Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cceec8a1-534b-35b8-955e-65f71ceb4f7a.roa
File:                     cceec8a1-534b-35b8-955e-65f71ceb4f7a.roa (raw, json)
Hash identifier:          d2bJCdS3vgPfi9CyNR6XtdAVs1HQ3FF8mr3YEedHobQ=
Subject key identifier:   D7:78:36:82:28:B2:18:A9:33:5F:F9:97:0A:CA:E4:05:BD:A9:22:F6
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584D40CA52D4F24F655DD25B1990
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cceec8a1-534b-35b8-955e-65f71ceb4f7a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     0
IP address blocks:        2001:504:13:1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:52:d4:f2:4f:65:5d:d2:5b:19:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=2287989a-f741-49d0-ba94-7b769c5ae26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:51:08:bf:57:d3:31:4d:f0:1f:56:6e:9e:
                    c8:00:d5:fc:82:49:48:72:3d:88:bd:93:8f:2b:1f:
                    4a:73:39:80:2d:46:02:e6:a4:60:3f:a4:da:67:27:
                    68:ce:79:3b:75:76:e1:42:49:a7:41:89:25:ae:49:
                    bc:15:d3:de:86:09:5b:c5:bb:17:a4:68:ff:af:19:
                    ca:68:c0:ac:1b:03:fd:6e:05:cd:25:c5:07:f6:53:
                    f2:bd:7a:92:0f:f2:51:60:0c:f9:d9:98:54:38:4d:
                    63:f3:e1:b7:f0:5c:8d:46:83:05:35:2f:a9:50:0b:
                    b7:97:68:dd:13:93:76:52:ce:32:ef:02:cd:19:b5:
                    9b:06:fa:f3:b9:05:55:7e:86:c5:ff:60:35:80:d6:
                    55:1d:91:f7:64:79:2d:2e:b1:ad:06:2a:15:d8:89:
                    ea:90:a9:00:ba:41:83:45:8d:b4:ee:a6:de:e1:9e:
                    b4:10:d6:c0:d3:10:b6:4e:09:fa:cc:30:f8:ab:fd:
                    94:53:97:34:2c:0c:37:31:83:12:b6:4f:eb:44:ac:
                    10:a3:c9:eb:38:07:55:8e:55:13:fb:39:dd:4f:fe:
                    a3:99:76:60:17:2e:38:27:2a:88:96:38:db:d0:47:
                    d3:e4:54:bf:b0:ea:5b:de:4c:74:ac:3c:ea:76:a4:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:78:36:82:28:B2:18:A9:33:5F:F9:97:0A:CA:E4:05:BD:A9:22:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cceec8a1-534b-35b8-955e-65f71ceb4f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:db:78:2e:88:96:7b:99:d9:fd:a4:37:62:02:97:16:01:d1:
         56:a6:e8:32:2c:da:cd:7a:0a:d8:b8:76:64:ad:20:00:7b:a3:
         0c:90:ba:35:7a:d6:de:b5:7f:8c:d0:be:83:dc:fa:35:8e:a8:
         6c:16:16:a0:45:88:23:bc:cf:ee:d9:4f:a0:27:cc:13:34:7c:
         07:1f:bb:b8:38:b8:e2:0e:15:d1:bc:c5:c9:8e:95:cb:9d:d9:
         d4:83:4a:ad:80:0c:6c:b3:53:0e:ee:dc:da:08:94:84:79:cc:
         05:1a:39:e8:73:5c:24:88:2c:43:5e:43:68:cd:84:fb:b6:81:
         d4:b1:1d:98:0a:a2:40:3a:86:bb:c0:d7:7d:ef:a6:fb:81:52:
         eb:10:02:0d:c8:9c:8c:bb:c7:80:a2:f2:32:25:d1:00:ac:e8:
         fc:a8:94:fc:d6:05:0e:22:87:3d:7b:cc:f3:d5:05:dc:35:ff:
         e2:31:4a:10:f3:83:c8:3b:e1:93:c6:f1:8f:b3:11:16:01:bd:
         4b:6e:7a:f9:d6:c2:87:0c:53:65:49:b5:b5:b7:41:4b:51:04:
         04:94:05:15:a5:97:8b:f0:04:4d:c0:e3:c9:bc:d8:2b:04:df:
         08:a4:bd:88:1a:dd:ae:a0:13:79:77:80:45:42:6e:4c:b9:b8:
         25:5d:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:54 2026 by rpki-client