Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa
File:                     3feeeaca-68cc-366d-8054-94f196ab0dc2.roa (raw, json)
Hash identifier:          16iYYT9Bfwqoa8iHK+ahk2cEgKizsy3erDJE/4bfz/U=
Subject key identifier:   23:8C:B6:06:38:4E:2F:D7:7A:A9:4F:78:6A:77:7D:C0:4D:BE:5F:B5
Certificate issuer:       /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
Certificate serial:       010D0C9F4328584D3E001E18C845D44F411F6E00
Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     29888
IP address blocks:        2620:109:3000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:1e:18:c8:45:d4:4f:41:1f:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=6cdde730-3326-4f82-95d3-b8bead4ea71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:68:90:dd:42:d8:c9:03:dc:a6:57:45:ec:
                    e3:da:4d:8e:32:51:53:71:f9:4f:c5:f7:16:ee:2b:
                    70:a6:8c:6b:a4:ed:97:20:68:db:d1:e5:d2:73:3b:
                    50:ff:e1:6d:9b:7c:e7:44:35:64:7e:37:bb:40:6b:
                    51:0c:8a:2e:13:3b:7c:fa:af:d6:03:15:ea:59:dc:
                    26:94:36:cb:5e:a5:9d:8f:08:04:82:c3:fa:c9:ae:
                    8a:af:56:ba:9d:6f:1f:6c:17:69:9c:bc:7d:38:b5:
                    78:28:5e:42:7d:b7:df:f2:7b:76:11:8f:8d:bf:29:
                    41:39:ff:54:29:ec:a8:b1:11:6f:d3:26:62:bf:6b:
                    d4:c1:c0:56:3b:5c:33:04:4f:1b:c0:c0:31:75:09:
                    50:e2:20:f8:7d:0a:e2:bf:a3:c6:68:16:b8:59:ca:
                    51:cd:4b:3e:00:8d:05:08:52:c9:32:04:2b:6c:20:
                    8a:dc:2f:5a:68:cb:4c:6c:dd:da:0c:5c:8b:8c:62:
                    89:4b:aa:58:4a:d9:2f:c4:61:22:3d:d2:8c:db:29:
                    5b:60:82:f3:61:90:a6:5b:ee:38:16:d0:6a:91:ff:
                    1d:42:70:b3:87:1a:28:0b:cc:41:6d:55:ce:77:0a:
                    c4:35:dd:e2:02:da:59:07:3e:fb:39:ee:02:35:bc:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8C:B6:06:38:4E:2F:D7:7A:A9:4F:78:6A:77:7D:C0:4D:BE:5F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl

            X509v3 Authority Key Identifier:
                keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8b:22:fb:34:1b:fb:27:bb:2e:94:83:9a:d5:84:fe:cc:9e:
         de:a3:50:ad:4f:7f:e9:d2:96:eb:62:98:7e:91:3c:81:3e:f5:
         5b:61:6a:13:2c:a2:19:04:9b:fa:b2:15:c7:bc:f5:81:6e:18:
         31:15:52:fa:19:66:fb:41:b3:f7:40:d5:3b:f3:02:80:28:d0:
         7e:0b:97:f3:5c:a3:d4:c1:8e:c3:4f:7a:4d:7e:ec:65:cd:1b:
         ab:94:2b:cd:fa:4f:1b:fc:cc:68:ea:27:45:fc:72:ea:b3:20:
         5e:14:71:f7:a0:f7:ce:0f:57:cc:a8:62:b5:e0:e2:27:a3:7a:
         b6:31:d9:45:4d:89:da:ea:d1:8a:44:25:65:42:87:7c:6e:9d:
         d2:cc:1a:4b:41:b2:07:06:a9:3d:de:10:32:a9:e0:ce:36:8a:
         b2:36:90:88:01:1a:1b:9f:50:94:b6:8c:f5:f2:3d:ab:51:02:
         62:8c:e1:37:66:44:8b:50:29:02:67:6e:ad:fb:af:33:42:a3:
         3d:cb:3b:86:e6:04:87:b3:a8:e8:e5:83:85:f3:80:15:be:d1:
         13:7e:29:b4:d1:93:80:63:12:e9:6f:74:15:0e:22:d7:8d:35:
         9e:78:73:44:d3:d5:78:68:f7:5c:c4:6d:f0:12:57:f2:91:e5:
         c5:5c:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:12 2026 by rpki-client