Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa
File:                     131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa (raw, json)
Hash identifier:          lPEDFwDyCcO3hZmoBeraWxqEJhOfOrHBpvUWB8BaP44=
Subject key identifier:   30:66:22:42:B0:61:68:6C:E0:9E:2F:0E:17:2D:DA:67:4D:9F:6D:B4
Certificate issuer:       /CN=387b8a97-889c-48cd-b72e-4329cc21745b
Certificate serial:       010D0C9F4328584CBAE739249423EA7ED891F6A0
Authority key identifier: B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     396530
IP address blocks:        2607:a6c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:39:24:94:23:ea:7e:d8:91:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387b8a97-889c-48cd-b72e-4329cc21745b
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=d7ad2576-ebd6-46cb-896a-9ca8b89a778c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a6:40:83:25:24:7b:f2:72:80:66:3e:97:8d:
                    fa:3a:9c:80:15:3f:de:bf:42:2a:b6:91:e2:ce:8a:
                    5b:83:7b:52:fd:fc:71:04:4e:fc:7f:a2:0d:ee:86:
                    c4:9c:2b:db:ec:41:6b:ca:02:0e:a2:d7:7c:fa:6c:
                    ca:bc:53:db:76:3e:c7:c2:bb:2e:a1:93:08:75:69:
                    ba:27:38:90:23:7a:ee:68:8c:c4:bd:6d:ca:88:b8:
                    bc:66:b5:a7:e3:26:29:b5:24:44:a2:a0:fb:01:ff:
                    08:35:5f:3c:86:fa:73:9b:c2:7d:14:3b:ef:2d:d5:
                    35:a0:55:93:bf:c6:49:1a:fc:81:fd:b5:9f:67:56:
                    2c:a9:91:fc:9c:cd:32:60:cf:3e:a9:01:cd:0f:71:
                    d6:a6:4d:5f:89:21:56:ed:e7:7d:3c:c0:00:25:65:
                    af:b4:64:19:89:63:bc:88:4b:5f:22:e0:48:d2:3a:
                    74:69:07:92:e2:e2:22:30:4f:4f:78:6d:4b:cb:3e:
                    15:99:ef:0c:2d:a4:a7:d0:10:f4:2b:35:4b:65:d2:
                    0e:a1:83:7d:8d:4a:f6:56:73:ab:07:1b:0f:e4:d7:
                    da:8b:42:bb:f3:eb:d8:95:b6:5f:60:de:50:84:20:
                    14:8a:ff:dd:c9:1d:98:9f:28:87:e1:c2:b5:77:2a:
                    db:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:66:22:42:B0:61:68:6C:E0:9E:2F:0E:17:2D:DA:67:4D:9F:6D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl

            X509v3 Authority Key Identifier:
                keyid:B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:cc:2d:e1:de:40:c2:d6:5f:3e:94:3b:fa:fc:81:32:5f:
         f0:aa:77:58:df:ec:d0:e7:41:84:f7:80:dd:25:3c:f5:e7:3f:
         27:b9:16:49:30:e2:d6:b1:18:96:08:b2:54:06:d2:5d:d0:8e:
         80:40:e1:27:ed:b4:c7:cd:b7:58:77:8a:74:33:7c:2c:2a:32:
         1e:f1:34:6d:a7:3d:53:13:b3:3e:7c:74:20:8a:e2:90:e5:20:
         37:7a:6d:98:3f:56:a9:9b:0d:87:aa:d1:a7:e1:d9:73:a4:3f:
         71:c6:81:14:ab:32:11:9c:a4:46:87:d3:d1:9e:dd:4b:d5:47:
         3c:d2:bc:73:93:27:c1:09:15:0e:82:6f:5a:15:63:e4:9d:0f:
         90:c4:33:3c:c5:7f:5d:17:d9:0a:a7:02:2e:c1:6a:58:37:57:
         82:bf:4c:75:c0:d0:d0:21:85:f8:4b:0c:a2:9e:f2:76:06:8c:
         c3:b1:07:d8:de:55:2f:2f:ed:d4:c7:0d:54:c3:61:75:8e:7d:
         c1:ba:04:e2:62:a2:c4:1f:e8:9b:72:b4:9b:89:f0:f4:38:df:
         47:00:93:bb:66:d6:a5:85:44:a9:53:dd:77:b2:d8:30:5f:ba:
         a3:10:f8:d5:2b:57:68:bc:9c:b8:3b:4e:f1:d5:1a:b1:69:47:
         c4:13:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:10 2026 by rpki-client