Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3548e499-9a23-33f4-995b-98b6e7101361.roa
File:                     3548e499-9a23-33f4-995b-98b6e7101361.roa (raw, json)
Hash identifier:          g31rwL3UbKOfcBL03EU3FSKS6rOC0fXJuh4BXnsdcS0=
Subject key identifier:   88:34:D0:EE:B7:31:99:69:66:25:3A:B0:6C:58:07:65:15:EC:7B:AF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFB6C7A73E07AD1C4DE0C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3548e499-9a23-33f4-995b-98b6e7101361.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     16787
IP address blocks:        2603:90f8::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:b6:c7:a7:3e:07:ad:1c:4d:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=374fe9d4-a9aa-4bfe-9362-c7448b16326e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:f8:0f:5c:a2:10:20:1a:3e:a3:c4:78:42:
                    53:2f:c4:e8:74:11:4f:d5:f3:b2:d6:7f:87:5c:84:
                    81:e3:c9:62:5d:76:21:9d:57:e4:0c:8d:e8:df:e2:
                    31:c4:8e:e1:89:05:08:20:53:28:8a:5f:6e:97:d6:
                    d2:82:e0:90:4b:97:d6:6b:87:17:66:97:bc:51:0d:
                    df:5f:84:a7:5d:0c:3d:aa:d1:ee:39:26:a4:dd:0b:
                    0e:0b:ae:7a:98:45:41:57:04:65:fa:d7:57:fc:6a:
                    bf:82:7a:c0:32:e3:38:3a:fe:83:65:d3:85:a4:e4:
                    ba:61:5e:b9:6c:3e:60:95:41:91:99:d5:91:e4:e0:
                    9e:49:af:b4:01:3e:54:b5:92:e4:14:46:74:74:8b:
                    83:02:33:ef:b7:7c:ff:9a:7f:bf:66:51:aa:0b:86:
                    09:e2:68:e2:9b:76:5a:d7:be:b4:c5:10:81:ca:e8:
                    8c:27:ec:a5:41:10:df:f0:a8:33:10:f0:7b:ee:2e:
                    c5:fc:c1:9b:8c:cf:3a:5d:ef:0e:06:7a:9a:cf:83:
                    8a:40:53:35:d8:df:ee:98:ac:42:09:72:65:a1:27:
                    52:13:6a:d3:ff:ca:fb:a3:a6:16:f0:95:65:9e:6a:
                    bd:bb:4e:c8:4c:4a:af:84:70:bb:5f:19:82:fa:bd:
                    4d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:34:D0:EE:B7:31:99:69:66:25:3A:B0:6C:58:07:65:15:EC:7B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3548e499-9a23-33f4-995b-98b6e7101361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:8c:14:cf:42:2d:6f:83:dd:68:c3:45:c3:65:df:96:2a:
         a4:f9:dd:f9:00:49:62:a2:2d:5e:79:9f:49:ea:ce:25:64:4c:
         e7:d5:ff:40:c4:0e:59:b5:08:d7:48:ba:07:e9:5e:32:20:62:
         fe:da:96:f6:85:33:a8:81:4b:8e:6d:6b:95:35:c2:3e:33:ab:
         a7:74:e2:52:e0:38:a6:9e:c3:5d:c1:ce:ad:00:9b:12:3f:f8:
         44:a8:da:8d:a0:72:ac:f2:dd:76:79:cb:3a:1c:86:6e:3e:0b:
         86:7b:1e:1b:b3:fe:52:9e:8c:ae:4f:40:ff:46:18:93:84:8c:
         c8:7f:72:c2:b9:de:c1:a7:84:8b:af:47:f6:b0:d8:10:0e:f7:
         bf:c5:0b:81:e4:d8:7e:f4:4b:5b:f3:9d:71:5e:03:6c:1b:50:
         d3:21:fc:af:7c:41:41:63:6f:a6:ea:b7:46:cc:4f:19:cf:01:
         78:4a:70:e9:5d:e0:1f:50:6c:f8:21:37:9a:88:4c:c3:0a:d4:
         e6:38:34:97:1f:76:d1:ed:48:7f:dd:5b:29:be:a8:a8:74:d0:
         47:d9:c0:5f:81:8a:cd:40:69:81:bd:0e:9f:64:c1:a0:fe:a7:
         b3:12:b3:06:83:aa:57:79:bf:45:be:1a:fd:bd:82:3e:15:ab:
         14:1d:f7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:12 2026 by rpki-client