Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/571ae5a9-8a91-3483-9d02-ba6f8a797098.roa
File:                     571ae5a9-8a91-3483-9d02-ba6f8a797098.roa (raw, json)
Hash identifier:          bzBcl2rgxBsyuXjPbEcdpQWOe6H3tIurS6CswY0TX1c=
Subject key identifier:   5F:BF:30:BA:A7:44:35:99:A7:87:B2:61:0C:E3:51:EE:3A:54:4A:1F
Certificate issuer:       /CN=87edc032-d938-4504-bf4b-96c599e50195
Certificate serial:       010D0C9F4328584D40CA56562521BD4A97377480
Authority key identifier: 1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/571ae5a9-8a91-3483-9d02-ba6f8a797098.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     27005
IP address blocks:        2606:6d80::/32 maxlen: 44
                          2607:fbf0::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:56:56:25:21:bd:4a:97:37:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87edc032-d938-4504-bf4b-96c599e50195
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=d6771777-ae38-48fa-828a-aec3dedd51b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:02:e5:c2:23:00:0e:3f:03:21:a6:e2:ab:
                    0e:a6:62:79:c1:2c:e7:86:d3:5e:18:65:6b:01:96:
                    3a:ba:d0:be:11:b4:d5:bd:7a:23:02:7e:04:14:13:
                    ba:97:dd:0e:4e:ba:29:62:69:df:21:7f:ca:ad:ac:
                    1c:7a:0f:f1:f2:bd:4a:42:9f:18:36:e1:8d:0f:65:
                    cb:90:0e:f5:12:e6:8b:58:21:ba:be:6e:69:fe:69:
                    ee:8c:7c:bc:12:f2:f2:8b:88:e0:55:c9:5c:c8:cb:
                    75:3c:60:a9:ec:84:86:05:03:9d:86:af:0f:90:77:
                    69:c0:cf:a6:79:e3:2c:e6:b8:73:22:67:b7:ad:44:
                    85:4c:07:20:69:cd:d8:80:dc:18:d2:17:d4:53:b8:
                    e9:4a:ae:60:73:79:96:34:60:05:21:04:80:2e:aa:
                    14:64:a0:31:c7:24:47:ea:10:2f:84:cb:0e:76:11:
                    83:d7:bd:4b:98:d6:44:6c:59:db:a9:e5:7e:f2:b6:
                    d3:39:85:84:18:b8:e3:af:14:aa:be:64:18:1a:2f:
                    16:81:2b:74:75:26:48:cf:ff:fd:9c:f7:59:40:cc:
                    7c:9b:6b:86:c0:91:ef:b8:f4:c5:94:fa:ab:26:ad:
                    1e:53:26:e0:3f:90:7f:83:43:ef:f0:13:3f:92:e2:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BF:30:BA:A7:44:35:99:A7:87:B2:61:0C:E3:51:EE:3A:54:4A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/571ae5a9-8a91-3483-9d02-ba6f8a797098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl

            X509v3 Authority Key Identifier:
                keyid:1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6d80::/32
                  2607:fbf0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:d4:80:95:5a:41:21:7e:17:5c:85:62:30:00:7c:a8:75:2d:
         7b:6f:8b:79:69:d3:c7:aa:fe:f1:2b:a8:b3:0d:bb:fa:c5:91:
         e7:14:66:14:29:9f:8f:1c:e5:76:6f:23:4b:8c:c7:6c:49:ad:
         eb:d1:b7:5e:12:9e:15:82:c4:f8:8a:5f:bf:80:6d:05:72:ed:
         b7:00:d6:57:d0:36:64:99:e8:02:20:18:f5:94:50:37:4a:ea:
         3b:45:24:55:b6:a9:54:d1:67:0f:3c:b6:60:48:c6:db:3f:12:
         73:4d:a2:dd:bd:f9:75:df:5d:04:a6:16:09:e1:5b:2a:77:80:
         71:4a:4f:26:e8:2e:94:c0:00:6f:a2:f9:b0:98:f9:7b:42:bd:
         af:fc:41:c0:21:22:34:5a:02:1b:37:c9:af:18:43:af:a1:a1:
         fd:df:7e:b9:28:b7:09:91:c4:83:90:38:70:48:62:a4:93:3f:
         86:df:8e:c0:0e:c7:be:19:d1:20:cf:23:e7:b0:2b:43:d6:f6:
         3b:3a:24:16:01:74:92:da:2a:36:18:dd:03:c2:12:ee:bb:06:
         ba:57:a5:6a:0b:c9:78:24:51:0b:d5:20:ab:bd:7c:a3:a1:35:
         e3:e4:d3:5a:d0:bf:e0:7a:6a:3d:7b:02:da:e8:d3:75:71:8f:
         6d:e7:ab:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:34:55 2026 by rpki-client