Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/87bc001e-190b-3e44-a051-4ca709f13cec.roa
File:                     87bc001e-190b-3e44-a051-4ca709f13cec.roa (raw, json)
Hash identifier:          kFkLvWNFhe2raMhXlPL5G8aXo1IX9AtrnHxrlwVW4Tk=
Subject key identifier:   82:4E:2D:E0:98:EA:71:A4:0C:D4:48:42:7F:71:FD:7D:52:43:98:91
Certificate issuer:       /CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
Certificate serial:       010D0C9F4328584D492A7921910113067D0D7080
Authority key identifier: D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/87bc001e-190b-3e44-a051-4ca709f13cec.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     401815
IP address blocks:        2604:1760:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:79:21:91:01:13:06:7d:0d:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=224cf694-ea1a-4a3c-b602-376a56e2db97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:75:b9:24:a8:f1:18:09:31:1b:66:e7:bc:
                    33:ef:94:09:48:6f:f0:5e:af:01:6d:0d:c8:73:b7:
                    6f:ca:75:40:b0:dc:c2:ea:26:5c:30:09:4e:fe:4e:
                    34:a9:67:8c:bd:39:39:bf:5d:34:22:da:78:ee:8a:
                    47:55:ed:ba:02:56:0f:36:2e:a0:51:32:02:22:e3:
                    a9:3c:d6:14:08:30:fa:75:b1:90:3c:e5:9b:55:d5:
                    19:07:9f:e7:16:57:c9:ee:b4:91:25:6a:14:23:bd:
                    b5:cb:54:d8:e3:90:e3:54:51:0c:e4:52:84:c8:e4:
                    85:b3:d1:11:e7:e5:15:38:50:54:dd:dc:1a:65:9e:
                    c5:fb:d3:0e:8a:c5:b7:6d:ea:3a:a9:ef:83:ca:cf:
                    86:4f:fd:5a:01:7b:8c:f0:0c:b4:a8:c0:22:db:54:
                    ba:b2:b0:f3:b7:5a:6d:3d:68:1b:63:91:29:ab:d7:
                    83:b8:34:68:c0:54:ac:79:f7:44:aa:a7:e5:53:cb:
                    88:72:07:cc:e5:bc:96:38:65:3d:fb:03:74:0c:7b:
                    b9:98:92:d9:1f:0e:df:46:d4:e8:37:3b:c7:dd:54:
                    44:d9:14:f4:23:d9:c5:aa:1a:e8:43:f4:49:ce:42:
                    7c:6b:98:8c:4c:1b:86:b1:2e:79:e4:a0:c0:af:fa:
                    bf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4E:2D:E0:98:EA:71:A4:0C:D4:48:42:7F:71:FD:7D:52:43:98:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/87bc001e-190b-3e44-a051-4ca709f13cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1760:18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d5:b1:70:f8:28:92:b2:32:08:b6:62:f2:81:d7:39:c8:dc:
         a8:ab:ca:3e:c2:cd:b3:55:22:48:54:04:d5:c6:ce:a4:e4:c9:
         05:c1:6b:25:b3:3b:cc:c5:e0:d6:74:01:fc:e5:a1:eb:7c:07:
         06:08:2e:39:fa:fb:cb:5a:9e:4b:b3:9f:80:0a:f2:18:e8:e2:
         79:12:d0:50:56:93:17:d6:3e:97:f8:43:f1:83:9e:30:1f:0b:
         70:c1:d1:4f:5e:55:87:77:8c:39:4e:17:79:d3:93:23:f5:a0:
         f7:96:7c:b8:60:d0:1c:7a:3a:5e:14:09:3f:d1:13:39:d3:25:
         45:bd:94:b6:97:5b:79:4c:5a:88:ab:6b:70:bf:4f:c9:b4:b1:
         c7:02:5b:21:0b:81:d8:da:f8:53:85:6d:c7:38:53:62:b0:7d:
         47:6c:79:ad:c1:1e:d1:b1:a3:c3:56:8c:0a:24:40:0d:50:78:
         60:ee:cb:3b:cd:08:91:a3:ef:ec:46:66:02:da:f6:3a:5e:e1:
         69:66:b8:dc:56:32:65:f5:4f:6b:5c:87:9e:2a:ff:eb:5c:7f:
         d8:8f:d9:a9:ed:ba:02:7c:55:de:8e:33:c6:4c:32:70:f5:ca:
         97:27:47:b2:7e:59:f1:4a:04:1b:48:5e:bc:f8:29:47:ac:a0:
         3c:c4:7c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:42:03 2026 by rpki-client