Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa
File:                     1120f28a-f819-38ee-94b2-70a3a857d7b0.roa (raw, json)
Hash identifier:          7YiOTgmNwZuo8UFF/W7CpH/pCzTBhNDY9oNqzDTPaQY=
Subject key identifier:   49:8E:1E:63:7D:00:88:18:42:11:8D:EF:FF:AF:DD:23:B8:B9:28:B3
Certificate issuer:       /CN=206290f3-53e1-4d17-8678-29dace17c006
Certificate serial:       010D0C9F4328584D2644C3849DACC48FA1BD35C0
Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     33179
IP address blocks:        2602:fa21:10::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c3:84:9d:ac:c4:8f:a1:bd:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=cc38738d-b58a-4b5d-9ee7-752c0e8eb601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:3a:58:e0:05:1d:70:0c:89:6d:d4:bd:a2:
                    65:84:d5:89:39:fb:ab:ad:43:8a:0c:50:2a:08:d7:
                    62:9e:12:90:a0:07:24:79:07:8f:8d:32:51:e9:d6:
                    2e:8d:0a:f2:69:ab:8f:e4:5f:1c:26:55:dd:79:db:
                    2a:1d:ae:15:c5:30:17:99:c1:6d:6a:e7:94:c2:33:
                    45:36:93:18:35:27:52:43:ce:54:65:86:77:d5:1f:
                    9d:39:4d:db:41:bf:7d:ba:cf:b7:ac:c1:25:a8:90:
                    9b:71:22:15:8a:0a:ea:7a:9a:9e:6b:0a:aa:f2:59:
                    fb:c3:1e:89:cf:ea:46:5b:1a:07:76:7b:48:4b:cf:
                    69:bc:00:e5:6e:f1:c7:ec:69:42:95:ff:14:9f:dd:
                    d0:40:5d:4b:4d:35:2c:fb:ee:4b:1f:4d:79:46:78:
                    b3:c7:22:09:da:bd:98:40:ff:6b:a8:70:e5:cb:9a:
                    91:f4:34:67:35:e2:97:d1:49:b0:78:ff:e9:5e:14:
                    a6:15:29:72:f6:28:02:80:8c:f5:02:18:ea:b1:8e:
                    ca:f2:77:a2:cc:dc:44:20:6b:b9:fa:b6:04:ae:8f:
                    ab:fa:2c:2d:80:75:8d:1c:50:a6:ec:cf:de:5c:2b:
                    f5:66:94:09:05:9e:75:b5:b0:64:8d:ce:1f:99:a4:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8E:1E:63:7D:00:88:18:42:11:8D:EF:FF:AF:DD:23:B8:B9:28:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl

            X509v3 Authority Key Identifier:
                keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa21:10::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:f5:71:88:ba:00:14:7f:90:18:d1:c6:04:ea:12:aa:c0:
         a6:03:32:b1:ea:d9:46:84:80:2c:b7:e3:6e:8e:97:f9:ba:e2:
         ee:37:51:fa:a3:9a:90:46:23:92:0e:be:0c:ac:a9:ea:9c:59:
         d1:4b:26:89:6d:cd:80:8d:55:c3:3d:6f:6e:0c:f8:6e:92:cd:
         a9:5a:74:c0:2f:ed:3e:78:3a:9d:18:a6:43:e0:3b:0b:e9:1b:
         99:84:88:3e:47:1c:3b:b1:c5:9f:0c:63:22:68:2c:53:8f:18:
         bd:b9:16:74:60:48:b5:ff:bc:88:9e:56:3f:74:86:f1:b0:9e:
         22:4e:fa:b2:8d:fd:35:27:88:bf:eb:38:67:d1:85:7f:42:0a:
         29:2b:2c:c7:80:cd:1a:c5:3f:10:88:e9:a8:49:2f:14:27:5d:
         cc:de:2a:24:0c:4e:6a:1a:31:58:2b:1e:75:4c:3b:9f:30:2c:
         5d:78:bc:7e:ab:4f:66:f3:87:78:b5:26:cd:7d:90:36:c3:09:
         c0:06:fa:8c:19:eb:6e:45:f6:6f:11:4a:9a:2b:fc:84:ab:85:
         9f:2e:c6:bd:8d:ca:6a:92:a7:46:93:41:44:3e:d0:96:41:d6:
         bb:9e:ec:28:25:56:87:19:bb:fa:5d:10:20:fc:3c:68:db:c2:
         6b:bf:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:27 2026 by rpki-client