Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa
File:                     5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa (raw, json)
Hash identifier:          hkd2nlGqL49nuuteu1AMTf72qku50qgI7FXUejOb4JI=
Subject key identifier:   FC:14:AC:13:44:EF:F2:F9:15:1D:23:00:5D:27:E2:00:A5:1B:06:F2
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584D47C4D84E752D3F7861E4EA00
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2603:5000:2040::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:d8:4e:75:2d:3f:78:61:e4:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=5df92850-1b31-4d91-b7d9-558c9f087a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0d:99:8d:64:81:23:42:45:72:62:24:d3:75:
                    42:ca:70:3c:fa:3d:f0:cb:fb:fc:00:7e:6d:12:75:
                    d4:9c:dd:af:b9:47:ef:5b:d5:cf:ea:f8:d3:2f:f6:
                    d8:62:1d:94:a1:25:6f:f0:40:75:7c:c4:09:ec:02:
                    30:f3:1b:26:82:ba:13:0a:49:be:f9:f7:86:68:e7:
                    ea:03:0d:8c:50:ba:89:4f:46:b5:34:c0:a9:c4:cc:
                    2f:53:90:1c:ab:7b:f8:c5:a6:c6:dd:0d:d9:03:e4:
                    9a:63:c3:9a:be:db:b5:17:8d:52:d7:43:0e:c1:92:
                    57:25:bc:88:da:3e:a2:17:e7:b8:de:68:2e:97:fe:
                    73:b4:77:6d:4e:21:73:29:a4:72:d5:ce:7e:e4:e5:
                    36:24:47:74:67:ac:74:fd:9d:c7:6e:ae:54:37:36:
                    18:30:e7:d9:68:97:fa:fe:9c:77:68:f7:1d:f7:df:
                    02:49:d1:8c:0c:a3:4e:eb:53:c3:15:65:65:4f:e2:
                    29:73:b8:a7:21:0b:31:7f:3c:dc:48:e1:a4:e9:13:
                    a9:55:16:b3:53:73:e4:85:4c:b2:d7:c0:65:a4:e1:
                    d3:8c:3d:ce:70:c4:c8:7b:c7:4d:4c:dd:26:1f:d2:
                    e5:b2:60:83:ed:b7:c7:c0:97:96:97:e3:08:a1:a1:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:AC:13:44:EF:F2:F9:15:1D:23:00:5D:27:E2:00:A5:1B:06:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5000:2040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:80:94:4a:1d:14:46:4b:37:76:2d:e1:56:5a:65:d9:ca:
         49:3a:a3:9b:06:0b:5f:fe:2b:57:66:1b:b7:7b:77:c3:3a:7f:
         54:6a:d9:98:42:6c:b2:8f:0f:03:26:9f:c9:e9:2e:34:3b:fd:
         20:62:1c:47:61:9a:c9:15:a4:da:25:88:58:c6:50:83:f0:32:
         31:b3:50:bd:1c:1e:12:22:66:d8:e9:91:80:ee:26:b7:0c:bf:
         70:d2:4b:c8:01:be:30:81:53:b4:29:94:08:b9:b9:ed:5a:a4:
         e2:0e:e8:cf:4d:9f:91:3f:d5:46:f6:36:87:2b:51:15:a9:83:
         a2:1c:77:ae:41:a3:70:bb:83:fd:30:1e:92:5b:64:4b:bf:42:
         18:44:7f:85:59:47:bc:99:2a:37:d8:c7:20:cd:87:31:1d:d7:
         07:1b:d1:7e:a1:2e:89:84:af:c0:d7:d0:48:20:a8:be:d4:c1:
         1e:27:f4:a6:dd:38:ce:81:65:d0:a1:48:6b:09:73:44:6d:6e:
         1f:d9:ae:33:55:e5:bf:d8:d5:fd:b8:f0:86:a5:69:1e:0a:0e:
         8c:11:c6:6a:70:76:e0:0e:9a:3f:c0:1a:a5:07:82:d1:13:63:
         4c:f5:09:92:9b:97:e9:ed:1b:ad:c0:24:67:85:54:a6:f9:7d:
         5c:82:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:48 2026 by rpki-client