Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d2ea3170-78ff-3994-b47f-a2a885311798.roa
File:                     d2ea3170-78ff-3994-b47f-a2a885311798.roa (raw, json)
Hash identifier:          zNtPkyf92/rHVRIxcZOiNOPUVVz7VKsizzBrVE1EJ6M=
Subject key identifier:   F6:F1:53:7A:73:72:01:E1:D8:E7:B0:15:BB:CB:10:37:06:E5:72:9B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D5B4F9001C2E16210D322AA80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d2ea3170-78ff-3994-b47f-a2a885311798.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     62610
IP address blocks:        2604:980:e03d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:90:01:c2:e1:62:10:d3:22:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=f45e1a46-b934-4ed6-880a-aa4320a0969e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:c1:83:dc:f9:82:d8:d8:fc:97:d9:0e:c8:
                    e3:92:98:ba:87:d7:b2:5a:a4:46:0c:dd:97:3d:aa:
                    28:c1:c9:cd:38:42:9b:d3:1f:8f:0d:dc:e0:f7:e6:
                    05:f2:50:fb:7e:bc:d1:ef:41:3c:b4:70:cf:c5:a3:
                    5c:9f:83:3a:1e:c1:57:74:d5:1f:2a:ec:7d:3e:92:
                    b2:3d:b5:9e:0a:08:b0:98:dd:98:d7:4d:8c:11:7b:
                    33:0e:22:c3:73:30:bb:0c:53:4d:64:e5:dd:95:ec:
                    49:48:78:46:d1:2f:14:69:78:6a:df:c7:a1:69:8d:
                    86:d8:35:48:47:9c:4d:2c:62:da:18:a2:91:13:6b:
                    c4:2d:0e:de:74:b0:d2:d3:78:1b:3e:cd:d2:26:96:
                    24:85:4f:b3:52:09:26:db:44:99:c5:25:b8:a2:34:
                    0f:e9:bc:0f:fc:b8:71:3c:c3:06:9b:49:4a:db:dc:
                    1f:18:3c:63:ae:94:5f:c7:0d:5f:30:51:cc:e4:f5:
                    39:98:5c:c8:a2:ed:33:d4:6e:6a:ed:42:41:fc:77:
                    a6:51:5a:c6:90:54:c2:94:31:ff:b0:56:d6:83:4a:
                    cd:fc:f3:75:9b:77:a1:29:22:13:12:99:3a:4d:ea:
                    15:6c:74:32:dc:51:ba:55:12:27:81:ba:9f:45:b8:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F1:53:7A:73:72:01:E1:D8:E7:B0:15:BB:CB:10:37:06:E5:72:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d2ea3170-78ff-3994-b47f-a2a885311798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:980:e03d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:65:cf:ab:ab:dd:aa:97:e6:fe:6b:26:f6:e1:67:e8:2a:
         f3:d1:31:33:17:72:e8:5a:9e:93:e7:05:da:7a:3f:68:6b:b1:
         9c:be:36:6c:03:98:db:74:ff:16:ff:c1:f8:31:1b:4d:4b:a3:
         97:05:5c:e0:6c:d4:6b:4b:ed:02:df:76:6b:c6:bf:c6:76:7e:
         e2:79:7c:9f:65:1e:6c:9d:24:f3:66:dc:84:9a:38:a3:f3:ae:
         ba:f5:7b:9d:52:fa:7a:1b:70:2b:d9:01:38:b1:ab:c4:8f:e0:
         b8:64:62:a6:77:09:df:f2:21:91:ca:13:43:7e:de:f5:20:8f:
         e8:e1:c6:b5:cd:58:7c:e4:5f:0b:2b:99:26:70:c0:14:79:2e:
         4c:29:2a:f4:4f:90:b2:d1:08:36:52:c7:a5:48:9d:e6:3f:a0:
         8f:30:a3:23:e4:f8:2f:c7:ec:df:71:f1:27:82:80:88:a4:6a:
         66:87:2d:d8:7c:28:65:93:8a:96:1a:df:11:92:d5:73:73:10:
         14:cf:7a:bf:fb:69:b9:c5:62:a6:5e:e0:55:70:87:3d:8f:15:
         85:e0:3b:ba:3c:40:2a:b0:a3:d3:81:4a:62:04:c3:0c:82:2e:
         21:e1:22:aa:37:dc:4b:0d:78:8b:0d:80:11:df:45:7c:e9:49:
         1e:09:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:01 2026 by rpki-client