Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/60c10db3-e9e5-3b2d-aeff-6c362e6e3a54.roa
File:                     60c10db3-e9e5-3b2d-aeff-6c362e6e3a54.roa (raw, json)
Hash identifier:          MdeI/P5NBzE2gydYaRsCCnKUmGevT1NkcuSK7KvUXBk=
Subject key identifier:   DF:1C:92:76:8E:03:90:2A:6E:2D:40:03:EB:67:E4:A6:4E:F9:0F:03
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584D4D5A909EA05845021BD87E80
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/60c10db3-e9e5-3b2d-aeff-6c362e6e3a54.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     14773
IP address blocks:        2620:1d5:ffa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:90:9e:a0:58:45:02:1b:d8:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=20fc8a03-8bec-4f0d-8fdd-11894bdc1641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:9b:c0:b2:27:a3:3e:fa:bd:50:96:41:eb:
                    2f:f1:57:a7:36:fe:27:be:a4:86:2d:6d:f3:d0:4a:
                    c3:8a:b2:1e:34:53:e0:39:24:ca:1f:af:39:5a:dd:
                    a0:ed:47:6b:0f:ce:0a:76:c9:9a:56:59:92:ff:6d:
                    f7:68:0d:80:ee:77:31:39:44:e3:0b:67:f4:c6:19:
                    06:89:44:24:75:b0:87:78:5d:a7:48:b4:a4:ea:8b:
                    a5:2a:45:82:3f:79:44:12:3c:2c:80:ba:35:c9:c8:
                    a7:95:1c:78:d3:8c:f5:e1:75:07:cd:c1:56:33:04:
                    72:5f:7a:f4:14:49:d3:25:35:05:bb:66:de:c5:86:
                    80:d7:e5:f8:3d:eb:e3:24:46:b2:8c:09:51:7b:89:
                    a4:d8:d1:98:a2:16:a0:1d:f2:97:63:07:ae:1a:05:
                    61:1d:2b:18:94:f0:66:8a:9e:fe:a1:c1:63:38:da:
                    d9:d5:fa:b5:d6:e1:d3:22:b6:b1:97:9b:48:a1:4b:
                    9d:04:a9:2a:97:92:0e:19:20:37:19:35:bb:c2:b7:
                    1e:9f:be:71:23:23:ac:d3:4d:ba:86:8b:d6:90:66:
                    44:05:77:11:30:2d:c1:76:6e:3f:d1:60:6f:f4:39:
                    d6:31:2c:37:a6:ff:58:68:7e:bb:14:0c:fe:80:61:
                    a9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1C:92:76:8E:03:90:2A:6E:2D:40:03:EB:67:E4:A6:4E:F9:0F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/60c10db3-e9e5-3b2d-aeff-6c362e6e3a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:ffa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:82:ec:54:ee:34:1e:29:f8:8e:b0:9c:b5:6a:35:50:d5:
         e0:cd:30:be:4f:ba:e8:af:83:81:60:c8:30:fc:e8:33:3d:b1:
         05:83:ab:30:a0:62:ee:00:85:05:3c:ca:20:93:98:47:db:e2:
         37:0a:40:6e:23:0f:4b:bf:07:c0:a2:dc:b2:dd:56:93:74:2f:
         5c:ac:48:2f:c0:8c:12:9f:48:52:00:b0:89:df:cd:df:bb:e1:
         e6:35:23:3a:91:4d:19:69:3d:b8:32:fe:8e:e2:94:1f:ee:f8:
         3a:84:61:e6:ed:10:c7:51:32:d9:07:de:6c:74:e2:74:2a:0c:
         1c:9b:2f:56:63:02:70:db:92:99:ac:e2:ce:4e:fb:5b:d7:e6:
         e7:39:19:eb:01:98:11:45:88:93:ba:58:6c:40:89:f3:a2:d3:
         58:3b:47:ca:3d:be:51:a5:b2:73:7e:0a:8e:fb:e0:4c:3e:a9:
         54:7f:fe:ba:e2:fe:8f:d9:4d:f7:d9:e3:de:bf:de:b1:e4:7e:
         bd:23:05:62:f4:df:44:be:9c:78:67:15:d7:89:36:7c:b2:46:
         43:9e:20:21:e1:85:c5:6d:6a:71:96:5e:1d:b8:8f:86:6a:f5:
         1e:93:28:fa:10:a2:61:03:bc:07:f6:e9:b6:66:ef:fa:02:aa:
         45:66:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:06 2026 by rpki-client