Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/57d0c5fd-bfe0-3190-9a2b-130747e288d7.roa
File:                     57d0c5fd-bfe0-3190-9a2b-130747e288d7.roa (raw, json)
Hash identifier:          923Cgty0xUDXi4SMGDsukhqdxWKN47e2/PvMcK2jdNI=
Subject key identifier:   25:99:0B:5B:8E:60:10:6C:B3:91:57:6D:13:9D:9B:16:81:0C:AB:38
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584D571FB61EF7205E256B1B70C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/57d0c5fd-bfe0-3190-9a2b-130747e288d7.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     134351
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b6:1e:f7:20:5e:25:6b:1b:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=13f20a7a-075d-493e-b470-75b2711a60c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:55:84:02:90:eb:04:dd:34:45:23:19:da:
                    e9:f2:c2:40:1d:6b:e2:e8:f2:73:03:c8:f7:e2:42:
                    72:4a:0c:1d:00:2e:04:b5:43:e1:a3:b0:2b:23:f9:
                    c0:0b:17:c3:c9:22:e7:98:82:aa:8b:71:df:58:4b:
                    9a:22:75:16:e2:10:af:87:af:27:60:fe:9f:f9:6e:
                    e3:3f:02:11:fe:1e:54:48:f1:3b:a5:7b:36:42:ea:
                    77:ea:24:c5:61:5c:0a:f2:77:a8:e0:36:08:29:89:
                    56:82:82:ca:19:da:29:d6:1f:36:72:ed:81:02:76:
                    5a:94:9e:62:8d:ae:97:17:94:a0:49:ee:75:7b:7a:
                    43:92:40:6a:6b:98:74:78:12:2c:6a:6e:e1:fc:7b:
                    71:16:67:85:4e:ac:64:6c:20:5e:7d:9b:c2:88:b7:
                    86:50:78:3e:f8:77:18:14:27:e8:53:17:22:ad:a7:
                    22:9f:a2:45:de:83:b4:97:81:78:4a:a2:79:4c:80:
                    66:a1:5d:f2:c1:7d:94:e8:3f:22:07:59:52:7f:85:
                    2e:c8:14:79:df:b7:4c:54:77:9f:a5:45:f9:95:64:
                    ea:96:ce:8e:4f:64:77:e1:59:f3:27:35:0a:7b:d1:
                    c5:ca:cd:6f:12:2f:d8:6a:3b:60:66:7a:7e:a5:49:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:99:0B:5B:8E:60:10:6C:B3:91:57:6D:13:9D:9B:16:81:0C:AB:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/57d0c5fd-bfe0-3190-9a2b-130747e288d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:2b:98:27:40:52:69:77:6d:99:e2:d2:3c:b3:32:a6:c4:7d:
         9b:7c:86:da:ab:1f:4a:82:7b:e8:cf:79:a9:33:6b:77:eb:6f:
         d6:a9:27:d0:97:00:1f:49:ce:bf:65:38:92:41:aa:b2:db:36:
         71:26:05:6c:f5:08:69:05:10:8c:5d:93:d9:fa:e2:54:be:be:
         b2:12:59:b2:09:ef:1e:52:53:e1:4a:6c:a8:df:dc:01:7d:f2:
         72:1d:ee:fe:23:b8:b7:03:1e:6c:67:06:72:35:de:05:6b:ee:
         66:0d:7e:5a:c0:f0:c2:40:6d:17:bd:1b:05:8f:34:a1:13:b3:
         fe:e2:dd:23:2b:87:ad:65:fe:40:5b:41:5e:bd:59:64:40:d3:
         d3:cc:39:ea:b7:8c:c8:42:66:c8:0f:1c:27:8c:fe:a8:08:74:
         31:39:5e:60:fb:6a:b6:02:b5:5f:ef:34:85:d4:be:24:b2:39:
         6d:f1:35:2f:23:0b:24:a1:3d:5b:3b:9f:8e:0a:38:56:f2:08:
         93:d5:a1:60:24:47:e0:92:41:70:de:de:a7:2a:f1:a2:31:40:
         67:b6:d3:08:9f:61:18:3f:20:d2:c6:2b:e2:14:d2:9a:3b:e2:
         e0:67:18:e9:e9:c0:d8:86:58:6e:af:30:42:6c:b6:6d:4d:18:
         0e:d7:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:33:06 2026 by rpki-client