Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa
File:                     7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa (raw, json)
Hash identifier:          S9mLVsrHSfHt9kviPnUN9gZO/HQslOv6YmgxWBJM/4o=
Subject key identifier:   B7:57:EB:8D:6A:44:D9:35:6E:17:27:52:68:7A:52:80:E7:5E:08:70
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584D27AA2F46195F82B24C7B5040
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     8075
IP address blocks:        2603:1062:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:2f:46:19:5f:82:b2:4c:7b:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=5dfd1c4e-dbcf-43f0-a5de-4386e9fd0ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b0:a0:7a:28:e3:72:8b:2d:17:b9:3d:28:28:
                    6e:76:bc:bd:19:22:cc:df:f5:d7:42:1a:f9:8a:a9:
                    3b:12:f0:a3:ad:49:24:a9:e6:3b:e8:8c:cf:0d:1f:
                    05:08:08:7f:24:bb:f0:35:ba:b4:a7:a0:5c:85:6c:
                    3c:c1:45:b9:cb:1f:d9:a1:45:5d:d5:87:1e:a3:ba:
                    23:69:7d:5c:b2:43:f1:3f:3b:d7:9a:a0:4c:54:70:
                    9f:d5:aa:e2:d3:4e:1b:75:c7:ce:ce:29:35:23:54:
                    a1:f9:b4:9f:88:3c:98:66:f7:d5:79:37:31:6c:54:
                    83:ed:5b:2e:8f:bd:85:ba:3f:6d:a6:86:cf:b1:80:
                    06:94:27:9c:7f:bc:47:d4:79:17:0c:71:b0:ae:ed:
                    71:4e:cd:5e:00:7c:54:2b:f7:ba:d6:cf:22:8b:ce:
                    6c:8f:52:67:45:b6:2c:11:ef:6b:dd:f7:85:fc:6b:
                    5e:94:bb:25:8e:af:64:0a:28:6d:97:06:d2:bf:01:
                    cf:e2:b4:14:0e:b7:72:62:53:9e:44:45:58:21:1d:
                    5a:48:d4:a0:62:70:3c:8b:38:b7:cb:56:40:90:ec:
                    35:ce:9f:ee:81:53:b5:fe:98:f6:cf:27:57:30:a3:
                    3b:80:26:0c:3e:83:ee:f8:bd:9a:28:b8:a9:5f:aa:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:57:EB:8D:6A:44:D9:35:6E:17:27:52:68:7A:52:80:E7:5E:08:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:1062:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6e:11:cd:df:84:1d:96:d6:ec:a1:ea:c4:4e:f8:18:b1:d0:
         d9:4c:3b:ff:18:f3:ee:6e:e5:cc:d0:44:86:3d:5f:7d:68:d0:
         0a:5b:83:4c:c1:dd:09:ac:8f:7c:ca:ba:8e:5c:1b:99:08:e9:
         62:75:9c:e6:69:56:35:38:a3:3e:ac:d5:71:7c:4f:7a:d8:cf:
         c3:26:c5:f9:8c:f7:85:e7:a8:9d:61:1e:e7:f5:78:c6:e7:9d:
         0b:b4:2b:0e:7b:f9:ff:b3:e1:a3:10:17:d1:71:11:2d:dc:55:
         69:d0:bf:90:04:19:4c:61:b1:74:7c:1a:e1:eb:c0:42:1a:30:
         05:a7:fa:a2:eb:da:4b:e6:a0:3d:ec:42:20:95:ad:72:66:ff:
         71:1d:3e:8b:b4:ee:3d:b4:b8:d0:f7:f1:03:90:47:63:fe:80:
         40:2d:27:5c:e3:7c:bf:e0:d6:cd:0d:e9:25:45:5a:fb:d7:44:
         2f:a3:84:12:b9:d2:26:93:ff:93:d3:c4:b2:78:66:4f:41:06:
         43:5b:15:23:0e:bc:73:c9:bf:52:2d:40:a9:cd:a5:72:1f:17:
         97:77:45:43:91:d7:fe:62:4c:58:79:8e:b8:74:84:a3:77:ba:
         f3:47:e1:e2:ce:89:39:4d:3d:2a:a7:2b:57:d6:61:32:bb:87:
         7c:b6:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:45 2026 by rpki-client