Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa
File:                     d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa (raw, json)
Hash identifier:          XuBWYdpM7d3yodZXlIvzQruNNg1mFC3NI2Uf56PveRE=
Subject key identifier:   F2:B8:F0:9B:6E:1D:A0:32:28:DC:64:4C:40:08:E2:CB:7F:6D:A3:FC
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584D143D7E60586F319C1D933400
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     4213
IP address blocks:        2607:dc80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:7e:60:58:6f:31:9c:1d:93:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=dd2b59e7-4a40-4fdb-abe2-d2abb494224a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:fc:f7:3b:ea:f2:61:84:99:d3:55:cc:44:
                    9a:7e:9c:be:6c:e1:b7:79:ad:83:47:28:49:8f:e6:
                    37:b8:4b:1d:2a:46:67:7f:4e:0c:e2:13:7c:82:f1:
                    db:60:61:3c:9e:cb:ce:0f:e1:67:27:e6:c2:cd:72:
                    42:c3:57:02:02:08:be:76:af:32:44:a5:4d:2e:49:
                    65:c5:df:4b:46:65:d0:6f:01:53:c7:26:4c:67:a3:
                    43:ac:be:64:ea:74:97:95:99:01:5f:9c:1b:6c:42:
                    3b:80:6b:42:ea:cb:93:91:ed:e4:23:5a:3a:f6:b7:
                    ee:1f:2c:93:c7:55:e0:93:e9:71:af:fe:ed:a6:c6:
                    d7:83:b1:94:bf:cf:34:85:26:ad:b6:26:30:e4:13:
                    0f:cc:ee:0b:36:4d:4e:bc:6c:34:90:54:4d:ca:cf:
                    f9:ba:de:05:85:4b:d5:35:62:22:2b:fb:b2:02:ee:
                    20:46:87:52:14:e4:12:38:49:cb:92:8c:8e:da:0a:
                    66:84:2e:da:fc:bc:76:13:33:13:94:0e:ce:34:40:
                    cd:35:a3:fe:83:ad:71:8f:4f:cd:5a:75:62:4d:28:
                    78:61:78:9a:eb:72:6c:c1:0d:b5:f8:fa:71:84:bc:
                    5c:43:45:dc:c5:a6:4d:9e:92:96:b8:0e:19:5e:d0:
                    bb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B8:F0:9B:6E:1D:A0:32:28:DC:64:4C:40:08:E2:CB:7F:6D:A3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dc80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5a:96:01:28:5f:3f:dc:51:ca:3f:48:cf:47:88:ff:00:8c:
         f8:33:3a:2a:45:dd:b9:fd:1f:46:4c:c0:8f:77:27:e4:ca:32:
         78:3f:f7:fb:1d:24:c9:df:ad:5e:65:36:39:84:35:8a:71:02:
         2d:94:e5:5e:b5:23:57:9e:ad:66:c2:54:a7:41:0b:5f:11:86:
         30:fa:cd:22:73:8c:ff:35:fc:81:ce:07:59:61:5a:de:24:d3:
         3f:fe:fc:bc:d8:22:8e:c9:10:f2:68:50:2b:33:0f:f6:ea:6c:
         91:7b:72:cc:f1:88:fb:b7:6f:cd:ac:1c:57:f0:f5:bc:19:57:
         3b:1b:f4:6b:06:9f:88:97:3d:a5:c3:58:92:82:91:d4:9e:44:
         9a:ac:1f:0c:0d:8b:c7:4d:ee:31:54:e0:a2:c1:e5:2b:00:a3:
         93:2d:0d:fc:11:d7:3f:9c:ba:24:fa:92:79:25:df:ab:b8:ad:
         b6:5c:9b:0f:b2:7c:d9:87:46:7c:1d:d0:03:22:db:ca:e8:07:
         32:43:66:a7:db:fe:5f:16:cc:7a:4b:75:4c:69:2a:43:92:75:
         e2:2f:d4:7e:ce:59:7d:62:1e:78:dc:5e:94:87:3b:39:0b:c6:
         15:83:33:da:55:f9:8f:72:31:b2:04:9e:79:21:0f:d3:ea:84:
         d1:5c:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:45 2026 by rpki-client