Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/287d2d56-02bb-3db7-a0ae-a231ba9c610f.roa
File:                     287d2d56-02bb-3db7-a0ae-a231ba9c610f.roa (raw, json)
Hash identifier:          Na262M4a13ZfnsdZO6edBggC0k3k/7SQ6UHMRkKas5E=
Subject key identifier:   A0:87:7F:55:4F:A9:A5:4F:58:41:25:EF:6D:E2:A1:7B:BB:95:0F:D6
Certificate issuer:       /CN=9546315b-1bef-4238-9dad-ebda966a76b5
Certificate serial:       010D0C9F4328584D20AF7A8741E82D6F65AB0220
Authority key identifier: F0:AA:E7:07:1E:DA:38:36:45:A2:C2:0C:60:F0:CD:C0:D8:CC:4B:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/287d2d56-02bb-3db7-a0ae-a231ba9c610f.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     54014
IP address blocks:        2607:cb40::/40 maxlen: 48
                          2607:cb40:100::/40 maxlen: 48
                          2607:cb40:200::/40 maxlen: 48
                          2607:cb40:300::/40 maxlen: 48
                          2607:cb40:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:7a:87:41:e8:2d:6f:65:ab:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546315b-1bef-4238-9dad-ebda966a76b5
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=b7dd9a75-5a58-4aae-8d9b-ec56c3dc4069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:20:c1:f4:ba:a9:0d:60:46:cf:60:b2:d8:
                    b2:80:40:81:20:20:35:a0:a2:81:bd:56:48:ed:12:
                    3e:7e:05:4a:aa:bb:dc:6f:c3:25:38:ec:58:a2:41:
                    13:6d:2a:c0:83:f3:fb:4c:79:57:4b:64:e3:39:ee:
                    cd:9a:74:fa:47:fe:c2:83:40:44:ad:43:6a:4e:f0:
                    af:4a:ec:50:1e:23:04:cc:3c:19:f2:42:f3:ef:ef:
                    cb:8f:9b:c7:14:8f:81:28:53:51:01:0a:24:2b:ff:
                    08:01:89:cc:47:f4:e6:47:6e:09:33:a9:93:71:a4:
                    57:4e:a5:d0:01:1d:e2:a6:d4:45:f0:30:41:75:34:
                    33:2f:ab:3b:f0:58:e1:25:d0:db:97:4f:71:9f:3a:
                    1e:e2:f1:4e:a8:bb:5b:09:59:e8:ea:72:a0:c0:2e:
                    e2:1f:5b:80:4a:2b:f1:3b:17:43:af:6f:12:89:5a:
                    cb:06:49:ad:af:2a:a0:27:b8:0a:d4:d8:ec:34:e2:
                    3d:3e:d8:f8:0b:66:f2:39:82:16:42:43:1b:39:8f:
                    ab:9f:b0:2f:be:f4:f3:45:df:50:e8:dd:33:0d:88:
                    b3:af:6f:3e:a0:24:b5:18:2a:f4:ef:87:25:39:54:
                    f3:3e:33:fe:3d:4b:bd:fb:59:d6:70:81:80:01:ce:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:87:7F:55:4F:A9:A5:4F:58:41:25:EF:6D:E2:A1:7B:BB:95:0F:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/287d2d56-02bb-3db7-a0ae-a231ba9c610f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.crl

            X509v3 Authority Key Identifier:
                keyid:F0:AA:E7:07:1E:DA:38:36:45:A2:C2:0C:60:F0:CD:C0:D8:CC:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cb40::-2607:cb40:4ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:6b:19:25:c3:7a:29:45:fb:c8:23:7c:54:c9:77:25:9f:92:
         7d:59:e8:db:8e:40:1d:98:b0:44:ed:b9:11:89:f2:c9:6b:e3:
         36:a8:91:81:6f:9f:07:5c:d7:4b:ae:f6:84:0a:88:be:2f:fc:
         92:8a:da:7a:c5:d2:9f:ec:11:2c:69:d6:71:9f:68:90:45:ff:
         bd:87:64:44:31:cb:f1:22:96:ab:64:c7:c1:b6:c6:61:de:11:
         c1:72:91:b2:a1:ab:c3:52:53:26:53:cc:b1:ed:c6:c7:16:32:
         75:ba:53:4d:d9:a9:d2:8b:6b:a5:b5:a5:30:4b:b4:96:7c:0b:
         65:f9:0d:45:05:70:e3:66:f7:2d:00:21:f1:7b:80:00:be:21:
         3e:73:8a:85:e2:60:b3:c1:f1:ca:5b:5c:d1:4d:1b:9a:82:b0:
         38:a2:35:b8:ff:b7:6f:87:ed:15:5f:7c:d0:4f:8e:03:19:7c:
         5f:2b:ee:5d:ac:b6:9e:50:4d:08:35:60:22:46:53:e3:12:b5:
         64:3e:84:02:7b:40:25:03:51:44:e8:e9:88:ed:bf:65:f7:c3:
         9e:b5:8c:7a:95:c3:cd:2c:55:33:db:6a:ad:b4:50:2e:0d:54:
         72:eb:2e:10:4d:ab:7b:c1:c4:8c:8d:4f:45:46:8d:06:fa:47:
         de:d0:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:15 2026 by rpki-client