Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/75eb4d3e-4e89-3965-aafd-ed1159de1126.roa
File:                     75eb4d3e-4e89-3965-aafd-ed1159de1126.roa (raw, json)
Hash identifier:          kIZ42DsrTW0Lha4u2vpN1GIvWisC7AZi0DUtvZt66ks=
Subject key identifier:   4F:CC:0A:8E:64:1C:F4:8C:9E:46:28:6E:F1:3A:35:4A:19:4E:40:15
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584D6E71B20E7FD06A17FC391140
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/75eb4d3e-4e89-3965-aafd-ed1159de1126.roa
Signing time:             Tue 07 Apr 2026 21:29:35 +0000
ROA not before:           Tue 07 Apr 2026 21:29:35 +0000
ROA not after:            Mon 06 Jul 2026 21:29:35 +0000
asID:                     8075
IP address blocks:        2620:147:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:71:b2:0e:7f:d0:6a:17:fc:39:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr  7 21:29:35 2026 GMT
            Not After : Jul  6 21:29:35 2026 GMT
        Subject: CN=8bf0b359-7921-43c2-b5a6-ad39458b7f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:77:77:6c:b0:bb:03:09:8b:20:cc:62:ef:93:
                    ad:bd:98:6a:67:d2:d3:c6:c8:30:04:f9:2d:b3:ff:
                    cb:ab:6c:f3:29:23:2b:a4:36:41:c7:5d:f7:f7:24:
                    3a:72:15:3f:bb:de:49:db:b5:34:d3:ba:d8:99:54:
                    69:3b:44:d8:18:aa:ab:00:a5:53:bb:a9:1c:c0:02:
                    68:72:30:fb:72:90:9c:f0:0f:1f:84:68:5c:51:89:
                    de:fd:dc:31:7b:16:22:17:8e:67:73:1d:c9:ab:d2:
                    36:85:ed:ef:83:6a:b1:51:f1:ea:be:e0:02:23:25:
                    c8:38:83:c8:85:31:fb:a4:50:05:58:44:b2:d0:b4:
                    36:c8:b3:d7:6a:00:72:fa:c3:8a:d3:25:b6:17:4c:
                    1c:c0:ff:51:3a:88:c9:a9:a8:d7:2a:73:48:7c:18:
                    d8:ee:8e:f2:44:dd:04:69:49:7b:21:11:38:22:3f:
                    8b:ac:27:48:70:be:23:18:92:e7:7a:67:cc:04:4b:
                    31:f7:10:1d:ea:ff:4f:45:0c:32:99:8d:18:d0:78:
                    be:53:0b:66:41:23:a5:c4:3c:46:06:79:33:1f:c4:
                    35:c0:74:5d:98:e0:7f:89:34:f2:27:5c:56:b2:ed:
                    13:f8:9d:1e:ef:47:69:5e:22:06:91:a3:93:90:0c:
                    31:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CC:0A:8E:64:1C:F4:8C:9E:46:28:6E:F1:3A:35:4A:19:4E:40:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/75eb4d3e-4e89-3965-aafd-ed1159de1126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e9:8a:79:7a:85:4f:ac:26:4d:e6:f1:3d:08:37:08:7d:70:
         e6:94:7d:93:db:6c:1b:19:33:8b:7b:c4:ad:3a:99:61:8a:53:
         a4:c7:b0:dc:00:ad:8d:81:3f:c4:94:e9:66:4b:6a:17:2b:33:
         f6:89:c8:98:03:3d:34:d6:4c:aa:79:d7:ed:b7:b8:97:ac:b0:
         ff:3f:74:fd:ad:29:f0:d0:d6:1f:65:1a:52:48:bf:44:c0:c0:
         94:3e:6e:f2:36:7e:f8:2f:bf:e6:e9:6d:af:9c:0b:e4:cf:b8:
         32:70:1b:c9:ab:f5:3e:56:bf:3b:5f:7e:30:8c:b6:61:b6:fe:
         58:03:5e:06:bf:60:68:14:8a:dd:e5:af:8a:32:c9:b2:a9:3a:
         7d:c4:e0:47:9d:b6:65:7d:97:ff:67:16:09:44:de:94:56:52:
         ea:5b:dc:bd:93:3a:db:c8:9d:0a:4f:2f:f0:a7:90:e6:e0:3f:
         64:7f:a4:2a:4f:ec:f4:a3:37:21:0b:91:f0:a3:55:b5:22:d6:
         d4:ed:ce:71:7b:34:a8:bd:b6:4c:60:dc:39:a5:cf:6e:87:32:
         3d:18:85:24:9d:b8:be:93:65:76:94:33:02:a0:63:b3:f5:17:
         ee:ac:f3:db:36:41:f0:6c:90:3d:cc:a7:41:64:b0:32:e3:e6:
         3d:d7:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:43 2026 by rpki-client