Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/58f52ecc-7c3b-3f97-b69b-456048f9b7df.roa
File:                     58f52ecc-7c3b-3f97-b69b-456048f9b7df.roa (raw, json)
Hash identifier:          Ew7nTVmDgvFwez5AjbRmKqtb8tPRLR/ogEH6CF8ZJOI=
Subject key identifier:   5F:F5:D7:B9:1D:85:9F:BA:28:07:77:4D:02:E7:CE:75:9B:99:4E:D0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF5D17354994DF67F4280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/58f52ecc-7c3b-3f97-b69b-456048f9b7df.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:805b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f5:d1:73:54:99:4d:f6:7f:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=967603a4-e677-4184-b11d-5a7a5f53b2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:84:6d:e6:ed:81:82:fb:22:67:42:68:72:
                    14:cb:ae:7f:69:33:73:5e:82:cb:e3:d2:b1:3f:8b:
                    69:9d:a3:10:d6:dd:48:2e:04:24:8a:a3:1e:d3:2a:
                    6c:23:f7:3c:02:93:a4:29:37:d7:66:d4:03:ff:f1:
                    73:dd:19:1f:51:88:af:67:da:1a:1f:64:04:02:4c:
                    26:a7:c6:a9:d9:0c:7b:6e:30:8b:aa:a8:17:32:e9:
                    65:d0:fe:29:f4:73:dc:f0:99:1f:c2:a1:d9:60:79:
                    bc:c1:d8:0b:41:7f:f6:0e:13:8d:bf:87:42:1b:0a:
                    33:e5:28:04:c6:2a:ac:0b:fa:18:ec:68:35:1b:aa:
                    43:c7:c0:81:e7:cd:e9:c5:4d:13:14:d4:46:05:e0:
                    a7:ec:5e:1d:91:e7:56:d0:16:9b:8d:9f:5a:2c:1d:
                    aa:ad:76:aa:b3:ea:0b:34:6d:ed:f7:cf:a7:f5:ed:
                    c7:88:87:63:e0:67:b2:41:47:19:bb:0d:c0:a1:61:
                    83:25:70:f0:cf:29:ee:aa:18:78:75:6f:b8:53:71:
                    2c:cc:ef:73:d4:a1:b4:c1:17:d6:72:dd:ff:cc:d6:
                    ae:b6:fe:c6:86:6d:b0:02:da:41:89:9b:19:75:c2:
                    07:23:c5:e2:2e:5b:a2:3e:4c:e2:a8:f5:63:51:9b:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F5:D7:B9:1D:85:9F:BA:28:07:77:4D:02:E7:CE:75:9B:99:4E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/58f52ecc-7c3b-3f97-b69b-456048f9b7df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:805b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:2b:9d:18:59:f1:96:4b:05:cc:7d:db:e3:8d:62:ed:67:fd:
         28:70:24:73:e1:f5:05:7f:b0:14:8f:13:66:dc:9c:c8:3f:13:
         dd:bc:ed:f4:24:85:06:45:d1:fe:0c:64:ba:0d:55:eb:b5:9a:
         85:2c:42:53:e9:55:61:79:36:81:42:1f:7f:6c:63:24:6a:7d:
         aa:b1:05:4b:da:2e:cb:89:9c:20:63:e8:27:4c:2a:00:e7:10:
         29:fb:b5:0a:76:c2:14:7f:13:68:aa:e9:ec:f9:5c:d3:5c:5d:
         1f:0a:80:2d:af:a7:8f:f7:c5:13:9d:b5:d0:9d:fc:34:27:2e:
         52:77:8c:96:21:da:e9:8e:22:f2:a8:fc:c8:6e:ae:2e:da:76:
         56:43:03:31:bb:b3:a2:28:34:36:cb:75:65:27:79:7d:70:16:
         7f:80:e4:bd:68:da:a2:8d:a7:28:84:3f:78:13:30:88:fc:2e:
         27:fd:de:13:fe:69:5e:d2:b1:98:c7:36:de:11:03:35:62:81:
         36:a4:e8:0b:fd:f3:4f:43:47:71:23:f6:bc:68:71:9b:00:bf:
         37:d9:3e:7e:df:96:e5:6b:e6:ed:a8:df:90:f0:b0:fa:cf:7a:
         07:ea:1b:05:fc:d4:69:a7:1a:98:a8:61:73:1b:11:8d:63:87:
         7f:7e:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:11 2026 by rpki-client