Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/b01da2d7-1158-333b-83a7-47d3b804466d.roa
File:                     b01da2d7-1158-333b-83a7-47d3b804466d.roa (raw, json)
Hash identifier:          VtAioIPvs4sdYChFBQDfsa5YEjv8XfzbDzULXs8uSCc=
Subject key identifier:   16:80:6B:23:27:43:16:2E:B8:18:3E:BF:99:07:3E:42:67:42:5D:CA
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584DDFEB21B03BC90FF688543E80
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/b01da2d7-1158-333b-83a7-47d3b804466d.roa
Signing time:             Mon 18 May 2026 13:00:31 +0000
ROA not before:           Mon 18 May 2026 13:00:31 +0000
ROA not after:            Sun 16 Aug 2026 13:00:31 +0000
asID:                     36692
IP address blocks:        2603:5001::/44 maxlen: 44
                          2603:5001:3000::/44 maxlen: 44
                          2603:5001:4000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:df:eb:21:b0:3b:c9:0f:f6:88:54:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: May 18 13:00:31 2026 GMT
            Not After : Aug 16 13:00:31 2026 GMT
        Subject: CN=0be5c592-5f4a-434b-aafd-0f71effa647e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:5a:41:3d:ae:da:db:81:5b:bf:a4:68:3c:
                    5f:fb:56:e9:dc:33:0a:56:4a:9a:95:8e:e7:36:b7:
                    57:b8:03:f6:ba:cd:d5:a9:e2:38:08:26:6c:bd:a9:
                    46:0e:94:7a:e1:30:3d:ca:07:74:b0:da:a5:58:04:
                    c6:89:05:0d:2b:a8:29:d0:d6:ab:b4:58:11:8a:be:
                    2b:1d:33:10:99:7a:da:fb:92:53:32:90:82:15:59:
                    1b:49:e1:91:cf:66:c9:26:23:eb:26:41:79:16:d8:
                    cf:51:71:e4:96:f7:95:b6:2e:ac:ed:c7:71:d5:f3:
                    dd:d0:e3:a8:ed:c5:40:1f:e6:af:17:e8:bf:8d:48:
                    1f:77:c4:17:be:19:a9:49:56:18:e3:10:45:74:0c:
                    ad:0f:cc:1c:52:67:07:a3:28:20:4b:d5:ea:f9:fc:
                    51:43:46:89:9f:64:ca:7e:26:af:b9:19:eb:f5:50:
                    54:d8:bd:cd:d5:73:bf:70:82:d0:fe:cf:76:bb:d9:
                    8c:af:65:1e:34:79:b7:e2:a3:8c:bc:58:03:86:12:
                    15:51:3f:7c:3d:40:9c:b8:3d:34:67:ae:56:e8:74:
                    19:47:7d:e4:3b:28:57:8e:87:8b:86:b0:0f:e8:74:
                    a7:02:0a:49:aa:c5:30:ca:8d:7a:5f:91:95:eb:41:
                    97:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:80:6B:23:27:43:16:2E:B8:18:3E:BF:99:07:3E:42:67:42:5D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/b01da2d7-1158-333b-83a7-47d3b804466d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5001::/44
                  2603:5001:3000::/44
                  2603:5001:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:8c:ba:41:9e:e9:1a:02:b8:73:3c:77:72:e4:54:e3:75:
         30:c2:3d:37:50:4b:b6:44:3a:b1:4f:76:5f:f3:6d:c2:4b:8a:
         1e:da:47:ad:db:ca:8c:40:d6:56:cf:10:f3:91:10:7f:5e:de:
         43:a1:9a:d2:b7:a5:70:38:19:99:33:6e:7b:75:56:fb:3b:10:
         f2:ea:56:71:c6:2e:4b:52:bc:42:e7:05:eb:05:c0:52:4e:83:
         9f:57:f8:9b:f6:71:b2:e3:fe:78:bf:98:e9:5c:1e:80:4a:c0:
         fe:b6:ff:67:50:4e:c1:d5:36:10:9f:46:bd:c8:fb:03:7c:7d:
         89:d7:87:02:ea:00:4f:5d:25:5a:00:41:bf:8c:f0:97:f6:2c:
         07:54:de:0b:6d:a4:a6:f0:2d:31:9b:a9:75:20:67:6e:19:7c:
         ea:7c:8f:a9:48:a6:34:f7:98:82:38:aa:34:f0:e6:b0:93:35:
         dc:ad:e7:ff:6e:08:66:49:78:ae:64:5d:88:91:9d:37:e3:89:
         c8:d4:6a:4d:81:e9:83:cf:41:91:46:0f:8c:9c:3b:1f:87:83:
         a2:c1:53:43:bc:ea:be:fa:2c:31:7d:76:71:3b:45:11:ca:90:
         89:d5:6b:2c:cc:fd:09:b9:dc:8a:9e:7a:41:11:57:4b:5b:b9:
         ed:f4:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:29:18 2026 by rpki-client