Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/61c7614d-1692-3b85-837c-78efda64494b.roa
File:                     61c7614d-1692-3b85-837c-78efda64494b.roa (raw, json)
Hash identifier:          eQi4bhPyOiOOMFzV+Z65HB5kbpT7u2mBZtZTbiYZNzI=
Subject key identifier:   41:63:FC:E2:3E:F4:04:1F:08:A6:A5:26:F4:F4:F0:39:0F:CA:FC:C6
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584D4D5A6024D2DBF228A989AA60
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/61c7614d-1692-3b85-837c-78efda64494b.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     46375
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:60:24:d2:db:f2:28:a9:89:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=eeaa245a-8027-4d8e-b860-c43a75bb11cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:54:68:74:05:5e:30:65:e8:38:f3:75:a3:ac:
                    b1:b0:8f:37:b6:f4:12:20:14:5b:ae:fd:f7:19:cd:
                    81:f3:0d:28:b9:e1:36:47:b5:1c:89:6b:11:98:e0:
                    a6:b6:48:f2:b0:3c:6f:97:91:ff:1d:77:b9:ac:55:
                    34:ed:0f:8e:43:af:4c:62:48:88:41:50:5f:ae:af:
                    c6:3f:d3:76:2a:6b:ec:62:e9:3d:f8:d5:3d:32:df:
                    62:56:04:ec:2d:d1:2a:6a:d7:df:d0:c4:84:e5:61:
                    43:c6:4a:f0:85:26:da:db:01:26:56:ed:1c:72:8f:
                    22:73:73:99:91:5f:b1:86:0f:ac:70:28:a3:59:d6:
                    7f:b5:ef:aa:7a:d2:58:aa:33:13:1d:19:92:5c:78:
                    87:14:d8:d4:eb:e0:b6:d2:16:c5:bc:a8:09:69:5d:
                    ff:5c:13:4c:c4:1e:5e:74:23:dd:db:0c:d6:3b:85:
                    bb:01:e8:d5:6b:d7:5e:87:be:02:9b:2d:49:b9:dc:
                    7b:3a:35:c3:a4:5f:50:e4:77:f2:a6:4d:1f:a9:73:
                    84:39:1d:aa:ae:4a:60:71:2b:23:8d:2b:a4:2d:19:
                    2f:69:19:b7:39:00:35:15:ae:74:10:8e:73:e8:7f:
                    61:1c:17:8b:c3:c3:bf:24:0e:94:54:17:35:be:0a:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:63:FC:E2:3E:F4:04:1F:08:A6:A5:26:F4:F4:F0:39:0F:CA:FC:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/61c7614d-1692-3b85-837c-78efda64494b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f2:87:55:ab:ce:5d:7c:e1:f0:b4:6d:c8:28:92:89:fe:6c:
         10:bc:7b:00:c9:c9:06:a0:d9:9a:e7:18:c3:3b:68:2d:b2:85:
         c4:4d:58:9d:83:0c:1e:32:fe:66:59:4c:d1:14:46:48:15:fb:
         78:ee:78:1f:5c:af:d8:4d:0d:c4:16:b3:a5:39:56:d8:c0:66:
         ba:17:c6:fb:90:2b:7b:66:79:9e:a4:5f:ab:b6:d2:85:75:ce:
         01:9c:89:cb:e1:74:db:e5:1c:08:ad:6f:43:6f:2f:e0:16:e0:
         c7:9f:26:ec:43:2c:f0:f7:c3:97:30:4f:50:5b:f2:e7:87:81:
         47:e3:49:0f:85:7a:64:42:c7:e3:e1:d0:32:3e:2e:5e:c9:ed:
         1a:2c:bd:30:19:72:1a:0c:2f:be:c5:a7:5b:c4:d6:36:35:0f:
         ed:90:73:ea:a8:20:ad:90:7a:a1:e9:17:b0:70:69:d8:f7:40:
         64:66:9a:e4:c6:7f:63:b9:08:90:c8:c3:6a:22:cc:3c:c3:5e:
         d4:5f:89:5d:70:7f:2a:54:c6:ca:dd:b0:b1:a4:98:b6:bd:81:
         90:41:b7:a1:10:3a:5a:50:57:86:b1:dc:40:85:7f:c6:22:e4:
         3a:bc:0a:11:d0:3d:94:8a:70:c9:80:8c:53:21:54:08:41:66:
         d9:6f:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:00:54 2026 by rpki-client