Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/0a5ac5c5-4de5-335e-8d64-558f8e87e452.roa
File:                     0a5ac5c5-4de5-335e-8d64-558f8e87e452.roa (raw, json)
Hash identifier:          iGbrxggRr6ZEWoxkCqvtzVB8uSIamuEL0tqUiD75mc8=
Subject key identifier:   03:54:74:DA:9B:FE:70:24:1F:E4:03:D3:D2:24:BF:00:9B:AC:7E:C3
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584DA97AB9D50127706F23585A80
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/0a5ac5c5-4de5-335e-8d64-558f8e87e452.roa
Signing time:             Wed 29 Apr 2026 01:00:23 +0000
ROA not before:           Wed 29 Apr 2026 01:00:23 +0000
ROA not after:            Tue 28 Jul 2026 01:00:23 +0000
asID:                     395383
IP address blocks:        2604:eb80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a9:7a:b9:d5:01:27:70:6f:23:58:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Apr 29 01:00:23 2026 GMT
            Not After : Jul 28 01:00:23 2026 GMT
        Subject: CN=a09b7bf3-ef81-4aaa-ae7c-d428931defc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b9:93:68:42:42:9f:d5:7e:ae:53:99:8b:d5:
                    a0:f8:32:f7:96:3b:55:13:d8:89:f4:28:bc:e9:b4:
                    c9:de:86:8a:c4:27:5d:29:f3:1d:9c:7e:87:21:19:
                    02:7a:c2:b1:8e:42:fe:18:f1:be:2d:6e:52:e3:64:
                    ce:ae:88:eb:de:d7:2c:91:1d:ac:67:33:91:c6:2f:
                    db:0b:4d:bd:8c:05:a5:de:13:87:b9:d6:77:9c:dd:
                    5c:28:00:28:e3:57:2b:d8:74:22:4c:bd:b4:5d:f8:
                    26:d7:ef:10:4e:c6:2f:b6:e9:d0:57:60:0a:94:4e:
                    92:b8:38:3c:88:44:fd:cf:d8:3c:79:50:06:68:77:
                    6a:58:a4:8d:9c:7d:42:9d:81:5e:ea:6b:f0:c2:92:
                    f3:ea:f2:ee:bc:83:a9:1d:1e:0c:8c:a2:10:53:e3:
                    9a:22:38:4a:de:65:a6:8f:24:82:1a:03:f1:6e:b2:
                    1e:35:a9:14:1c:f5:56:c3:39:0d:0a:3d:0a:fb:d4:
                    6f:c1:e6:33:7f:7a:d5:56:6c:7c:4b:09:ab:a9:26:
                    33:23:9a:06:55:ba:37:b7:d4:13:77:84:d6:c8:b6:
                    93:7c:d2:88:35:d3:01:8a:c2:63:46:24:86:f8:ec:
                    ea:ea:e3:4b:39:94:d7:f8:d7:5b:05:1a:3f:4e:c5:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:54:74:DA:9B:FE:70:24:1F:E4:03:D3:D2:24:BF:00:9B:AC:7E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/0a5ac5c5-4de5-335e-8d64-558f8e87e452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:eb80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:98:7b:2b:2b:14:ad:ee:a0:b1:26:e2:5a:df:0a:f4:4d:92:
         7c:b8:30:4b:45:66:1b:ad:85:13:60:ca:ab:45:7d:d4:c7:f8:
         12:a9:01:00:7d:30:ee:8e:06:07:43:2f:b7:8f:ac:65:bf:60:
         47:a1:77:19:4d:40:d6:fb:b3:3c:ed:fe:e4:2f:41:e6:26:b8:
         cb:50:3a:00:5b:a3:ea:0c:1f:a9:8d:75:c0:26:03:f1:37:5d:
         cb:bf:23:c8:0f:e7:22:ca:68:20:94:c6:8c:c6:e1:05:67:59:
         5d:bd:89:72:da:59:a5:a7:ec:58:5b:70:6a:40:b6:8e:8f:e5:
         35:83:d8:1e:71:39:18:96:eb:ce:3f:5a:68:3e:72:ef:14:aa:
         dd:58:b1:83:29:77:bb:27:6a:44:cb:63:74:88:ac:d6:c6:5c:
         e3:a6:05:e9:04:cc:12:42:fe:1f:13:5d:06:d1:50:10:57:d5:
         82:88:8a:d0:0b:89:45:94:51:90:00:3b:c1:26:3a:70:4c:59:
         41:a9:3a:d4:6a:3a:db:18:81:76:38:bc:32:69:e4:94:b3:8f:
         4d:84:d2:1e:a7:25:1c:8d:62:b9:9c:2e:c9:8f:8b:8e:a2:77:
         54:90:8c:8e:94:b2:bf:3b:6e:2b:ee:ac:e8:6b:16:0c:43:5f:
         1d:ad:a2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:09:00 2026 by rpki-client