:87:ED:AE:EC:AC:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/c1c6c128-c410-3d3d-acc4-6e8883f42aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:e0f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:a1:83:e9:8f:63:a0:a0:9e:f1:bf:59:42:f1:8a:83:41:
         2f:b6:3c:4d:f2:0d:42:6d:2e:b8:46:47:66:5c:6c:2f:2f:74:
         b9:03:61:22:6f:d6:30:0b:e8:78:3c:6a:a6:28:ac:bb:d5:21:
         d4:af:28:55:50:f4:8a:bd:cb:8e:55:c2:2d:f1:4c:b3:10:75:
         92:ae:42:9a:15:f4:24:99:62:38:09:77:46:53:c5:9c:73:62:
         d0:13:4f:15:32:12:32:2f:34:c6:eb:0d:b6:2b:04:e9:5d:b9:
         59:1b:04:bb:9f:b5:ff:94:41:82:c5:89:03:38:e0:d9:fb:f8:
         15:fc:8d:63:66:c1:d5:e9:c1:d1:65:a1:eb:79:a7:df:14:58:
         2b:77:a0:26:46:fc:02:d0:8f:1c:f8:a9:99:01:a4:bd:15:d5:
         a0:ed:fd:43:71:23:ca:7e:6f:75:00:06:75:63:10:86:f4:71:
         46:60:c5:12:df:12:77:31:d9:e8:8b:7a:77:60:1c:20:b4:0b:
         4b:29:24:14:d7:99:bc:71:38:ae:0c:ef:22:98:c1:b5:bd:6b:
         13:b4:ce:b5:00:d2:05:3a:40:d2:ca:e6:e1:ae:2c:d9:12:da:
         19:e7:86:31:bc:cb:28:bf:5d:a3:47:43:d9:b2:5c:35:c5:ad:
         9f:6f:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:13 2026 by rpki-client