Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d2ddae18-12e8-3557-bc02-cc9554be6470.roa
File:                     d2ddae18-12e8-3557-bc02-cc9554be6470.roa (raw, json)
Hash identifier:          7JH90piB4L/n8CACjQJLFBNUyJMC9S20mCzk3V+XrGk=
Subject key identifier:   CC:AC:75:45:F0:90:F0:DB:B8:F2:3D:C3:FE:77:BC:B7:28:2F:D2:78
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFBD7F3151B1A33630C480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d2ddae18-12e8-3557-bc02-cc9554be6470.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2603:903e:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:bd:7f:31:51:b1:a3:36:30:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=0a43c37f-defe-49c8-9c50-d74211f9c265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:6c:ed:11:5a:c9:ac:fc:57:86:a8:ba:8d:
                    9f:18:ef:97:3a:75:b2:3f:4a:90:bf:6b:4b:cd:01:
                    d9:a9:39:6b:72:71:ed:fa:f2:c1:e6:e5:63:3d:b0:
                    a0:99:d9:05:6e:7d:dd:02:f3:ed:4d:a5:f6:06:ff:
                    6c:0d:7f:8f:c8:8d:d6:3d:d4:5c:63:31:62:9c:95:
                    a0:f3:f8:06:34:a9:3a:a8:f9:e4:59:a1:f5:03:ae:
                    6d:96:44:59:e5:ed:aa:90:20:d4:9d:d8:9f:00:24:
                    36:05:8c:9f:02:bf:12:ce:75:5c:58:5a:d2:24:3a:
                    e8:cf:ff:35:53:3d:d6:fd:c2:41:38:30:62:fd:8b:
                    25:8e:9e:bf:0e:b5:25:64:35:bd:86:69:a4:72:b9:
                    cf:ef:9c:2b:45:c9:98:67:e5:b1:b5:04:90:b9:73:
                    21:f6:95:f9:70:06:13:21:db:0a:31:4a:6b:ff:6c:
                    51:2b:ce:6c:86:32:8b:ba:78:66:99:1f:e7:89:d6:
                    c3:a6:81:af:e4:a0:14:20:3f:cd:4a:72:29:4f:3d:
                    bb:24:97:da:99:a7:53:20:6c:fc:21:99:6d:c3:6b:
                    1b:f5:58:8d:07:00:80:67:51:c9:96:b2:d3:e8:37:
                    17:b1:91:2d:73:25:ea:ff:18:77:c2:fb:0c:46:5a:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AC:75:45:F0:90:F0:DB:B8:F2:3D:C3:FE:77:BC:B7:28:2F:D2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d2ddae18-12e8-3557-bc02-cc9554be6470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:67:80:ea:54:89:d9:5c:29:b4:c7:40:12:f1:9a:19:dc:c0:
         b6:51:6d:c3:f7:f8:95:a2:13:5e:fb:b3:48:63:0a:2a:86:7b:
         63:b7:43:11:a6:ad:5b:eb:f0:0c:c8:8e:a8:9e:23:5b:8b:98:
         0a:59:25:0b:9f:ef:64:0a:7b:e9:82:83:38:fc:44:17:7c:91:
         38:0a:3b:7c:07:d8:b3:ef:2f:89:89:ff:3c:ca:26:05:e1:94:
         58:42:ff:70:f3:4f:0f:3d:f9:2f:80:39:a0:2a:99:40:15:f6:
         1a:e8:28:ff:0a:db:18:69:09:f5:c9:db:fc:be:2f:fd:78:be:
         14:ca:cf:43:7c:e7:f5:49:11:96:1e:01:05:27:ba:61:aa:38:
         b7:9a:e1:58:2b:41:5d:5a:88:ce:91:ce:90:85:90:5f:33:ee:
         81:4a:b4:fb:5d:3f:86:97:2c:cd:77:d4:0e:9d:e1:42:0b:c0:
         66:48:02:bc:e6:c8:e2:b7:a6:50:55:3c:77:d7:1e:35:b6:ba:
         19:42:ff:4c:ee:68:c3:1a:77:95:37:67:d8:bb:56:b0:3a:d7:
         65:ad:f0:10:ed:24:16:93:e0:0c:27:fc:d4:57:73:9a:91:d5:
         a9:04:f9:5f:97:60:03:1a:98:db:61:81:2f:fc:77:79:95:17:
         a2:2c:73:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:49 2026 by rpki-client