Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da5b7ba3-4902-3c8b-bfc5-c126032d842a.roa
File:                     da5b7ba3-4902-3c8b-bfc5-c126032d842a.roa (raw, json)
Hash identifier:          PsElVf8Q+FZ11TF3AF7CRWAZmaiiXXYfPntPuZ5OgBw=
Subject key identifier:   B5:E0:E1:F9:A2:56:30:E5:85:C5:F4:67:34:AF:DD:66:3B:9F:85:10
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC70C12B87A8A8F0AE700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da5b7ba3-4902-3c8b-bfc5-c126032d842a.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:806a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c7:0c:12:b8:7a:8a:8f:0a:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=a29412c3-835d-405e-9a9d-dbbd640ab49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:ea:c8:86:58:0d:39:8e:14:9a:85:94:45:
                    e9:e8:c8:1b:a1:ea:8f:a5:a9:4e:99:af:df:74:2d:
                    65:0a:ab:e0:95:1f:77:e2:5e:6f:7e:e0:bc:a5:65:
                    f6:68:2e:d1:13:74:05:2e:f9:be:38:8d:c1:f1:9f:
                    75:09:ef:97:c8:8c:3e:9d:5b:17:60:e4:21:fc:71:
                    c7:e4:52:7d:46:23:89:1c:d7:a2:8a:d0:45:6f:57:
                    90:bf:ba:1c:09:02:eb:9a:9f:2b:ca:40:77:55:4b:
                    44:03:8c:a2:56:ad:68:6e:77:a4:a5:63:c9:2b:18:
                    d7:1f:5a:72:cc:44:83:16:c5:ed:81:47:ec:3b:65:
                    a5:26:72:1e:0b:50:3d:1d:c6:bc:93:80:d6:6d:60:
                    3a:15:f9:4e:04:18:e4:b5:99:66:cb:db:96:b6:73:
                    af:0e:16:90:2d:12:3d:a7:eb:20:a0:75:46:fe:26:
                    64:85:d6:73:9b:55:9f:1a:7d:a1:7f:7e:8d:03:7b:
                    f9:0e:4b:2f:d2:6d:9a:f1:72:56:7e:2b:f8:1b:4f:
                    b7:9d:af:5b:b9:6e:3b:f2:65:d7:98:af:e6:27:9e:
                    14:9f:03:c7:0e:ae:82:54:ad:d9:db:4c:e9:61:2b:
                    ea:aa:8c:14:90:74:df:c2:0a:9c:1b:1d:bc:27:c7:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E0:E1:F9:A2:56:30:E5:85:C5:F4:67:34:AF:DD:66:3B:9F:85:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da5b7ba3-4902-3c8b-bfc5-c126032d842a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:806a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:90:9b:fd:4e:0a:2c:10:a8:2e:d1:78:33:b7:75:f4:b4:e5:
         47:2b:1c:70:0a:1b:17:80:48:d3:4d:b4:c0:df:ef:5d:2b:c1:
         23:14:d3:42:13:bc:65:04:1b:9e:b3:fe:ed:24:ff:53:e0:a1:
         4b:c5:b9:9c:3b:ed:c4:68:83:29:8e:34:ef:0e:13:42:d8:0f:
         85:32:11:dc:1a:e9:52:c9:da:f4:24:fa:14:1a:6f:68:30:2e:
         89:62:5e:ba:4b:b7:d3:5d:7e:c6:30:f1:f0:21:ed:b9:9c:0b:
         29:29:73:c5:9f:82:c6:8d:bc:73:2d:5d:94:7d:08:3f:4f:e0:
         15:20:f2:83:7a:25:32:44:e5:78:62:72:70:48:40:51:7a:88:
         bc:45:36:50:2e:f9:07:b5:17:7f:13:29:40:54:a7:aa:73:f2:
         ed:be:8a:44:c9:5e:ee:bd:15:33:e0:79:95:3b:a6:8f:53:90:
         61:41:7f:48:3c:03:6b:61:7e:14:46:59:bc:fd:c9:89:8c:f7:
         0d:07:52:83:05:58:e4:fe:d7:88:0b:64:59:90:1b:0d:76:ab:
         1a:59:0b:04:c3:85:71:1f:04:3c:1c:8a:74:0e:9a:ac:cc:df:
         99:ad:b0:94:7b:56:74:ae:5f:79:1f:83:cd:7d:a1:54:96:1c:
         d5:59:75:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:52 2026 by rpki-client