Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa
File:                     307298f7-d8c6-36b2-a709-98bfd0d6750b.roa (raw, json)
Hash identifier:          gfC4V+QYIShWsrZBcT9zoyTxnMTnxo8pXTb7oq7mBDk=
Subject key identifier:   5F:F5:EA:B1:22:E1:D0:0E:10:BC:8D:35:AD:66:A3:C3:4F:EE:00:50
Certificate issuer:       /CN=04610df8-1b67-4eaf-b73b-95f345a33b02
Certificate serial:       010D0C9F4328584CF4222300BE1E33AD2234FC20
Authority key identifier: E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     18519
IP address blocks:        2605:fac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:23:00:be:1e:33:ad:22:34:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04610df8-1b67-4eaf-b73b-95f345a33b02
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=7a1d40bb-114b-4e3f-9aeb-a1bfaa441f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:a0:8b:68:31:47:c9:25:a8:f3:a6:78:b7:
                    a9:ca:b1:22:fc:57:10:77:03:38:ac:50:c7:75:86:
                    7b:68:ba:18:88:62:d6:82:92:b5:1e:df:ca:ce:b8:
                    a5:5d:f1:41:f9:bf:75:44:3c:3c:c3:88:8d:39:04:
                    a5:80:c3:4a:7b:91:36:9b:1a:4c:af:c7:c9:28:eb:
                    1a:53:f9:ea:79:79:e9:d7:d2:d2:5d:1e:75:7b:12:
                    04:30:30:00:12:59:2d:30:9e:90:c0:14:39:61:42:
                    e8:3a:61:7b:17:fb:8a:e6:09:7f:15:ae:50:99:41:
                    7a:74:c6:cc:59:8e:5d:9a:94:87:65:30:4f:bd:29:
                    df:72:99:dc:dc:c3:6d:e5:b1:f4:b0:b5:41:0c:19:
                    07:a5:99:15:01:97:7c:7c:18:34:0d:85:10:57:bb:
                    cd:31:53:40:74:4e:93:6c:36:f2:d5:df:6d:31:15:
                    a7:dd:7d:7a:37:a1:97:74:98:54:69:c0:41:e5:78:
                    00:b1:7f:ed:b6:f4:d3:7f:38:db:66:7c:97:6f:d2:
                    90:de:dd:36:64:91:b2:c0:46:a7:5d:4b:da:0d:c5:
                    8b:14:ed:05:3d:59:58:00:3f:f4:95:5b:97:ab:6b:
                    fc:d6:46:68:58:a4:a1:0a:69:a3:de:d3:eb:f4:4c:
                    d4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F5:EA:B1:22:E1:D0:0E:10:BC:8D:35:AD:66:A3:C3:4F:EE:00:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:79:84:57:af:76:c7:e4:25:84:78:7f:05:35:f0:53:ce:29:
         c8:68:c6:8b:8a:72:81:57:79:0b:77:45:e5:b3:2e:cc:cd:1f:
         9a:22:10:67:0a:b9:20:f8:b0:f3:70:23:7a:a8:5b:12:f0:d5:
         fa:1d:d1:1e:c5:0a:ce:1d:97:84:76:1c:6a:8c:4f:ad:5f:05:
         35:00:51:b6:f5:41:f4:1e:4b:7f:69:a7:bb:2b:12:72:90:ed:
         b5:0a:00:40:29:3e:0a:8f:f0:cc:a4:be:8d:f8:b9:fa:84:58:
         cc:3a:57:73:6f:e3:0c:37:0b:ba:da:5b:06:ee:d9:eb:02:52:
         f9:37:c5:9f:c7:a4:d3:26:88:7e:46:66:60:b4:c0:a8:e0:11:
         56:bb:9e:7a:b9:4a:ab:4e:ee:1d:31:8b:e1:7a:70:f7:f7:eb:
         86:06:0c:16:a7:e7:95:2e:63:65:e2:84:64:b1:b5:29:30:fe:
         71:ae:e9:ca:63:a9:d1:9f:f7:ea:2f:77:26:5a:3a:4d:14:b5:
         21:88:d4:ed:b9:22:1d:84:cf:93:5d:e8:06:80:e1:38:2f:72:
         f1:d8:e6:fd:87:f6:96:0e:a2:fe:ec:55:37:7c:c3:e2:30:13:
         a5:9d:c5:dc:40:d1:a9:ea:fa:90:6a:61:9d:49:c5:14:a5:31:
         85:f6:65:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:38:04 2026 by rpki-client