Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/045c24b8-a486-3aa2-95ef-291079741bda.roa
File:                     045c24b8-a486-3aa2-95ef-291079741bda.roa (raw, json)
Hash identifier:          k2VoJWZ6TmQYUKDrI4WsGDJXGBxzX1/Q7evYOlTB3rQ=
Subject key identifier:   D3:61:EA:E8:4C:26:A3:FD:C8:7D:A2:B5:3E:3E:3E:00:77:CF:C0:5F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC8FA7B5BED6D4BC81E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/045c24b8-a486-3aa2-95ef-291079741bda.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c8:fa:7b:5b:ed:6d:4b:c8:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=709a5ba5-c8f8-4031-a5cd-c30de3683925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:23:5a:8d:81:7f:dc:e5:3b:ab:1e:f0:60:
                    cf:91:2b:0b:ba:99:f9:06:1b:d2:d5:ff:69:2a:2f:
                    6d:94:05:a4:34:a3:8a:40:7b:75:81:14:13:f3:d2:
                    03:4a:62:82:18:dc:2a:3f:f5:03:9d:5d:de:12:d7:
                    83:5a:ac:85:b2:a5:d8:69:98:6e:a4:95:22:66:06:
                    53:6a:5b:bb:d6:ef:19:2c:21:a8:c4:e6:46:90:d9:
                    3f:00:a1:cf:4f:57:84:81:c5:ef:53:b3:c0:48:cd:
                    e6:9f:c9:1f:fe:99:af:fe:db:19:05:26:c0:6b:99:
                    e0:84:c3:6d:e7:dc:de:f0:66:37:29:78:12:d6:5f:
                    9b:73:51:d6:a5:e1:9c:e6:51:c0:ec:46:ff:21:d2:
                    27:6b:9d:3b:14:42:23:55:4c:0d:ae:fb:c6:d5:f6:
                    b1:28:33:b1:8b:74:79:9a:51:54:c1:e4:6b:83:58:
                    d2:e6:e5:ac:74:11:2d:78:42:27:97:d3:25:19:d2:
                    76:f7:f4:16:10:03:f4:3c:cb:7d:54:3f:cc:3c:06:
                    87:78:a4:c1:7c:94:e0:fe:bb:4b:42:ea:65:c3:c2:
                    83:56:95:29:a9:81:98:77:ad:62:6a:ee:5d:38:62:
                    71:4f:bd:cb:4b:8e:89:d6:b1:eb:dc:5c:99:dc:67:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:61:EA:E8:4C:26:A3:FD:C8:7D:A2:B5:3E:3E:3E:00:77:CF:C0:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/045c24b8-a486-3aa2-95ef-291079741bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:9d:f2:15:aa:aa:e8:08:e2:b2:44:12:a9:a0:4c:4b:3a:43:
         08:53:a4:89:34:18:8f:d8:33:86:3c:a4:5a:cf:9d:ed:d9:94:
         90:64:2c:78:6e:b4:55:3c:e7:d9:96:9c:64:2c:4f:d3:c3:35:
         9a:51:70:80:3b:38:47:86:0c:98:f6:0d:86:9f:eb:f4:70:76:
         34:6b:39:3d:83:d5:ec:c0:a8:40:80:16:54:d1:27:c5:dd:60:
         fd:cb:45:91:f6:56:4e:d7:ca:32:a2:93:26:1e:df:0a:62:41:
         77:9d:39:03:da:1f:a2:2a:c9:43:1b:b2:ae:f3:aa:03:0a:4f:
         c5:69:97:35:cb:ed:ba:52:05:d8:76:cb:b7:dd:a0:d7:41:b5:
         8a:2a:8e:47:40:21:40:b0:d9:21:9a:6d:d5:00:9f:6c:55:af:
         a3:28:1f:35:c7:0f:65:3a:f7:b9:96:f4:74:80:c3:6b:98:62:
         18:76:9e:e9:55:7f:51:9a:80:46:1c:af:64:51:b0:60:89:68:
         a5:0d:f3:11:b8:f3:f9:37:1b:b3:47:39:34:72:51:b8:66:b2:
         4e:49:92:e2:99:34:1a:41:4d:00:bd:d5:cc:57:6e:fc:8f:04:
         dd:c8:07:92:8e:76:1e:47:00:88:85:19:30:5a:a5:b0:be:18:
         30:26:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:40 2026 by rpki-client