Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1bd986f4-1034-3893-b581-d633dd7492f8.roa
File:                     1bd986f4-1034-3893-b581-d633dd7492f8.roa (raw, json)
Hash identifier:          OpvckIEBt1cAKXT0KTtwLYk6QZQvFwhW2MPnz5G/aC4=
Subject key identifier:   84:4F:0E:33:AC:3B:36:03:71:77:9F:37:08:83:F3:C8:AE:43:32:32
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC22BA3E4B418A6B6A600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1bd986f4-1034-3893-b581-d633dd7492f8.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c2:2b:a3:e4:b4:18:a6:b6:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=6d264725-3e22-4235-a79c-90d83dfbdcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:eb:8f:23:0a:72:6d:8f:df:2e:cc:69:44:
                    62:74:48:ea:a2:e9:bc:3e:d9:15:49:a7:a7:6f:3b:
                    1e:39:85:1f:7c:f6:71:1d:64:53:f6:57:13:58:56:
                    12:3c:06:12:d9:57:50:bb:e2:d5:2b:76:fa:da:01:
                    52:69:0c:6e:5f:51:ab:d8:a9:a8:7c:d8:b5:b2:c8:
                    9b:1a:3d:be:c4:3a:94:d4:25:d0:0e:50:8a:90:b5:
                    6e:8b:b8:83:ff:a0:81:10:3e:ea:7f:47:e6:0d:27:
                    ed:aa:11:e7:27:ee:1e:98:8a:a3:11:da:0a:51:ad:
                    f0:51:ab:03:ec:94:11:2b:5f:60:cf:9c:54:a8:3c:
                    83:53:5d:f5:04:5a:de:89:3c:3b:25:13:fb:db:cf:
                    e1:2f:7d:70:60:02:74:25:3d:88:a2:ed:e8:cc:3b:
                    8e:b2:b8:a3:f3:aa:f7:41:b5:09:9c:12:55:6d:e3:
                    f9:92:d6:a5:83:81:7a:93:11:f3:ce:05:cf:fb:61:
                    6e:fd:8a:a5:f9:75:f5:2a:44:be:ee:68:9c:63:0a:
                    1c:e8:76:dc:e2:26:55:e8:17:f3:69:d1:1e:40:c3:
                    b6:3b:34:be:ac:72:74:fb:e3:ed:06:2b:e8:46:f9:
                    27:4f:dd:11:3d:23:68:83:97:d7:42:01:a2:1b:75:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4F:0E:33:AC:3B:36:03:71:77:9F:37:08:83:F3:C8:AE:43:32:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1bd986f4-1034-3893-b581-d633dd7492f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c2:e3:98:56:b6:86:a0:b6:df:1a:be:fd:4f:95:16:00:45:
         bd:6f:80:01:ea:ed:d0:7d:d5:f5:01:25:8e:b2:71:ab:df:14:
         71:02:06:33:dd:b5:6d:de:e4:1c:44:b5:1f:16:26:7c:4c:3d:
         2c:61:9d:49:0a:3d:18:b1:6f:55:4a:e9:13:59:68:67:c2:74:
         dc:b0:ca:59:8a:cf:b5:05:51:d2:ae:7e:a8:c4:de:f6:39:05:
         46:7d:ea:31:2e:e9:b9:24:ec:4b:13:ca:01:3d:8a:88:b2:8e:
         fa:ef:4b:17:cb:0c:24:15:a7:7a:5a:91:e8:e2:f1:c3:5e:af:
         03:35:66:30:2b:f0:fc:fd:78:e1:62:de:23:e2:27:96:47:ac:
         f8:e6:38:55:d4:3d:6a:ed:c2:f1:ca:99:75:fc:16:39:c4:76:
         e7:6a:64:87:51:a5:14:03:fd:61:df:cc:26:5d:60:b3:4f:4e:
         3d:7f:f1:99:94:b9:35:83:9e:e8:0a:62:be:22:c3:d8:94:3e:
         79:71:d8:45:59:27:25:d9:14:81:7b:15:3e:2c:fa:29:3f:71:
         9f:84:bd:bb:ee:2f:d3:b5:28:a7:2d:c6:29:04:1f:7a:1b:f1:
         8a:7c:ab:e7:2a:d6:dc:2a:82:eb:69:cc:dd:19:14:f9:17:49:
         4f:58:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:17 2026 by rpki-client