Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/18f6fedf-bd9e-3833-8ef6-02a37c1624d7.roa
File:                     18f6fedf-bd9e-3833-8ef6-02a37c1624d7.roa (raw, json)
Hash identifier:          +JhUKXIO8QUpK8ZnnY0fhlgoWCFUJFOTu66B8N4WfsU=
Subject key identifier:   F9:B2:B9:F0:EE:11:58:83:B8:2A:49:6D:F6:17:C3:66:65:95:DE:B0
Certificate issuer:       /CN=624e00b7-d261-42a6-9d37-4a83f37b3d5b
Certificate serial:       010D0C9F4328584D250DFD32E5A2D0B81D748240
Authority key identifier: DA:78:AC:82:F0:6C:66:8A:CF:2D:1A:CB:75:57:3E:7A:A1:AF:1B:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/18f6fedf-bd9e-3833-8ef6-02a37c1624d7.roa
Signing time:             Thu 12 Mar 2026 14:34:40 +0000
ROA not before:           Thu 12 Mar 2026 14:34:40 +0000
ROA not after:            Wed 10 Jun 2026 14:34:40 +0000
asID:                     36826
IP address blocks:        2607:49c0:80::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/624e00b7-d261-42a6-9d37-4a83f37b3d5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/624e00b7-d261-42a6-9d37-4a83f37b3d5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0d:fd:32:e5:a2:d0:b8:1d:74:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624e00b7-d261-42a6-9d37-4a83f37b3d5b
        Validity
            Not Before: Mar 12 14:34:40 2026 GMT
            Not After : Jun 10 14:34:40 2026 GMT
        Subject: CN=8bb5b387-aefe-4687-a698-8b103596a774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:a6:1d:85:5c:68:c0:57:58:06:d8:12:e5:
                    e3:68:89:aa:ff:ce:40:b4:53:a4:7f:56:0a:e2:fd:
                    a7:b9:4a:c5:9d:b7:8f:b2:89:76:b5:51:ed:fc:9b:
                    47:cd:40:8a:cd:8f:4d:f6:07:7d:d7:c0:01:4f:c9:
                    1e:56:e8:9c:6d:43:9a:09:81:4d:ed:c2:ce:43:0b:
                    3d:9f:9c:67:54:f3:ed:2c:7f:ff:89:fa:d9:28:ae:
                    ef:8d:9d:34:77:00:35:bc:bf:47:90:22:30:37:ea:
                    8a:6e:74:62:af:8b:ae:e0:94:ed:ab:25:37:46:6c:
                    ab:ad:b3:88:3e:e7:ce:42:a0:d2:a1:7e:d0:23:66:
                    b5:9a:1b:8e:ff:7d:26:63:f8:ce:d0:10:b9:6f:a5:
                    f4:52:ca:ea:91:9d:85:b6:77:ba:dc:bf:2b:67:44:
                    76:1a:9b:e3:f8:e2:53:c2:07:d9:ed:55:2b:e3:97:
                    83:ec:bf:76:d6:2c:21:d1:0a:3d:ed:e2:72:c6:7d:
                    fe:70:f5:53:09:60:29:2d:69:de:b1:17:e3:96:9b:
                    00:23:87:34:df:97:06:ca:55:81:80:69:54:ea:f8:
                    13:ff:aa:d8:c7:23:49:f6:db:a3:6a:86:e5:d1:c1:
                    07:9e:34:9a:80:f4:25:e6:b2:7e:09:71:47:06:a0:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:B9:F0:EE:11:58:83:B8:2A:49:6D:F6:17:C3:66:65:95:DE:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/18f6fedf-bd9e-3833-8ef6-02a37c1624d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/624e00b7-d261-42a6-9d37-4a83f37b3d5b.crl

            X509v3 Authority Key Identifier:
                keyid:DA:78:AC:82:F0:6C:66:8A:CF:2D:1A:CB:75:57:3E:7A:A1:AF:1B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:49c0:80::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:48:e3:ba:94:37:8b:c7:ce:1c:26:a2:c5:dc:26:d5:1c:27:
         f8:3e:8c:d8:04:5a:18:67:9b:5a:d0:7e:95:b2:83:79:0a:7a:
         79:5e:7f:58:ea:f4:6b:39:87:4b:e6:d9:0b:24:97:83:58:9c:
         be:6a:dd:21:17:3d:9e:f2:0b:b1:91:03:01:01:90:31:fd:e3:
         86:44:71:67:a8:f7:19:83:ce:02:ac:7b:27:71:eb:e2:c5:fb:
         4d:e2:ac:e6:65:a2:1a:b2:a3:d0:81:03:0d:f6:15:70:84:61:
         0d:a8:03:3c:03:cb:7e:da:00:56:47:16:cb:da:0f:89:c1:fc:
         40:2c:62:b9:8f:46:46:2f:16:b0:79:d0:24:5f:b5:c2:66:20:
         51:3b:e6:29:4e:6c:2a:e5:e2:c5:34:13:ba:85:3a:0e:09:03:
         8e:2d:c1:29:6a:46:1b:25:f5:f4:b9:57:95:29:09:77:6c:23:
         92:97:8e:ac:a6:a1:cb:48:61:62:71:32:c2:20:18:b5:f8:f9:
         c2:4e:75:93:84:63:f0:24:29:8c:96:cf:26:fb:80:94:46:b3:
         a6:e7:27:bd:1c:76:ee:b8:09:83:76:28:db:2d:68:97:df:0c:
         56:43:6a:ff:9c:a2:7c:f9:c4:e4:e2:dc:cf:12:2e:5a:93:c0:
         0c:9a:6e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:39:11 2026 by rpki-client