Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/a1830fbd-80fd-365e-833e-215463a0658b.roa
File:                     a1830fbd-80fd-365e-833e-215463a0658b.roa (raw, json)
Hash identifier:          dTyhnrg7gN98ocqK3qqKysGSweKpKuvGTclpv598QwA=
Subject key identifier:   3C:4A:0D:7A:5F:AF:00:AD:72:8B:E6:50:07:8A:E7:F9:96:B8:5D:D0
Certificate issuer:       /CN=d7c75743-409b-41fb-b744-8345baaf599b
Certificate serial:       010D0C9F4328584D3DFFB31F7691078B02A13180
Authority key identifier: 62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/a1830fbd-80fd-365e-833e-215463a0658b.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     20373
IP address blocks:        2602:f939:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:b3:1f:76:91:07:8b:02:a1:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c75743-409b-41fb-b744-8345baaf599b
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=e5058de0-f33c-4dec-8c35-4559572a5792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:5e:93:f6:29:e2:ea:65:0f:64:39:bf:bf:
                    9d:b0:7e:12:70:24:54:76:bc:4f:74:57:7d:0b:e1:
                    e1:1e:8a:c3:c7:5e:68:dd:08:84:d5:00:25:6e:41:
                    06:58:bb:df:78:26:c9:25:32:f8:d3:1a:22:34:e5:
                    40:a2:68:12:9b:bf:1d:81:0a:ec:37:8e:a1:d0:7c:
                    42:a6:23:af:f9:61:2c:ef:a0:ae:82:db:1f:f1:2c:
                    4c:71:c5:16:f5:2a:65:18:42:df:32:07:ff:2f:31:
                    ef:b8:6f:7b:48:f8:c6:94:57:a6:18:e2:d5:d9:2f:
                    47:24:95:e1:ea:9a:ce:61:ea:f1:63:c1:10:f6:0d:
                    e4:79:8d:d7:6e:12:19:5e:73:ad:27:9b:b1:49:f8:
                    cc:84:55:56:d5:ac:02:8d:a7:55:76:8a:34:ed:f0:
                    d0:f4:01:30:2f:76:6a:6c:f7:1a:cc:9f:56:d4:98:
                    91:91:34:a4:13:fe:c1:a9:60:00:23:df:0d:9f:13:
                    3c:5a:9b:7a:6b:84:71:d8:dc:06:fd:35:15:87:02:
                    51:90:0f:d7:60:fc:10:33:66:4e:c3:dd:08:65:f5:
                    33:2b:00:32:ba:64:d6:90:ac:f5:1c:61:04:f3:16:
                    6b:a5:4d:07:ff:3c:f2:53:97:68:d2:d0:1f:7a:3c:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4A:0D:7A:5F:AF:00:AD:72:8B:E6:50:07:8A:E7:F9:96:B8:5D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/a1830fbd-80fd-365e-833e-215463a0658b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl

            X509v3 Authority Key Identifier:
                keyid:62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f939:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:fb:d7:c1:19:72:c9:91:cd:05:53:fe:00:7f:ad:3f:41:90:
         e2:f9:2d:11:90:fe:d4:39:f5:fd:0c:1b:fd:c6:d8:75:82:8f:
         12:91:0a:fb:cb:43:99:2c:e8:68:4d:2a:8c:fb:33:1d:49:01:
         2d:d5:6f:78:5d:0a:12:41:48:c3:34:48:be:ff:d4:8d:be:41:
         e4:ad:62:04:ec:36:31:42:5f:3d:65:5b:a7:b3:e8:ca:72:41:
         68:a8:eb:3d:43:1d:74:d4:a5:10:e7:9b:68:ff:94:b8:8b:e0:
         5a:19:2b:59:2f:b5:eb:4a:b0:ce:9c:8b:01:53:9d:35:4c:c4:
         f1:9e:28:dc:e0:3c:73:d3:88:56:c9:63:28:9e:46:c5:c7:68:
         08:42:01:9d:fb:d1:f2:cc:58:d7:cc:10:90:bb:ef:89:cb:ca:
         21:fd:f8:d0:47:3c:34:15:17:9b:b9:2a:72:b2:5f:f6:9b:43:
         41:45:92:2b:e9:d3:9a:ee:2f:ca:3e:78:e3:fc:17:a7:4f:91:
         43:59:b1:1e:13:29:1e:e7:fe:bb:d2:78:71:ee:3e:5c:d3:16:
         c6:c1:8c:34:e5:50:ac:a0:4f:32:53:61:d0:bd:2a:69:64:20:
         9a:bf:a6:fc:a1:61:5d:24:b9:e1:43:33:99:06:d8:b8:0a:91:
         71:51:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:34:06 2026 by rpki-client