Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/889eaad3-a342-3ec2-bf09-f04a454875fe.roa
File:                     889eaad3-a342-3ec2-bf09-f04a454875fe.roa (raw, json)
Hash identifier:          v2lG6RWOrrTYRSyjdRqrp6741GwmpA4MYv8zR5BqmDM=
Subject key identifier:   BC:7A:75:B1:AE:C3:37:EC:5E:F4:F8:DB:40:32:50:CD:01:1D:85:77
Certificate issuer:       /CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
Certificate serial:       010D0C9F4328584D7995E158D97B9E5DE8C32C00
Authority key identifier: D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/889eaad3-a342-3ec2-bf09-f04a454875fe.roa
Signing time:             Sat 11 Apr 2026 21:16:23 +0000
ROA not before:           Sat 11 Apr 2026 21:16:23 +0000
ROA not after:            Fri 10 Jul 2026 21:16:23 +0000
asID:                     401815
IP address blocks:        2604:1760:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:79:95:e1:58:d9:7b:9e:5d:e8:c3:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
        Validity
            Not Before: Apr 11 21:16:23 2026 GMT
            Not After : Jul 10 21:16:23 2026 GMT
        Subject: CN=79103610-1672-4866-a7c3-62d846bf044e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5d:fb:6a:69:f9:9e:e3:79:3c:d8:95:92:0c:
                    3c:c3:11:3d:60:0f:82:f1:b8:2b:65:54:57:c1:ba:
                    e0:85:37:ee:12:50:05:b1:a2:7a:01:0a:0c:6e:62:
                    35:bb:82:5b:0f:dc:47:35:d1:7b:5d:8c:c7:67:c1:
                    e3:51:fa:9f:e3:76:20:f0:5a:d5:36:7b:69:9d:e0:
                    ee:b4:13:f9:0e:a6:63:a9:1b:84:f0:5f:d1:50:37:
                    75:0a:2f:c2:86:fc:c5:37:18:1c:fc:cf:83:a4:59:
                    60:72:dc:cd:54:4b:7c:a7:81:72:19:02:3b:25:6a:
                    08:d0:1d:ba:74:21:38:74:d7:20:ed:de:e0:36:ae:
                    0d:db:be:9d:f1:13:c0:35:3f:35:f0:04:16:1f:ea:
                    ca:0b:80:3e:45:5c:77:28:e5:82:c6:4f:0f:a5:f1:
                    2e:fc:99:74:46:83:e3:b2:83:58:83:ab:29:9b:bb:
                    4e:eb:e5:44:2e:b6:24:e7:35:61:74:76:3e:63:f6:
                    6e:74:d6:95:d0:6c:aa:c1:2d:3e:03:4e:02:99:6b:
                    9f:df:97:be:58:8d:a6:88:9f:87:8e:a2:bd:d2:fc:
                    a8:fb:69:33:22:ff:00:f7:de:5b:39:59:54:f4:4e:
                    5b:db:26:8d:d4:9f:eb:a4:10:5f:4b:ff:27:af:85:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7A:75:B1:AE:C3:37:EC:5E:F4:F8:DB:40:32:50:CD:01:1D:85:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/889eaad3-a342-3ec2-bf09-f04a454875fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1760:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d9:0a:7b:2d:8b:de:2c:c4:99:a2:b0:05:b3:97:93:92:6c:
         4c:a0:c1:c1:00:39:e1:b1:6d:7a:5b:58:00:10:48:6a:d1:08:
         55:9a:68:84:8d:4a:7b:f6:97:1f:f3:46:2c:93:b6:67:71:1c:
         95:07:85:77:cb:39:ab:7f:a6:e3:b3:2c:eb:db:db:c6:90:50:
         0e:3a:e2:2d:50:95:83:85:b2:6e:17:91:67:e3:ac:7f:0f:0c:
         c2:9a:50:dd:fc:76:60:e3:3a:4e:e3:46:dd:76:1a:05:de:a2:
         8b:89:e3:4e:fb:1d:84:00:cd:bc:ac:b5:ac:9a:a2:13:39:df:
         d5:ca:ac:86:64:d6:fc:46:7d:aa:37:e1:08:fb:86:b4:43:f9:
         16:47:02:7b:32:4e:02:59:44:57:fe:3e:8b:ac:71:42:af:eb:
         23:fd:60:56:01:c6:ed:d5:67:54:c0:5c:f0:3b:22:50:e8:1a:
         80:9e:c2:58:24:fa:f8:a1:23:4a:73:77:45:2e:8e:69:45:26:
         64:53:94:3c:3d:59:99:2e:39:77:4d:fd:d0:dc:52:8f:37:ed:
         92:19:1b:e9:15:69:9f:b2:44:9d:17:4a:37:a9:1e:af:1b:c4:
         05:00:94:53:09:07:e2:fd:85:92:26:fa:3c:ed:c3:b4:7d:7d:
         26:a3:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:46 2026 by rpki-client