Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa
File:                     08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa (raw, json)
Hash identifier:          /vDpPztYEnb/B5RvKs9s8ubLDhglfOejYhmOKlRBd5o=
Subject key identifier:   04:14:2E:97:D2:1A:30:F7:FF:D8:81:5C:EF:F6:74:47:09:67:1E:B1
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584D571FB62AE7D47C08F1683A00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     28753
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b6:2a:e7:d4:7c:08:f1:68:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=0f3cbec5-ad34-420e-b9d9-6f2b2210fe58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:63:61:fd:c7:35:c9:0b:48:2d:29:cd:37:43:
                    34:a4:90:68:06:48:4f:c0:87:8c:aa:59:ad:32:a6:
                    8b:24:58:57:c7:e4:b9:00:88:b4:0d:41:4e:12:8d:
                    a9:00:1f:19:48:d5:9f:06:c1:bf:45:a5:9e:53:a1:
                    85:4c:1f:b1:cd:23:7a:c6:26:ad:5d:5c:6a:fc:0d:
                    a7:c5:f9:0b:8a:49:c1:d1:e0:a6:35:3a:65:e6:dd:
                    33:ff:b3:23:a7:63:b0:e7:43:85:49:9d:29:4f:c6:
                    9c:7d:62:8c:98:56:64:b7:61:18:e9:26:ef:1e:35:
                    a5:99:6b:01:eb:44:ad:a6:8b:6b:da:62:74:f8:7f:
                    d3:d9:8c:e0:60:3f:71:72:a4:d8:e6:78:03:f8:6b:
                    d5:68:01:52:e2:71:ba:12:2f:81:2a:27:72:b9:1e:
                    c8:c8:f7:b0:dd:ce:ad:c6:d9:94:f2:10:96:7a:68:
                    54:e0:cf:97:93:b6:31:96:9f:05:d7:50:32:4a:82:
                    d6:34:87:9a:13:1b:e2:b5:4b:15:42:80:4d:56:c9:
                    74:7b:fd:30:ea:c1:8d:fb:e1:40:42:b0:b2:a8:cf:
                    3a:a1:8f:85:cd:d7:a2:04:74:27:a8:71:53:83:1e:
                    f6:c3:8b:b0:91:23:00:83:c3:55:91:e1:2d:02:d5:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:14:2E:97:D2:1A:30:F7:FF:D8:81:5C:EF:F6:74:47:09:67:1E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:54:b3:ec:53:52:12:ae:fb:8f:de:0f:af:7f:c8:67:70:
         1c:51:48:29:6a:62:41:97:8e:03:10:f8:c7:f0:c9:16:81:85:
         3c:ab:05:5d:9d:3e:8a:ec:40:17:ed:1d:99:8f:dd:a0:b2:38:
         e2:58:ed:ef:a6:10:a1:d1:54:ce:54:8e:5c:3c:02:63:3e:89:
         0c:0d:74:87:6f:74:3f:1a:d3:ba:6d:57:9c:ed:67:5f:ce:23:
         9e:68:06:7f:88:43:79:9a:41:34:22:cf:71:96:5e:4f:3e:d4:
         2e:2b:ed:eb:57:79:ef:0c:93:59:65:a6:ca:a6:c5:70:75:8f:
         08:fa:a9:4b:ce:56:81:74:10:42:26:4a:f7:f2:1e:b8:c5:d7:
         2e:77:d2:d0:0b:79:6d:41:09:9c:48:b3:07:7e:1c:59:76:89:
         8d:19:a5:d9:7d:28:b5:c7:65:d8:4f:46:68:57:ef:a8:be:6d:
         47:26:dc:7a:8b:f3:67:22:3e:7e:0d:40:9c:15:16:fc:ea:54:
         d8:a4:ed:74:61:ee:34:b9:e0:3f:c8:98:6d:0e:36:b4:20:c6:
         ea:ea:23:0f:6b:01:fe:20:0a:a2:ea:a0:58:7b:89:ec:6c:c3:
         21:43:6b:6d:28:ec:27:30:28:d7:6a:95:38:f2:6c:45:af:92:
         66:78:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:32:43 2026 by rpki-client