Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/e71f95d2-9c8e-3df6-8086-150c8baf2683.roa
File:                     e71f95d2-9c8e-3df6-8086-150c8baf2683.roa (raw, json)
Hash identifier:          IIC7rx3TArR5qNvzr/y9y4P0iekiprQiG20RgJYS+dE=
Subject key identifier:   9C:F9:83:7F:CB:5A:1F:F3:17:0D:86:D3:7A:1A:5E:35:8B:97:AF:A4
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F4328584D11729632824C6D15A6263D00
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/e71f95d2-9c8e-3df6-8086-150c8baf2683.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     14203
IP address blocks:        2620:103:c006::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:96:32:82:4c:6d:15:a6:26:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=ea9b3f16-5cd1-4747-9ab4-78be634b896c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:24:1f:fe:48:13:df:22:8e:e7:fe:b5:12:
                    23:7b:ec:1f:22:1a:f7:e9:02:66:b2:b1:1f:45:a9:
                    f5:cd:c3:b8:b8:eb:f1:93:12:9d:9d:99:a1:29:c1:
                    cd:1e:3d:2f:3b:4f:03:d9:c7:7b:52:69:2a:81:67:
                    4a:d1:83:8b:61:b2:8a:64:65:2c:c5:e3:fd:4c:65:
                    18:f6:2b:e0:94:f6:0e:e5:d8:87:5c:ed:3c:2b:23:
                    b9:a0:d3:91:60:ae:dd:e4:35:7a:a0:ae:30:54:d5:
                    e5:6b:03:73:45:f2:2c:bf:81:87:df:eb:59:17:2f:
                    18:33:9e:47:5b:c6:e7:46:5d:af:3f:b8:de:a9:16:
                    2b:22:ce:14:e3:1b:c9:24:7d:ff:74:ea:86:36:0c:
                    90:c5:70:44:59:5d:16:5a:42:ab:27:5a:13:09:85:
                    d2:1b:79:8f:2c:1e:42:6a:73:ad:50:80:d6:01:64:
                    a5:14:90:56:02:bd:8b:f4:e1:f7:d9:39:e1:d7:6d:
                    6f:0b:9d:c6:ff:16:7f:d3:00:ed:ec:fc:97:37:67:
                    95:b2:58:97:00:a0:83:51:42:ff:51:2e:c4:a8:2c:
                    8e:fb:7a:0c:45:80:fe:06:9e:c3:39:70:94:81:b0:
                    22:52:59:2a:95:1e:30:3d:73:a9:e2:87:92:56:b3:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F9:83:7F:CB:5A:1F:F3:17:0D:86:D3:7A:1A:5E:35:8B:97:AF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/e71f95d2-9c8e-3df6-8086-150c8baf2683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:103:c006::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ef:66:69:16:88:ab:ad:ee:81:3e:e1:88:29:12:ea:16:81:
         84:8a:11:83:76:fe:b4:fe:70:41:43:7c:b4:02:06:21:6a:fa:
         45:35:3c:cb:69:7e:5b:86:99:1c:91:6b:ff:9a:65:4a:d8:93:
         b8:2b:3e:16:fe:10:28:f9:10:5d:1e:58:99:53:6b:5d:12:11:
         92:79:5a:e2:19:90:d3:dd:b0:37:82:c7:d7:13:59:83:12:27:
         13:66:8d:85:7c:08:49:aa:22:ff:56:25:55:7c:b8:35:41:c8:
         91:c6:e3:0b:45:02:a4:26:ea:f8:6a:d2:ff:e4:86:c7:96:b0:
         c3:32:e3:ad:66:04:85:8e:96:d0:2c:a3:6c:fa:54:79:8b:8f:
         8f:7a:24:e2:31:62:cb:c0:64:5e:0a:13:3a:2a:2b:6a:9b:85:
         bf:f0:9c:88:b6:8e:92:2a:3e:8a:bb:8b:67:c9:fc:9e:26:b9:
         5d:8f:e2:84:05:57:76:94:c7:58:c8:72:23:a0:26:ed:7b:b0:
         80:1d:b5:10:08:85:52:80:ff:98:30:af:51:1a:b7:fd:8c:3b:
         1c:11:f6:85:23:6b:de:2f:60:d5:d6:39:d0:ae:86:b8:4d:09:
         53:4e:11:66:f9:35:b3:d1:42:3d:ad:6f:f1:08:01:7b:b3:d8:
         42:a9:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:00 2026 by rpki-client