Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b87d1157-6514-3d18-8122-844af2b4950b.roa
File:                     b87d1157-6514-3d18-8122-844af2b4950b.roa (raw, json)
Hash identifier:          RVZj5eaPHcIcf7JgTUQzMHAHg3nXkKSJwLMVUn157qQ=
Subject key identifier:   3C:D4:02:76:C7:6A:D4:DA:17:D6:D0:10:50:AB:F7:F7:F0:EE:D3:2B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D100CFF1B7789C83C2F992080
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b87d1157-6514-3d18-8122-844af2b4950b.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     8987
IP address blocks:        2605:4300:2c21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:ff:1b:77:89:c8:3c:2f:99:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=71a257f2-459f-4732-b75b-b3693d97c9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:97:11:65:c0:c7:a4:24:77:da:2a:6e:ea:3e:
                    73:c4:69:9f:49:b3:f3:6c:b0:94:ec:95:68:0e:1c:
                    d6:63:4e:18:99:ff:5a:9a:3a:fe:32:b2:bf:b4:56:
                    45:29:f1:60:14:a3:50:76:ee:8b:b1:30:86:3d:57:
                    59:4d:04:cf:23:20:db:6f:f1:64:2a:db:dc:67:ae:
                    1e:f9:0f:c1:24:42:64:df:0b:63:ed:25:de:c6:7f:
                    88:e4:12:94:24:98:7d:66:05:96:2f:0e:29:30:32:
                    cd:27:ea:e7:71:69:3f:be:0a:2a:e4:75:f0:36:de:
                    42:de:4b:47:6a:51:ba:40:aa:fb:81:30:dd:d3:14:
                    b5:7c:00:a9:f4:a6:41:7d:a7:53:74:9f:99:33:9b:
                    c5:d7:2f:15:b7:bb:b4:20:0f:51:6e:c7:bd:f8:85:
                    e2:c6:c7:c2:cb:33:38:d7:08:cc:44:6c:d5:6e:5b:
                    22:b2:16:9b:09:dd:d1:0e:d2:cd:c5:84:62:7d:fe:
                    3f:e9:89:70:b8:e5:14:25:dd:f3:9f:65:99:09:64:
                    36:bf:b3:7b:85:86:44:ad:9b:b9:ec:28:dd:b7:4e:
                    13:d3:3e:87:2d:22:98:25:59:02:ec:d2:8b:ae:f0:
                    4b:08:90:7f:74:60:48:a9:30:04:a1:ef:8e:07:47:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D4:02:76:C7:6A:D4:DA:17:D6:D0:10:50:AB:F7:F7:F0:EE:D3:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b87d1157-6514-3d18-8122-844af2b4950b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:7d:47:cb:10:64:4b:ec:d7:1f:61:8f:79:42:be:42:1d:
         a6:22:0e:68:25:ad:18:6a:bf:0c:04:f9:50:90:40:e8:22:d5:
         eb:9b:7f:6e:ee:6d:d9:f2:f2:db:28:57:79:38:6a:f4:f8:6f:
         78:b3:e1:bc:72:7f:68:ca:52:ab:40:51:8e:62:a9:63:11:d8:
         c1:d4:5b:17:f0:45:31:66:03:94:6a:09:30:f9:4f:3c:44:61:
         3c:4f:2c:2c:82:da:9d:42:6d:3c:19:43:82:b5:f3:ec:45:67:
         a3:77:cd:02:63:5d:57:a1:ea:70:c6:31:ac:fe:8d:dd:01:fd:
         50:56:36:ca:a5:44:ca:83:f9:92:b4:72:e6:3e:b2:b6:37:ce:
         bd:6a:2c:0c:44:83:71:07:c6:8c:a0:3e:35:a5:1c:55:ad:b2:
         48:eb:45:e8:70:15:91:b4:79:65:74:74:39:f8:9e:a6:55:a8:
         5a:77:f3:cf:39:4a:62:8d:61:be:ba:f3:30:bf:a9:9a:d4:e8:
         78:0e:43:43:56:b6:b9:3b:ae:60:46:45:fb:74:60:c7:e2:7b:
         8d:56:34:12:a7:2a:f5:6b:57:59:4f:8c:ee:45:fb:09:ff:25:
         e0:55:04:6e:5d:ed:39:04:1a:59:f1:5c:0a:ce:c7:87:21:4d:
         d3:73:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 14:25:39 2026 by rpki-client