Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa
File:                     39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa (raw, json)
Hash identifier:          9RWcW2F/9uBsDSCruCUO9715gR7u8dmwCaRo6yfmH20=
Subject key identifier:   62:DE:1E:FC:51:8B:B6:40:8B:A0:9B:21:08:B1:86:8C:18:BC:0C:3A
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584D32D4D42E9CB4C2B9C2916F00
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     65020
IP address blocks:        2607:9bc0:1010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:d4:2e:9c:b4:c2:b9:c2:91:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=80a832ef-049b-4735-94ed-66413c4446d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:3e:f0:30:93:e1:15:e4:a0:b7:dd:ae:a0:
                    41:b0:c8:14:38:5c:43:33:cc:41:70:49:8e:0e:b3:
                    9e:6a:61:97:ae:e8:c3:b5:e4:ce:28:19:29:54:ab:
                    0c:01:4f:d8:f9:4d:3c:02:91:2b:c4:b9:04:9d:a4:
                    51:cf:71:d3:60:a9:c5:0a:ac:15:38:21:53:ae:5a:
                    8d:7a:ff:61:52:0b:26:4e:5f:f7:94:76:df:f2:f6:
                    60:7e:42:51:c1:0c:0d:f9:bf:81:f8:b3:f1:b8:c9:
                    90:95:8d:bd:f1:b9:d1:f1:b0:bb:cc:6f:e2:3b:95:
                    7f:98:92:a1:78:4a:e8:2c:24:fc:49:e0:74:0d:3d:
                    10:cf:5f:4d:af:4f:0f:94:a1:bd:b9:9b:b2:f1:52:
                    de:74:42:76:dc:51:24:89:95:d7:6f:9f:b0:91:86:
                    3e:84:d5:16:81:3e:5f:46:21:d1:fa:a8:89:b5:fd:
                    75:88:a9:b6:15:8a:19:28:da:09:bc:e3:06:74:11:
                    42:4f:03:be:71:ea:e3:47:41:1c:dc:8e:ce:03:89:
                    9f:0f:96:c9:4c:9c:7f:42:78:a9:cc:1a:d7:42:ec:
                    28:cb:c9:1a:e5:1a:a4:de:2f:e9:c7:02:e8:6f:32:
                    8e:b1:11:e7:0d:2f:85:0e:38:69:46:c6:04:36:8a:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DE:1E:FC:51:8B:B6:40:8B:A0:9B:21:08:B1:86:8C:18:BC:0C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:1c:07:2f:fb:04:2e:09:e2:51:65:a1:66:47:80:d7:1d:
         60:f4:b0:a4:69:1d:c8:02:c5:e2:c2:d7:b9:f4:c3:b9:96:6e:
         71:a2:a6:de:db:44:ad:80:bf:48:f3:55:ef:23:57:dc:79:bf:
         25:89:ce:08:d4:0d:0f:2c:b0:e9:25:84:ec:cb:cf:1b:93:ba:
         72:32:e3:b8:2f:3f:43:73:cc:aa:d3:0b:9b:87:3c:e8:6b:20:
         c1:49:fc:89:b4:e4:03:c2:ac:e5:bf:80:70:2e:36:6f:4a:a4:
         31:dd:34:83:be:2e:fd:a2:1f:4f:92:d8:f7:ad:75:80:0d:be:
         b0:d8:97:07:2a:26:6f:3a:a8:36:c3:e8:d0:a3:f2:1a:c9:3d:
         6c:e7:fe:eb:aa:b3:41:d8:2f:4a:0b:f6:30:9e:e8:2a:9e:87:
         1a:34:e9:f7:1f:b8:09:df:c4:6b:0f:fd:c8:a1:6f:ac:6e:50:
         6d:f0:82:2a:8f:ee:18:81:d4:d8:35:1c:c2:6b:88:0f:4e:27:
         70:26:f8:e4:ba:c3:2e:b9:04:88:bb:52:dd:2f:da:af:af:61:
         7b:48:43:58:c8:a7:ac:8e:46:ba:06:23:85:0e:35:78:3c:13:
         cc:b2:cb:60:63:b0:f0:3c:e2:40:5a:42:dd:f3:14:6f:40:e9:
         f4:74:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:30 2026 by rpki-client