Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa
File:                     66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa (raw, json)
Hash identifier:          BfUgAaNqhMRPHxQXhuzfutPo9jsifnzwcuCG9GdbaLU=
Subject key identifier:   C2:BF:3E:7E:D5:46:AF:23:63:C0:8A:B3:43:BC:A5:41:EE:D1:49:9F
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584D60E4FB2D2CDF6F8EFE36B780
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     6128
IP address blocks:        2001:48a0::/32 maxlen: 64
                          2600:4800::/28 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fb:2d:2c:df:6f:8e:fe:36:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=80757615-6126-4b0b-a1d2-09d954bdd48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:d1:01:91:90:80:87:18:33:7b:a3:87:98:81:
                    75:fc:e2:a0:15:e1:ed:ca:32:73:de:4c:65:e4:b0:
                    28:20:ad:b0:5b:99:1e:05:62:c7:08:89:8d:f7:a9:
                    ce:60:db:e0:7f:8d:4e:77:b1:60:96:29:26:02:5e:
                    04:2e:d2:d6:9c:8c:77:5a:82:51:1c:62:8a:41:50:
                    dc:47:80:e9:32:df:22:96:71:7a:72:4e:9b:6e:8e:
                    51:4e:65:59:37:4d:b0:9f:86:25:2b:b6:c1:16:8a:
                    02:97:0a:98:f1:6f:e2:dd:0a:93:db:1f:82:10:b9:
                    f6:56:29:53:a4:d8:9e:72:b1:cf:15:e8:cc:8d:95:
                    23:e9:f3:aa:21:7a:a5:5a:18:74:b0:d9:cd:f5:79:
                    b1:0b:7b:09:59:95:b8:63:19:8a:25:2d:d8:31:53:
                    e2:f0:f9:f1:51:5a:e2:4b:98:6e:21:c7:12:fa:6c:
                    2e:7d:69:f3:f4:e2:2a:3f:6a:c4:f2:44:bd:95:e2:
                    b8:f5:9f:42:00:c4:4d:d4:bd:14:aa:f3:b5:c7:ab:
                    68:2b:ed:a1:6e:fa:0d:5a:5b:4d:69:92:ac:09:97:
                    26:c3:1b:a8:c4:c6:b5:3c:06:5e:22:9b:a2:f1:00:
                    ff:2e:80:e1:58:0b:43:33:ac:8c:0c:f4:8f:fd:ba:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BF:3E:7E:D5:46:AF:23:63:C0:8A:B3:43:BC:A5:41:EE:D1:49:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a0::/32
                  2600:4800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:17:6f:0b:3d:de:66:47:c2:a8:33:d8:e5:fa:6b:ef:f9:fe:
         92:3a:32:a0:87:1f:aa:f1:b5:07:08:f0:77:7e:df:a8:8e:61:
         53:75:bb:f0:dc:b9:bc:58:75:a4:bf:24:52:2b:f0:d5:00:81:
         c2:7d:a8:74:4f:5a:29:a1:63:ca:19:d3:4e:b7:3f:76:dc:f5:
         12:32:91:47:0e:c1:cd:10:79:c4:b7:41:a0:bc:df:ba:56:6b:
         ac:ea:d6:71:ca:f8:60:44:91:63:92:80:7e:d6:c5:87:ce:79:
         ce:41:16:03:c2:db:76:47:b9:e8:75:04:69:df:48:5d:f0:ec:
         e9:ac:09:cf:3b:a9:0a:9c:52:c5:10:1b:bf:bc:d1:15:ab:ce:
         bf:20:a9:49:4a:a8:93:9a:52:a1:34:a2:66:10:2a:75:11:21:
         97:36:c0:57:95:5a:0f:06:e8:21:72:2f:62:7f:c8:47:74:3e:
         81:f2:65:6a:7c:59:83:77:f9:e4:ef:b6:6b:d1:f8:b3:43:6f:
         8f:90:fe:5d:68:49:06:f4:1f:08:20:cd:f5:a6:1c:9b:fa:39:
         25:ce:8f:65:00:dd:60:0e:bb:2c:9f:a4:82:06:44:dd:a1:8d:
         d1:e1:31:65:7c:a7:f3:9d:1e:4f:74:f6:b8:24:ad:c5:40:e2:
         61:4f:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:37:48 2026 by rpki-client