Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c57db79-bf18-3a38-b9c2-1995b96a055c.roa
File:                     3c57db79-bf18-3a38-b9c2-1995b96a055c.roa (raw, json)
Hash identifier:          2rRZMufIVx80+Nmlg3R7c+MWBT1CpIC457LYR1awTqw=
Subject key identifier:   59:BD:8B:FB:B6:30:C8:4F:68:BE:EF:73:BD:87:9E:07:05:56:0E:0E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584C5EC6E3558C8747144EC12480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c57db79-bf18-3a38-b9c2-1995b96a055c.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     33363
IP address blocks:        2605:a401:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c6:e3:55:8c:87:47:14:4e:c1:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=c621cab5-c327-438b-8f57-f88f6749da57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:ac:1a:16:03:3a:ff:81:b7:02:b4:fb:e7:
                    12:01:16:24:e9:b0:71:84:86:09:5f:e2:a1:5c:a8:
                    31:d1:8d:fd:d3:07:0c:cf:be:5a:ac:63:81:24:15:
                    0a:83:85:b7:05:6c:7d:d0:72:5d:4f:9c:ff:01:ff:
                    8e:5d:9a:91:c8:bf:0b:5d:bc:c8:c9:88:8d:c0:16:
                    60:27:37:7c:3b:49:58:7e:d4:5d:c3:fc:cd:7b:28:
                    0a:74:78:be:60:e5:b5:2c:7f:96:6d:c2:a3:31:ed:
                    72:d2:5e:63:27:0d:ec:de:da:7d:ad:9f:28:8a:59:
                    62:66:54:54:2c:c4:6e:57:66:4b:2e:07:24:bc:2c:
                    3f:1c:ec:df:b0:9d:d4:78:4d:e0:9f:a7:6d:99:1a:
                    79:5e:1a:59:b6:ad:bf:c6:bc:56:f8:c0:2f:6e:27:
                    e9:8e:c9:0c:ab:5d:60:5a:86:8a:33:3d:4d:a2:60:
                    0e:ad:15:43:33:49:4f:0d:43:e6:34:09:64:d9:44:
                    2f:db:4d:1c:a1:38:11:c7:67:dd:90:63:bc:51:c6:
                    a5:ce:af:89:26:97:2e:ef:96:e6:77:ee:bd:99:68:
                    6c:3e:44:b8:81:be:63:c4:e0:d7:3a:1f:90:a9:81:
                    41:a5:5f:a7:9f:c1:d2:8e:4d:8a:b0:3c:4d:90:14:
                    80:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:8B:FB:B6:30:C8:4F:68:BE:EF:73:BD:87:9E:07:05:56:0E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c57db79-bf18-3a38-b9c2-1995b96a055c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:c8:c8:3d:34:fd:17:b1:07:90:9c:b9:18:29:24:56:b9:
         97:8b:d5:cb:5a:c0:82:c1:18:54:7b:75:f2:81:20:bf:fe:c3:
         44:18:b9:86:70:2a:c0:33:cd:72:d1:7d:81:4f:8c:84:58:b6:
         d0:30:52:1b:aa:05:f7:f8:f6:50:54:db:63:61:e9:7d:f1:ba:
         21:cc:33:50:f4:c4:60:cd:75:1e:ed:ac:d8:31:07:32:c7:9a:
         18:9f:a9:90:a5:e3:3b:7a:89:9c:64:94:04:bf:d9:1a:83:43:
         04:73:2d:2f:ee:c7:3b:63:09:ce:d3:cb:39:b0:33:d2:d5:5b:
         39:69:07:90:b3:9d:d3:0e:49:ac:f2:c0:c2:95:34:80:9a:4a:
         ab:fb:6e:d2:ef:55:e8:1b:a9:b7:2e:80:cd:54:25:28:f4:a7:
         b8:e1:ff:b9:7f:8b:b5:f0:97:e7:37:89:02:60:50:2c:bc:00:
         8f:db:43:29:fe:e5:f5:c4:7e:dc:b8:5d:e4:96:da:8e:95:f1:
         6a:3c:e8:5e:66:17:c4:99:a7:d6:32:9a:21:96:ea:90:ae:c3:
         95:f3:ce:12:a2:4e:81:db:6a:88:88:a9:af:88:e1:3b:f9:95:
         1a:1a:d0:ee:5e:21:cb:af:10:ce:ef:fc:6a:ee:ec:1b:8c:4d:
         be:46:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:08 2026 by rpki-client