Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
File:                     c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa (raw, json)
Hash identifier:          LjS0YO7kzdd31CewWSXNCJxI9HF8ujqbIm73an/m6nY=
Subject key identifier:   8F:0C:92:77:B8:26:E0:21:CE:7E:B3:24:FE:AB:6A:FC:DF:3B:2C:04
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584D4D5A533A08D6F487F7279A80
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     7065
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:53:3a:08:d6:f4:87:f7:27:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=850d392b-736a-460e-b073-d83d121c31d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:bf:f5:f0:2b:26:c7:a2:1b:0c:c1:b2:83:
                    5f:43:78:d0:ab:85:62:c8:2b:6b:7e:c9:b6:1d:fb:
                    de:dd:f0:dc:e6:15:55:2f:f9:27:71:c6:1a:64:38:
                    85:24:2c:5f:29:87:6a:39:10:b1:22:12:dc:a9:45:
                    b3:18:c0:f6:e9:01:fc:26:ae:83:92:78:e6:bc:02:
                    20:13:53:70:27:fd:6f:56:25:58:b6:ae:60:f5:7d:
                    29:a3:29:ef:dc:b1:92:05:9e:3e:2b:26:9c:cf:6a:
                    ba:22:91:20:11:a5:ee:2e:02:58:a2:9a:b8:0a:27:
                    35:83:81:db:dc:c4:fe:97:8d:00:61:ec:32:c1:69:
                    a1:b8:74:e8:1e:6d:87:ba:65:95:2e:4e:e0:e1:ab:
                    6b:86:9b:41:16:8d:d2:1c:59:d3:db:eb:13:41:9a:
                    e7:4e:d9:42:8f:60:d9:53:d6:5d:97:ab:20:02:68:
                    e8:dd:78:e7:a1:1a:36:96:c9:9f:a4:15:00:52:8a:
                    1c:d1:61:21:94:f1:5f:11:f7:14:b7:46:28:95:71:
                    c5:bc:3c:34:54:41:98:3d:e5:63:61:a4:90:b7:d4:
                    02:78:20:39:69:d0:53:c3:1c:96:ed:14:d2:94:d6:
                    1a:0e:92:b7:94:75:d7:f6:f5:d5:5d:d4:09:a7:60:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0C:92:77:B8:26:E0:21:CE:7E:B3:24:FE:AB:6A:FC:DF:3B:2C:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:60:07:7f:fc:70:78:b2:dc:bf:5a:7e:4e:37:bc:df:6b:63:
         e6:40:fb:45:9b:26:a7:31:1f:8c:47:84:fc:4f:93:f9:55:0a:
         45:51:11:e7:8b:1f:0d:74:c0:04:06:e0:87:fd:d4:db:5b:24:
         7d:12:a1:0b:d7:ce:77:93:f1:08:eb:b5:74:42:91:e0:09:f4:
         37:94:8a:99:ac:09:4b:74:b2:61:97:26:bb:2f:ba:e3:87:50:
         b8:fb:d0:a0:c5:5f:4a:fc:4f:2e:5e:e5:19:76:55:4a:97:3a:
         b6:c0:7c:50:11:c8:5c:45:c8:d4:61:ad:25:8a:b5:9f:2a:a3:
         0c:1c:d0:49:2b:c5:59:b0:82:80:ac:0c:30:3b:8d:65:2a:88:
         3c:a8:26:81:8e:79:20:12:c5:95:dd:ad:9f:87:e7:73:fd:43:
         75:81:18:41:77:1b:15:58:2b:32:87:c6:3a:1d:74:a4:19:b0:
         26:98:c5:d5:87:16:45:25:c1:20:2a:ea:50:0b:7f:da:22:15:
         88:82:3e:e0:9d:77:1f:3b:08:05:b8:27:6f:79:c3:5c:6f:63:
         d2:c1:28:6d:a1:92:f3:ca:87:ec:9d:50:05:89:da:9d:03:4c:
         47:e5:68:32:33:78:9d:6b:9f:12:2d:bc:61:23:54:a7:be:fd:
         91:f6:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:19 2026 by rpki-client