Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa
File:                     dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa (raw, json)
Hash identifier:          NIp0F3RfieLEhsJAkGybYRjqAg/szEc5G8Q33GyWjqg=
Subject key identifier:   88:F3:10:3A:BF:88:7C:26:12:A6:9D:FC:F3:31:03:BD:41:E2:45:1F
Certificate issuer:       /CN=2aa2eb71-3102-4859-928f-a833f2c63713
Certificate serial:       010D0C9F4328584D2644B779B4DD4E1DC758CF80
Authority key identifier: AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     6373
IP address blocks:        2607:7c80:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b7:79:b4:dd:4e:1d:c7:58:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa2eb71-3102-4859-928f-a833f2c63713
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=d7735992-6595-43f3-a42e-8f0d1294f39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:3f:e2:1c:95:85:41:c8:5b:6d:4e:5e:ce:
                    e6:e5:30:42:bd:00:3e:ac:e1:1c:12:17:fc:c2:8f:
                    7e:50:a9:4d:8f:d0:a7:00:4e:bd:ec:d8:c4:18:fd:
                    3f:da:2a:97:da:64:69:72:6b:0b:1b:68:61:1f:ce:
                    63:39:7a:fd:da:82:bc:b4:7c:14:7b:37:ae:d3:f8:
                    88:db:57:2f:83:3f:e2:bd:be:cb:b9:22:b1:6b:39:
                    27:f7:09:ad:d9:d4:65:ef:1f:61:77:45:9a:1e:8c:
                    6b:55:75:0c:ae:d9:bc:84:45:dc:8f:db:65:e8:38:
                    cf:a2:7a:ef:c4:d8:b6:91:ba:e2:60:38:a8:cc:53:
                    10:a0:96:7b:cf:7e:29:a2:a5:80:87:55:6e:4e:e8:
                    74:ec:a8:d9:39:04:6c:13:f5:ce:0a:66:fa:30:68:
                    8b:53:18:9d:8b:6e:22:2b:07:3f:1c:27:33:08:0c:
                    13:4c:ac:2f:b9:8e:b8:68:96:81:0c:bd:d7:c7:f3:
                    0a:b0:27:c5:16:a0:ad:14:e2:3e:a9:96:28:94:db:
                    f7:a0:7e:8e:ff:30:6d:a6:6f:eb:5b:e1:38:13:54:
                    35:fe:f1:dd:90:c1:0b:d9:1b:71:9d:d0:fa:8e:54:
                    eb:6e:3f:f1:cd:8f:c7:61:86:9c:89:51:b3:6b:58:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F3:10:3A:BF:88:7C:26:12:A6:9D:FC:F3:31:03:BD:41:E2:45:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7c80:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a9:3a:94:42:5c:61:12:1d:99:4e:33:2a:ad:f3:08:d6:47:
         ee:ed:be:9a:25:5c:bc:9e:1a:3a:4c:65:4a:36:ff:44:0c:8f:
         e8:90:99:39:0c:b1:e7:55:bf:24:ee:74:c2:36:53:36:67:c3:
         83:ec:05:95:47:3e:ef:c5:fd:23:dc:a3:b5:61:b3:7f:88:b1:
         dd:62:90:75:da:27:ed:36:c9:56:c4:75:8a:1d:a1:06:b3:96:
         89:fc:fa:b2:24:a6:ab:e1:68:e8:49:53:eb:ee:a5:15:01:f8:
         34:0a:20:34:88:6e:a9:c0:67:89:9e:6b:bf:b7:24:05:0f:12:
         29:c6:2d:a3:f2:1d:95:c9:58:f2:90:85:94:5c:31:19:35:43:
         53:59:7c:05:60:20:19:db:7e:ae:3f:75:60:c1:3f:22:2c:dc:
         2e:e4:de:38:a5:6d:50:ce:7d:a1:a0:22:60:df:20:17:90:55:
         8b:8d:8f:be:3b:ec:8b:e8:f9:ea:5f:c3:00:18:29:5a:84:21:
         cf:b3:05:bf:07:72:a3:3c:a0:1b:5b:df:c8:fe:14:74:5b:c7:
         30:eb:5b:d7:2a:69:1a:6b:ef:92:ec:87:c7:57:90:48:24:26:
         01:2d:7f:f2:6a:ea:27:a1:54:fe:75:9d:d1:d8:13:40:37:71:
         55:c6:0d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:50 2026 by rpki-client