Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa
File:                     02490b1e-0527-346f-a427-fa83c48a1597.roa (raw, json)
Hash identifier:          SHWX7bYBVj9cFPjDBlmry1GSYAszmD/QXvsRTX/DILw=
Subject key identifier:   E4:EE:85:F4:C1:12:15:79:70:A3:0B:2E:F9:25:D9:66:B8:7E:E9:ED
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D24E0518F8CE91E27517B6780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        2607:f8b0:400c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:51:8f:8c:e9:1e:27:51:7b:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=a0476a09-5106-4f1d-80e7-3d3faaaa30d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:00:a5:3a:56:d2:f8:07:ab:32:cd:46:26:17:
                    36:dd:6c:ec:a6:16:0b:d6:28:25:d6:a2:4f:46:ad:
                    26:88:a8:e4:0f:18:a8:51:eb:83:64:85:f0:37:02:
                    45:3e:99:6a:cd:ce:78:e6:28:a0:46:6e:bb:b7:ec:
                    9d:cb:2a:ca:c5:b1:71:48:45:1f:fa:90:26:c3:ec:
                    24:fb:7d:cd:fe:d4:9d:eb:a6:30:9f:9e:30:1d:bf:
                    1e:4b:d0:bb:dc:e8:57:b7:0c:4d:0c:1e:0b:a3:1b:
                    97:e8:54:30:7e:d2:fb:47:a7:43:f3:2d:65:4c:26:
                    23:6e:35:ff:5e:77:f6:84:ee:96:e2:08:71:ca:29:
                    35:99:41:3b:d9:c9:a6:25:6a:a7:22:9b:53:ae:64:
                    5b:ae:4b:46:5f:c8:94:a0:6d:87:c0:b5:3b:0c:96:
                    b3:ec:ef:6d:68:af:f9:da:07:ff:f0:0f:b0:55:47:
                    34:e1:8a:bf:11:e1:92:9d:41:bb:ad:da:d8:d9:79:
                    a9:64:a8:74:65:99:f0:62:5f:e5:8f:87:67:50:b9:
                    6d:51:6a:fd:a1:30:91:e5:e0:74:69:8e:b5:0a:52:
                    17:4d:d0:d3:96:38:68:29:6a:de:95:76:88:30:8f:
                    7d:76:bc:cd:38:ce:db:e4:22:c1:37:27:06:9f:0a:
                    09:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EE:85:F4:C1:12:15:79:70:A3:0B:2E:F9:25:D9:66:B8:7E:E9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:400c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:11:7f:b8:f4:a4:3c:f3:ee:c9:27:35:77:cb:f3:36:dc:18:
         66:3c:23:7c:a3:65:a9:67:19:cd:15:f1:d8:e4:ec:12:d3:85:
         6d:dd:72:d1:93:d0:e2:05:d1:eb:81:97:ea:86:9c:06:09:41:
         67:60:8a:5f:5b:7e:26:a5:61:25:70:0e:c6:a5:f2:21:50:cf:
         b8:a5:7b:52:dc:a3:d9:74:5e:3e:da:f2:31:aa:e0:d1:ad:1b:
         dd:13:3f:37:91:e2:3c:04:ca:04:9c:c6:9a:81:b5:eb:18:08:
         3a:f6:a2:69:82:a4:d8:44:7f:e8:db:79:ff:ad:72:27:b1:ad:
         b9:f1:06:03:2d:84:8c:2c:32:46:9d:69:8f:e9:0e:65:94:ea:
         ee:7b:76:1b:27:ad:43:e1:ac:34:3a:86:69:b0:09:11:4a:3f:
         dc:41:52:09:2a:d6:c3:f1:e0:cc:9c:b5:a3:fc:9c:aa:94:ac:
         26:90:96:f2:34:22:62:68:e1:d6:f0:de:df:1c:68:34:ce:0c:
         15:b4:e8:33:c5:12:67:8c:dc:92:6a:09:d9:2c:ac:d9:f1:c1:
         f9:a2:02:c4:e1:e7:21:53:6f:64:09:22:66:07:4b:75:b3:9a:
         a2:d9:f0:c3:41:f0:23:8e:4c:5b:6b:fe:1a:4a:78:57:3a:66:
         13:fa:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:33:12 2026 by rpki-client