Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa
File:                     06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa (raw, json)
Hash identifier:          P2B6smwDB9G+DKpbb8USRPVgmcSRqEV/fI97B9dfgIY=
Subject key identifier:   3A:CB:09:7C:79:57:FC:6B:BE:8E:2A:3F:AD:69:AD:CC:7D:8B:4E:6F
Certificate issuer:       /CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
Certificate serial:       010D0C9F4328584D24E108448C878E5328F5AF40
Authority key identifier: A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     394725
IP address blocks:        2620:e4:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:08:44:8c:87:8e:53:28:f5:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=97315df6-3410-4d1d-8624-474045bc2ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:b5:95:b3:0a:a8:2c:3e:83:1d:af:bc:f2:
                    3c:dd:38:69:f1:fc:4b:da:01:51:72:70:99:76:62:
                    5f:13:d5:73:d9:39:24:13:a2:ee:7a:a5:4a:ee:ae:
                    e7:7e:d0:e7:d1:5c:a5:a0:9b:30:74:83:e9:2f:c2:
                    5a:47:f2:2d:25:37:e4:f8:2c:20:85:da:53:dd:df:
                    6a:da:a1:a4:39:8c:60:c4:b5:92:3e:c4:ce:bc:84:
                    bc:e9:a8:b1:f5:6c:76:23:4c:51:10:51:8a:11:1b:
                    11:17:87:8f:18:6f:f2:7b:17:84:e0:9d:ef:92:05:
                    58:0f:21:2d:d2:e8:a2:06:8b:91:8c:a4:c6:d2:1a:
                    c4:cb:8c:9f:da:30:f1:12:6b:0e:7e:de:7e:5e:a6:
                    45:10:8a:9b:a7:52:cf:bd:19:a8:6c:c3:82:3d:28:
                    5f:84:b8:4f:16:c6:fd:79:dc:fe:8a:8b:a0:18:0f:
                    70:62:fd:fb:90:c8:25:59:93:5b:b5:2f:cf:59:0f:
                    c5:27:8c:49:ab:d5:1a:a9:78:f9:b7:34:26:95:e1:
                    de:4a:5e:a8:cf:c6:cc:d3:4a:07:ee:ad:64:6e:3e:
                    5b:a1:15:0d:8f:91:de:cf:26:7d:e0:40:73:19:ef:
                    26:d7:a7:c2:8c:f0:3a:ae:b7:05:a7:66:d1:a6:c4:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CB:09:7C:79:57:FC:6B:BE:8E:2A:3F:AD:69:AD:CC:7D:8B:4E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e4:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:70:86:8c:12:96:a5:80:28:34:75:b0:80:11:67:c3:52:eb:
         0b:b5:56:e6:2f:2f:1f:ea:5b:89:9d:34:3f:f1:5e:7b:7c:dd:
         a1:8e:dd:c9:2d:c5:df:65:18:b9:1c:b2:1d:5c:d0:e4:47:4c:
         06:55:d5:97:68:37:6b:e4:0e:f0:20:85:f6:46:e2:40:7a:cc:
         65:4d:f8:27:30:0b:dc:ef:db:34:bc:d4:cd:25:3d:29:10:2b:
         cf:42:89:68:b0:69:5b:ac:60:78:9f:36:43:59:92:53:39:90:
         2c:1e:ff:29:36:75:72:73:52:62:3a:3e:c0:e7:99:13:7b:96:
         e4:5a:e4:0c:a4:6d:9f:96:93:8f:82:56:ad:99:0d:24:8f:1d:
         b7:54:e3:2a:ec:99:74:ea:6f:19:44:f3:85:b7:e3:fa:69:b3:
         ad:e8:51:da:7c:39:44:b6:f9:27:86:5b:7a:0c:f9:b4:1b:5d:
         11:68:cb:8d:1d:1d:93:fc:80:a0:1e:34:21:6f:9f:55:92:a1:
         de:51:92:62:5b:0c:80:38:28:f3:9a:39:93:64:ec:ac:25:93:
         ad:79:c8:6b:33:d6:c1:8c:f2:ec:5e:75:98:42:fe:04:e9:e1:
         48:0c:8a:51:57:fa:21:32:e2:4e:12:0f:35:0d:ce:00:8f:e9:
         9c:a9:22:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:59:19 2026 by rpki-client