Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3e6a023-f8b3-32fa-818a-eabceac6471b.roa
File:                     a3e6a023-f8b3-32fa-818a-eabceac6471b.roa (raw, json)
Hash identifier:          BjPGcGgMr95RY/nRJjOe9EJ+4yKmWa/LM8ixYmLfk5g=
Subject key identifier:   36:16:59:0B:99:ED:64:86:0D:25:FC:87:95:04:57:23:89:6F:81:DC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D00B2797D7A6B5DBE3A6D3580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3e6a023-f8b3-32fa-818a-eabceac6471b.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     33363
IP address blocks:        2603:9015::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:79:7d:7a:6b:5d:be:3a:6d:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=613bf0e0-5262-4240-9aed-cee0288400fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:26:fa:ea:93:eb:39:48:37:0d:39:37:43:
                    2e:46:42:20:f0:65:c3:b7:db:02:54:41:76:1c:cd:
                    1e:63:a0:24:32:10:ad:f1:e3:46:21:52:a4:6e:be:
                    20:1b:72:3e:62:f4:67:a8:2b:97:c8:ac:8a:2e:bb:
                    79:d5:07:58:a1:59:1c:ca:21:42:95:92:74:71:ba:
                    8b:c8:a3:06:a8:4e:dc:84:77:cc:65:0c:cc:b1:ad:
                    d9:bb:3b:80:5c:dd:a1:30:83:76:a1:0f:f3:83:38:
                    a4:34:5f:29:e2:cb:7e:ea:24:49:a0:d9:f0:81:3d:
                    87:28:4f:44:d1:68:57:09:ce:df:e6:04:11:24:de:
                    56:84:7a:af:b8:2c:53:ac:c1:98:4c:ee:8f:99:99:
                    98:af:fd:15:69:c7:92:2b:dc:67:41:77:67:72:bf:
                    90:8f:a6:43:91:38:51:aa:d9:07:03:f7:cb:3a:09:
                    d6:2b:d3:b6:54:d9:8c:f6:39:38:cf:c6:c3:30:36:
                    8f:48:64:72:1f:5b:fe:cb:7c:e7:90:19:6e:d9:22:
                    12:56:fb:59:7b:04:cb:c2:bc:20:79:b6:c9:56:ed:
                    62:ff:f4:9d:46:86:32:55:29:77:4f:12:b1:18:80:
                    ef:2d:cc:1d:a1:de:07:fa:91:2c:6f:19:e2:f4:be:
                    a1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:16:59:0B:99:ED:64:86:0D:25:FC:87:95:04:57:23:89:6F:81:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3e6a023-f8b3-32fa-818a-eabceac6471b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9015::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ab:0c:16:49:9a:cb:57:9d:76:88:59:55:2c:1a:03:4e:2d:
         18:22:b1:7a:5b:25:25:06:5e:0c:56:31:a1:c7:d2:47:b9:72:
         af:73:59:f7:d9:1b:39:6b:95:87:64:56:f5:02:0d:ee:17:66:
         b2:ad:85:b1:51:01:9b:93:f3:c8:9d:c3:23:25:ba:1f:0b:57:
         62:90:e3:07:1b:de:96:69:88:52:ae:40:c1:1d:6b:65:1c:f9:
         30:a4:8f:64:6c:61:d6:33:91:a3:93:bb:52:37:ab:56:6b:37:
         9c:df:c0:a8:55:4b:07:69:b2:a9:35:c3:50:bd:22:09:5a:80:
         fd:89:ba:e8:77:6a:b0:df:23:fa:92:68:23:59:3c:71:88:24:
         a3:6f:c8:7e:51:50:e3:1b:fb:11:31:4f:bf:18:a4:15:ce:6e:
         23:91:ea:bf:a3:5f:cc:39:ab:29:f9:23:a0:87:2a:11:fd:0c:
         1f:22:65:3f:57:85:2b:52:13:91:1d:ab:aa:d7:a4:38:f3:6e:
         8c:72:e0:5a:43:65:8e:6d:fc:a8:8e:21:74:a4:9a:c0:b3:5f:
         ff:11:c7:c2:e2:75:83:1d:fc:d3:e3:b3:ef:06:65:25:8d:cb:
         92:ea:7e:aa:a6:0c:83:6b:2a:44:f6:cd:f2:58:ae:d9:24:8f:
         db:1d:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:37:42 2026 by rpki-client