Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/551fc2be-c880-3b4d-bed4-93cf69acd18a.roa
File:                     551fc2be-c880-3b4d-bed4-93cf69acd18a.roa (raw, json)
Hash identifier:          NvMOIpHEY1aDn7Q5bhsNHzgm8wlkTC/Y27u+bhCbQh4=
Subject key identifier:   F7:1A:22:95:62:46:7D:D0:68:D3:8B:06:AF:52:61:95:14:43:14:56
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584D59EA7230D4AE3A702ABDE560
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/551fc2be-c880-3b4d-bed4-93cf69acd18a.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14773
IP address blocks:        2620:1d5::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:72:30:d4:ae:3a:70:2a:bd:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=217d3240-0a76-416e-a757-bdd27121850a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:18:ca:24:99:f8:64:6e:49:55:aa:1d:73:
                    7a:da:7d:3a:81:a7:b5:ad:a7:7f:73:35:93:c5:e1:
                    a3:40:3d:c1:93:46:fc:be:dd:0f:c9:33:3a:dc:4b:
                    3d:39:5d:0d:55:f2:e2:82:c3:24:bd:0e:2a:64:17:
                    c8:e3:3e:b8:a2:fe:54:de:54:78:ea:8b:8b:7e:87:
                    0f:88:da:6d:ef:d1:d8:33:69:fd:63:6c:4b:e5:79:
                    fe:64:7b:31:65:97:3a:2f:53:a0:a1:3b:2c:bc:00:
                    4d:1f:8d:18:59:1d:4e:2c:5f:48:b2:b4:b2:15:64:
                    69:8f:37:bc:8c:b0:5c:4b:13:e4:f2:f9:0f:b8:ce:
                    60:72:53:de:ef:88:44:09:45:45:d4:82:b1:ec:ad:
                    dd:96:3b:fc:4a:df:bd:20:8a:96:54:8a:19:d4:c2:
                    cd:29:7b:7f:13:f6:0a:ef:30:17:a1:56:cd:13:c8:
                    98:4b:ed:2f:0d:20:57:e7:88:d0:a6:7e:47:23:3a:
                    8e:ea:5f:f8:4d:85:be:d4:2c:4b:3f:01:35:80:ee:
                    1a:56:28:67:78:bf:2b:94:fe:8c:9d:87:d8:87:b5:
                    f9:2a:4c:22:67:ed:dc:ba:f4:8e:11:ec:ac:67:c0:
                    06:3e:19:6c:d8:b5:ac:52:1d:3c:7e:af:cb:52:b2:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1A:22:95:62:46:7D:D0:68:D3:8B:06:AF:52:61:95:14:43:14:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/551fc2be-c880-3b4d-bed4-93cf69acd18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:29:ce:67:87:9c:34:06:f5:32:92:2d:fa:90:2d:bb:46:87:
         5d:68:30:fd:7a:77:0a:05:9c:12:75:4e:aa:8a:a7:fb:30:f8:
         92:9b:78:bf:48:6f:8a:d2:88:ab:fa:e3:b9:fa:2f:99:b4:b9:
         d5:89:73:97:5c:a1:63:d3:49:33:a5:2c:bc:cf:96:fa:33:a7:
         28:c6:8a:2a:98:17:be:e0:2d:8f:a2:8c:3e:96:b8:f0:14:eb:
         79:5c:54:c7:ae:43:13:8a:87:e4:e8:24:a0:4e:76:b0:50:07:
         16:1f:31:74:3d:b6:a5:7a:07:bd:ad:ce:3d:fd:4d:c4:78:bd:
         ae:2b:b9:1e:cd:58:cd:e7:1f:21:b2:ec:dc:55:31:57:9a:45:
         f3:bb:9e:4a:81:ea:a6:f0:06:f9:6b:1b:de:7f:2f:61:cd:1d:
         28:1e:07:d3:5b:02:f1:b2:b2:58:c9:76:32:86:27:5d:4e:67:
         e8:94:7a:78:47:dc:0d:fa:8a:03:9c:be:06:d5:3a:01:b2:75:
         de:c9:cc:b7:43:2a:a1:66:8a:e5:9b:b6:06:da:f8:d2:4a:ea:
         e4:26:7a:a4:34:91:7f:ba:7b:a5:fb:47:d8:45:3e:67:84:aa:
         a0:ff:ce:b9:26:39:de:c4:d8:53:cd:3d:2f:4a:07:df:be:34:
         95:c5:e8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:57:34 2026 by rpki-client