Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfd6f3be-9678-3304-adc9-d63651631f29.roa
File:                     cfd6f3be-9678-3304-adc9-d63651631f29.roa (raw, json)
Hash identifier:          ZIlBickkmg/MTmIf7s7C0Tt/YZi/OvvnyE4gAKamatk=
Subject key identifier:   41:66:EE:1A:A9:2B:5C:57:AC:3F:D8:62:6E:62:58:BC:D6:B8:DD:5E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC100606D5E991ACDB740
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfd6f3be-9678-3304-adc9-d63651631f29.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8074::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c1:00:60:6d:5e:99:1a:cd:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=6f1f538b-7b1a-438b-863d-aba18a2146a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:29:c6:14:03:bc:7b:98:5e:36:66:f9:f2:
                    e3:d0:e8:c9:71:36:f2:0f:e0:ba:6f:53:4d:9d:ec:
                    11:5d:09:c3:9f:a7:51:80:d2:5d:41:9b:3a:02:f4:
                    1e:a5:f9:f8:b0:c4:94:18:db:25:ec:1b:9f:2d:8b:
                    ef:0b:1c:30:c3:e4:db:1d:5d:ee:16:30:24:17:01:
                    9b:e4:79:5a:b7:04:91:d1:65:f5:ac:f7:50:c3:61:
                    d5:19:2d:45:35:f7:9d:50:66:90:c8:03:66:06:53:
                    2f:c3:44:20:d6:3b:31:ec:f2:b0:86:97:ac:b9:a1:
                    c5:1d:9e:1b:e2:64:ce:c7:64:1c:01:b7:95:af:49:
                    11:8c:29:18:a6:f4:53:0b:05:e8:3a:a8:ce:dc:ff:
                    55:e4:40:54:b4:ae:52:e7:15:10:73:7b:01:56:05:
                    0d:77:e2:47:e1:5b:a2:07:e1:14:2a:d7:ca:2a:91:
                    d4:56:7a:58:4d:31:19:2e:c1:27:59:5d:75:53:0e:
                    d5:1b:b2:68:f8:a8:85:dd:f5:a0:ab:b1:c0:b8:6f:
                    f6:ea:ba:4a:da:7e:b0:4c:6b:f9:ea:f9:dd:04:ff:
                    51:1d:e4:dc:d1:5c:71:71:a4:a5:8a:14:19:1a:af:
                    73:06:32:38:7d:2a:e9:c7:79:6b:1d:c7:6f:d1:61:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:66:EE:1A:A9:2B:5C:57:AC:3F:D8:62:6E:62:58:BC:D6:B8:DD:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfd6f3be-9678-3304-adc9-d63651631f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8074::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:42:e3:0d:5b:a9:12:78:e4:00:68:9c:47:c3:6c:b5:7f:05:
         dd:72:15:8d:92:7e:e8:9a:73:84:af:1a:97:69:57:b5:76:f3:
         9b:69:6d:ed:32:6c:0e:06:c2:bc:11:27:b8:d9:65:93:05:71:
         a1:48:c8:df:6b:4e:04:25:d4:6a:4a:3a:db:97:65:ae:d5:4c:
         6e:ce:fc:08:f6:aa:1f:40:12:48:be:d9:d8:65:9c:a8:07:ed:
         e2:db:2f:0c:f9:99:c1:1f:0c:30:12:59:e8:dd:58:47:f1:92:
         2d:a6:fa:2b:3f:c4:d5:a9:ec:da:82:92:10:1d:dc:2f:55:d1:
         51:74:69:f6:2d:47:9d:c1:c1:7b:7c:04:4b:28:e0:b5:5b:48:
         99:c5:b3:86:1f:f8:bc:ed:9c:df:68:70:48:2a:25:98:9e:4d:
         a1:e8:6a:71:60:e6:ea:1b:28:89:77:c4:5c:2f:6e:98:3d:c8:
         00:19:ef:54:65:7e:f0:9f:bd:c1:46:ab:0c:fb:3d:ac:d5:6e:
         d1:d2:34:1e:f8:30:08:42:8e:c2:21:8a:99:bb:55:0a:8f:a8:
         2a:6e:3b:53:32:76:65:87:84:3f:93:ae:b3:f4:9a:93:51:3f:
         02:04:47:20:9b:62:2f:f2:52:fb:52:ea:c8:d7:1e:72:04:33:
         6c:ad:55:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:58 2026 by rpki-client