Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/c0efd304-3758-3d51-a7f6-fb959de91d64.roa
File:                     c0efd304-3758-3d51-a7f6-fb959de91d64.roa (raw, json)
Hash identifier:          DwNhEShAewJ2mPVmXuB7oGLaKKbloJV3pqAEFAme8lU=
Subject key identifier:   EC:CC:00:37:FC:AB:AC:79:E6:36:2A:AB:74:A3:7C:43:48:9A:2C:47
Certificate issuer:       /CN=e2e521d7-dbfb-433c-b301-ee863aee12cd
Certificate serial:       010D0C9F4328584D300A37D683844E7DFB6A4000
Authority key identifier: 5F:BA:B5:53:33:9D:DC:E6:30:1A:F3:9C:79:5A:BB:BC:A8:EB:0B:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/c0efd304-3758-3d51-a7f6-fb959de91d64.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     401835
IP address blocks:        2607:7640::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:37:d6:83:84:4e:7d:fb:6a:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e521d7-dbfb-433c-b301-ee863aee12cd
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=72ddcde0-e1d1-4de6-82ed-691d9d322ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:fe:d3:cd:3f:0a:8c:cb:ff:85:83:57:95:
                    0c:2a:01:e2:db:ff:37:a3:32:eb:16:62:97:ae:4b:
                    00:9e:0f:d3:83:b3:a6:17:92:81:a6:14:22:bb:3b:
                    40:a5:33:d9:b3:6f:80:02:ac:1a:da:de:68:ba:90:
                    db:8c:73:62:ae:1d:d0:37:e0:df:79:3c:11:66:d9:
                    09:45:62:a4:7b:c4:4c:75:cd:05:2c:91:8b:5d:fe:
                    a5:63:3b:e2:59:f2:73:2d:81:cc:1c:16:e1:84:e0:
                    a3:28:68:03:ae:cf:49:53:72:4d:9b:d6:9b:3c:af:
                    fb:13:5e:ec:ff:a5:e8:7f:ab:86:9b:1b:71:04:27:
                    b7:0c:af:bd:e9:fb:93:8e:79:9f:67:1d:3f:25:95:
                    b6:dc:3d:2b:d8:31:7e:7d:1d:03:d9:a5:f2:de:c2:
                    e1:32:93:90:f0:e4:9e:a1:81:33:60:ce:ac:5e:7f:
                    e6:59:13:f6:69:3d:55:ee:94:5b:4c:58:96:4b:f9:
                    1e:0b:b5:cf:64:65:0b:2c:68:94:46:e1:44:83:5b:
                    18:05:4b:da:91:1d:ff:d7:d6:54:1d:44:de:33:9d:
                    0d:bc:cf:27:fa:a3:5a:a0:51:ad:b3:52:93:41:8e:
                    17:98:e1:fa:a4:c8:5b:64:93:12:84:44:6b:58:7c:
                    d7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CC:00:37:FC:AB:AC:79:E6:36:2A:AB:74:A3:7C:43:48:9A:2C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/c0efd304-3758-3d51-a7f6-fb959de91d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.crl

            X509v3 Authority Key Identifier:
                keyid:5F:BA:B5:53:33:9D:DC:E6:30:1A:F3:9C:79:5A:BB:BC:A8:EB:0B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7640::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:87:0b:00:07:c0:3f:23:7e:2d:0a:79:39:19:7d:f2:16:
         39:c2:72:f9:e4:9c:e7:19:70:31:c7:f9:f2:01:b1:73:c8:9a:
         7d:cd:a7:fd:ff:9a:1b:19:12:6d:e3:92:0c:30:e9:5a:89:3d:
         a1:f1:26:7d:42:eb:e4:4f:c6:e9:89:36:6f:b5:48:9b:58:dd:
         75:fa:5a:a1:00:87:64:aa:5f:a3:3b:31:03:62:81:3e:27:1f:
         b8:83:73:ae:93:e4:a5:74:44:b4:d6:b0:96:ac:3c:7d:3e:5d:
         85:c4:ea:56:ba:78:d8:74:40:e9:f7:1d:fc:0a:ec:6d:2a:8c:
         f3:79:80:0c:61:e3:e8:0b:cf:88:16:fa:7b:d4:55:c7:56:a4:
         a0:3c:19:84:36:a0:82:40:b4:c1:b4:fd:cc:db:37:5e:a1:57:
         20:4b:ff:fe:11:0c:41:ea:b3:f6:ff:2a:28:09:8d:78:3b:4c:
         4b:6d:a5:60:9f:af:5d:e7:ce:97:13:1f:be:3c:65:4a:7e:45:
         5a:98:4c:e2:54:51:4e:6c:6f:f7:c9:f7:73:72:ac:0d:81:5f:
         47:a2:97:7c:85:e6:94:a3:28:e4:63:0e:5d:dd:e3:c4:cb:b7:
         52:2b:5f:b4:2e:61:5b:20:ea:58:e6:b6:f8:cc:90:1d:0b:95:
         d2:dd:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:40 2026 by rpki-client