Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7e610c00-c468-3627-9e71-365e754c1393.roa
File:                     7e610c00-c468-3627-9e71-365e754c1393.roa (raw, json)
Hash identifier:          /F14vIv8D67QM2Xzgzi17AFUo3FBsqrGn9LkegEUwug=
Subject key identifier:   41:E6:28:AF:90:3E:40:E1:FD:96:24:4F:96:FF:B6:B9:C6:90:F2:6C
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584D40CA5318BC5AD07BC037C380
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7e610c00-c468-3627-9e71-365e754c1393.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     0
IP address blocks:        2001:504:13:5::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:53:18:bc:5a:d0:7b:c0:37:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=c66122d0-e3cc-42dc-876d-dbb666e0042e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e6:dd:c8:e7:99:69:e6:20:6a:87:a5:d3:be:
                    84:1d:45:0f:90:84:e1:9c:81:5e:23:bc:06:c9:f5:
                    36:0e:7a:d3:8e:a7:ab:3e:2f:a6:2d:25:10:b8:20:
                    91:7c:91:9b:4d:87:69:f3:b6:c2:c0:a2:e2:16:9d:
                    c5:89:2a:2d:28:bf:16:79:4c:b6:c5:23:22:38:4e:
                    9a:13:b2:c2:24:98:75:4d:e5:11:6f:0c:ca:21:11:
                    a4:61:1c:57:3b:13:8f:2f:5b:00:b6:68:fa:7b:74:
                    87:d3:58:c7:50:e5:92:14:bb:c4:17:99:9d:34:31:
                    8d:9d:cf:29:0c:b5:4d:75:09:5e:4a:81:55:62:05:
                    e5:97:27:6f:2e:bc:45:d5:8c:aa:9f:e0:08:f5:d2:
                    45:73:b7:cc:99:2d:ee:86:60:1f:fe:d3:90:24:5a:
                    db:f1:a6:c0:78:29:55:6f:d4:2d:e2:48:c4:1b:bb:
                    8a:27:38:2a:87:45:c2:12:d0:0d:3a:f5:63:a6:b6:
                    30:6a:e0:c3:df:ac:f3:a3:32:92:a7:f2:cd:c0:f6:
                    c5:e5:70:ea:c0:bf:15:49:e7:6d:9c:e2:fc:85:65:
                    96:de:88:ff:de:61:5a:3c:13:6c:44:ca:e8:10:14:
                    42:c0:59:f7:d6:08:ec:1e:df:ed:aa:8e:9d:11:2b:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E6:28:AF:90:3E:40:E1:FD:96:24:4F:96:FF:B6:B9:C6:90:F2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7e610c00-c468-3627-9e71-365e754c1393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13:5::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fa:0f:55:d1:4c:cb:fa:6d:f9:3e:1e:9d:3d:01:7c:67:f0:
         56:74:4a:23:d6:3d:72:5f:2c:dc:78:ca:6b:52:81:01:46:2f:
         c8:b1:96:26:30:df:cc:2c:63:a9:ff:83:0c:6e:78:0f:48:da:
         ff:74:83:82:fc:e4:d7:06:5f:1b:58:94:de:2f:e5:af:db:d4:
         ed:ab:0f:d0:a4:9c:d0:72:93:78:15:af:8a:20:a8:f3:6a:d7:
         a1:cc:6c:84:aa:44:76:f3:71:63:b5:cc:0e:e2:0f:db:5b:ec:
         69:0a:c8:69:23:92:28:d1:ea:1a:74:12:69:87:59:6d:5f:d6:
         f6:5f:66:4a:dd:0c:9f:2f:53:0f:9f:b8:fe:f4:78:08:b0:90:
         a0:89:e7:95:43:fb:ca:bd:53:d2:54:46:31:00:8d:bd:bd:15:
         9b:76:d3:e6:19:a7:2b:5a:70:89:03:82:4b:9e:04:1c:74:a7:
         2d:97:bc:b9:09:a6:47:13:7e:fe:ef:d3:86:d0:ba:74:32:36:
         de:d1:49:f4:ee:b3:a0:13:95:23:b8:1e:b9:e8:84:2a:0e:b7:
         bf:66:34:3e:c3:e9:64:41:4a:b2:c2:8e:42:81:3d:6f:5c:62:
         0f:21:8a:07:f0:24:13:93:dd:3b:f6:4e:d1:2f:bd:c9:ce:65:
         68:e9:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:59:30 2026 by rpki-client