Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d4b35916-c5f4-39c1-b8ca-6daadd961177.roa
File:                     d4b35916-c5f4-39c1-b8ca-6daadd961177.roa (raw, json)
Hash identifier:          FOPbxBEQdAZ7vu01D7TRAdYCofzwaYOPQ559Ps/jdc4=
Subject key identifier:   D1:A1:2A:4C:08:93:30:56:D2:4A:BD:51:B4:55:F8:8F:24:C3:81:50
Certificate issuer:       /CN=d0677001-b062-4999-89f9-d882893f5a1c
Certificate serial:       010D0C9F4328584D04E244DA8586F3900AF68FC0
Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d4b35916-c5f4-39c1-b8ca-6daadd961177.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     27628
IP address blocks:        2607:ee00::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:44:da:85:86:f3:90:0a:f6:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=059668dd-5dbd-4ccb-87fd-9e68a8841971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:b8:81:fa:48:f8:2b:0c:55:9b:49:26:1a:
                    1c:e3:69:bf:e6:c3:02:20:08:7d:3b:6d:97:a9:e2:
                    bd:f0:b3:c2:6f:da:19:4b:9c:14:db:73:c6:f3:0d:
                    36:b4:64:0f:c5:ee:c3:f3:63:ff:fd:63:f0:8b:df:
                    1d:e4:22:1e:f0:14:6c:8a:b1:b2:73:fd:7f:d0:40:
                    78:d5:18:fd:ae:5c:84:8b:13:28:28:7d:c9:f6:42:
                    a7:9d:56:d9:e4:2b:85:9d:c5:e0:3a:49:8a:9d:29:
                    f7:04:9b:eb:a2:48:65:98:dd:85:ec:bc:4b:07:da:
                    62:78:de:12:eb:47:18:d9:ff:4e:0e:a9:de:4f:34:
                    b1:51:bd:1a:4c:de:fc:2c:b1:2c:38:67:f2:6c:f7:
                    6c:ac:19:9f:6a:ae:68:d0:5b:98:d5:ee:3c:fd:cb:
                    df:61:64:0f:9b:c7:8b:f0:ec:79:bf:6e:76:e6:bf:
                    56:91:3e:82:f7:12:40:52:3c:89:d6:32:c6:ee:85:
                    43:3a:90:87:fa:80:8b:c2:cb:9a:21:08:5e:ce:28:
                    9b:ca:7e:d1:93:46:55:11:da:2d:6f:b8:85:9c:92:
                    e6:2a:ea:63:99:38:7c:d1:3c:97:2b:56:b8:ba:30:
                    19:ff:a9:33:7f:26:6a:c7:e3:ed:7b:fc:b8:a1:02:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A1:2A:4C:08:93:30:56:D2:4A:BD:51:B4:55:F8:8F:24:C3:81:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d4b35916-c5f4-39c1-b8ca-6daadd961177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl

            X509v3 Authority Key Identifier:
                keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ee00::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ca:9c:0d:26:bd:71:99:68:27:45:0f:27:9d:98:40:cc:41:
         fd:57:30:92:89:fb:8f:40:21:b4:50:c8:70:a9:19:74:74:b2:
         2f:01:a0:1c:e4:7e:6c:f8:be:01:56:6f:a2:27:f9:73:50:b6:
         dc:ce:df:a5:e0:f3:29:25:bb:ff:00:07:4f:c7:07:ac:83:7a:
         1b:e4:ff:15:3b:aa:42:b8:81:eb:67:23:69:c5:46:4d:cc:a0:
         ed:aa:55:f4:2c:5f:12:e1:4b:70:65:bc:9e:98:4a:bc:4f:a4:
         ba:ad:30:98:a4:19:4a:45:01:36:54:3c:55:40:46:d6:f4:84:
         09:a8:92:04:ed:b8:e1:31:aa:fa:ee:62:6c:67:a0:56:99:83:
         07:90:9a:91:c8:19:78:18:70:31:89:ce:ba:9d:df:d5:cb:b6:
         bf:db:52:ad:be:8c:31:59:ce:e4:72:cd:eb:1d:25:5b:af:9a:
         6d:2d:fd:5b:34:85:c0:77:c3:42:8b:2a:7c:6c:40:3b:62:88:
         91:19:7e:e5:b0:f2:07:06:22:da:13:24:2b:af:64:74:f0:6b:
         02:81:af:fa:10:b0:4c:9f:5b:e3:63:5b:13:fe:ab:c3:61:6a:
         fc:c0:78:4f:cc:2e:59:0a:80:60:39:29:47:12:a2:31:8e:0e:
         30:e5:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:23 2026 by rpki-client