Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
File:                     0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa (raw, json)
Hash identifier:          drVfbgw1eylZAxJfv/v3bUBFp6NRMYjPUmOvRwxQBEE=
Subject key identifier:   43:E3:2B:C1:98:C7:47:4E:75:10:06:D6:27:8B:3E:43:87:22:45:2A
Certificate issuer:       /CN=ab971181-47ed-4815-8f1e-60d429db1463
Certificate serial:       010D0C9F4328584D91C016F2798421230BD1A620
Authority key identifier: A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     7105
IP address blocks:        2620:2::/48 maxlen: 48
                          2620:15a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:16:f2:79:84:21:23:0b:d1:a6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab971181-47ed-4815-8f1e-60d429db1463
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=9100c56a-b49c-432e-a063-8e4d1deb9199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:66:45:ed:25:0f:50:31:90:ed:8c:b3:c3:
                    11:16:8c:87:a8:1f:95:24:f9:af:27:96:01:cc:7f:
                    02:61:52:33:23:6b:05:d2:71:a2:30:1e:a4:43:5a:
                    23:7e:2c:a3:50:4b:0e:b8:84:cf:4e:c2:de:4b:dc:
                    a1:3c:c7:5b:1b:ef:73:1e:a6:0b:b2:70:19:61:af:
                    5a:21:93:f1:0c:63:18:f5:97:22:e6:0f:51:bb:71:
                    1c:cd:f9:50:52:61:7d:87:08:b4:62:36:e5:b9:05:
                    92:17:dd:2f:46:49:e4:58:73:5d:55:d1:4c:b6:c3:
                    7b:38:4d:c9:8f:09:20:8f:bb:27:67:8b:3e:43:6b:
                    84:7a:2a:c8:a7:8b:6c:ab:1b:98:f1:b2:2f:cd:ab:
                    95:a4:8c:ec:33:20:42:97:a7:4e:ef:a5:e2:bb:26:
                    0a:90:53:ec:46:6e:27:94:3b:aa:16:7d:0b:f1:e8:
                    4c:04:72:8d:ee:53:fa:ee:31:07:e0:e1:f1:3f:6a:
                    e3:64:b8:f3:87:8a:eb:b5:4f:aa:6e:7e:11:5a:0e:
                    02:5b:21:a1:c0:5d:2a:2e:49:b4:4c:ef:de:9b:f8:
                    a5:15:80:78:0f:09:b1:ed:18:a1:58:8e:ff:37:38:
                    82:7e:f6:63:66:bb:ac:90:73:bb:7f:19:54:1d:18:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E3:2B:C1:98:C7:47:4E:75:10:06:D6:27:8B:3E:43:87:22:45:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl

            X509v3 Authority Key Identifier:
                keyid:A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2::/48
                  2620:15a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fa:b7:db:bb:d5:9c:fb:1d:7d:26:37:7c:5b:b5:62:a8:27:
         31:55:68:4c:02:a2:45:24:56:74:1e:f4:03:1f:6b:84:28:15:
         3b:3b:de:95:0d:7a:e4:96:1f:a7:60:b1:15:b1:62:af:ec:ad:
         51:1b:b3:e7:28:8a:97:5e:8c:97:17:b4:ac:c7:90:a2:83:d7:
         16:cd:44:21:f7:2d:32:2a:6c:a8:8a:d6:f6:ec:ad:70:98:13:
         d6:9b:05:d7:14:bd:da:7e:d4:ec:3c:35:40:ee:2a:00:51:e0:
         eb:95:00:b2:5b:18:8f:ff:54:0a:10:46:d5:61:4b:de:c0:eb:
         f8:6a:bb:ae:0c:d5:16:f8:5d:4f:76:3a:e6:ca:b8:80:1f:28:
         a1:65:14:3d:d1:16:9c:fa:d0:05:b2:8e:30:1d:f8:f3:9b:31:
         1f:38:ef:ed:0b:63:58:7b:1a:7d:21:aa:2e:66:d9:7f:21:11:
         01:41:ac:93:d4:00:7b:33:fe:bc:fe:bf:2a:ec:4c:68:6a:9a:
         3f:28:d7:6d:2b:fd:e8:47:9a:04:4c:fb:b4:44:3f:a7:f4:2c:
         48:e0:c6:fe:d4:50:90:1b:1a:19:64:ac:9d:1b:dc:d8:fd:77:
         bc:4c:27:99:53:de:d6:d7:c9:9e:a2:6a:60:ca:e6:04:60:0a:
         28:23:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:17:34 2026 by rpki-client