Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/c7e8382c-9b60-35b0-a35c-9dc928aca465.roa
File:                     c7e8382c-9b60-35b0-a35c-9dc928aca465.roa (raw, json)
Hash identifier:          oh3nyLMxQxgND51GONazeDgSlPZzpCbhSxXL0fBFKbA=
Subject key identifier:   45:6D:03:B1:50:34:24:50:50:D5:78:8D:37:34:F5:A9:56:75:BE:8D
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584D100CFAF1AAB22891AB5392C0
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/c7e8382c-9b60-35b0-a35c-9dc928aca465.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     49
IP address blocks:        2610:20:6fcf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:fa:f1:aa:b2:28:91:ab:53:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=c8c2c90e-6efd-4d16-a1ad-5f66f86a9df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7e:52:eb:10:ef:d1:75:ba:fb:d0:55:8d:75:
                    dd:56:8b:ca:9c:f2:cc:a9:4a:a3:0e:b2:bb:33:4f:
                    6b:35:a7:23:f8:b3:43:34:54:0c:f2:19:e9:43:72:
                    39:66:86:01:bf:86:2a:d8:8d:1b:4e:00:47:0a:ba:
                    b3:b9:5f:56:bc:25:f1:98:7c:4a:42:17:ea:b6:c9:
                    ec:bd:60:97:bc:e3:3d:32:dc:5d:bf:41:e0:27:40:
                    5f:f9:a9:d7:98:f6:a6:52:5f:52:86:f5:85:a0:6a:
                    82:0f:e2:08:d0:b7:32:bc:44:d5:9d:6c:f0:ab:94:
                    7d:a0:a8:1f:a9:b1:67:0e:3b:ed:9a:7b:5c:c4:c0:
                    4f:de:80:b8:58:c4:b3:01:d2:2a:49:f9:ec:2e:4d:
                    51:f4:dd:30:4b:f9:49:cb:43:cb:07:06:a0:9f:2b:
                    c6:ad:a1:89:a9:86:d9:ec:45:a2:ef:70:fd:a9:90:
                    ab:40:3b:c9:bc:c3:83:89:b6:18:9c:00:56:bc:a4:
                    db:43:c7:a0:da:df:4b:86:95:95:7c:2a:74:bf:86:
                    05:cc:83:a7:f5:b9:9d:ca:6b:71:64:11:66:ed:07:
                    f5:a6:fd:8c:a7:a0:e5:17:6f:fc:d9:64:e4:b3:cf:
                    c1:df:f7:b3:6e:f7:b8:a5:46:d0:49:47:ea:cb:3d:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6D:03:B1:50:34:24:50:50:D5:78:8D:37:34:F5:A9:56:75:BE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/c7e8382c-9b60-35b0-a35c-9dc928aca465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6fcf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1a:42:f4:f4:1a:61:fe:53:51:f1:8b:28:b8:ee:56:1b:67:
         fe:0a:f6:9a:82:37:a7:ee:04:a4:ff:5e:81:cc:4e:7e:62:12:
         b6:c3:78:e9:f8:ea:08:0d:f1:48:a2:51:96:57:7c:cf:6c:2a:
         cd:db:65:e6:ad:01:f5:12:9f:ac:a2:7c:71:1e:e7:a2:c0:43:
         57:bf:91:91:dd:5b:f9:19:47:ce:b3:fd:e6:bf:17:7b:9c:51:
         35:a3:89:12:d7:eb:74:f5:3a:3e:3a:0a:0c:a6:41:36:55:1a:
         17:55:9e:18:5f:f4:3e:fd:6f:71:83:b2:66:9b:3a:7a:96:72:
         28:6b:33:1b:7b:55:b4:b8:41:46:ea:64:55:68:a5:85:14:a4:
         d7:d6:3f:af:22:5b:fc:1e:6b:d5:8f:48:40:ad:a6:43:65:d7:
         3a:d9:3c:13:b1:df:0a:af:37:1c:10:71:dc:9f:99:14:27:72:
         8a:00:be:8e:30:e3:11:d6:48:ae:c9:c0:14:2c:a9:26:4a:cc:
         24:71:57:f7:4e:ad:9c:5a:68:c4:3c:36:85:5e:f5:af:49:e9:
         7b:53:7c:9e:20:45:73:8b:7a:95:c5:91:d3:7a:cd:15:07:a4:
         72:4d:2e:d5:22:58:a0:fe:1b:bf:72:d9:27:e7:5a:25:75:e0:
         7f:48:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 14:56:22 2026 by rpki-client