Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
File:                     5d90001b-d20e-331c-8bd3-6c3305994bbd.roa (raw, json)
Hash identifier:          pNdS50gT4LyAsmDE67GfaxXOn7qSksPRPBZqhT/jZw8=
Subject key identifier:   B0:0F:8E:52:D2:29:73:88:56:5E:37:1C:BE:76:5F:C1:0F:57:04:2E
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584D65152D58B2F9B8FB91DAE080
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     53488
IP address blocks:        2607:ce00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2d:58:b2:f9:b8:fb:91:da:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=401957bd-4e45-41e9-a65d-34da52b84cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:c1:09:cd:71:d2:68:94:42:01:6f:1b:35:
                    ca:b3:5d:27:a8:f2:a4:52:2e:f9:86:ec:30:aa:5e:
                    6a:e6:8b:73:f7:3a:71:d1:e0:2d:f5:12:e9:b8:11:
                    c1:d3:6f:c0:a5:0d:d9:f3:81:41:56:4e:b8:2f:99:
                    61:aa:9f:4e:15:0c:3f:83:cb:76:d3:7b:d3:19:5a:
                    98:16:dc:b0:e5:a3:34:fb:33:93:fe:df:6b:5e:a6:
                    dc:27:72:f7:0d:ad:38:20:5c:e4:9b:4d:dd:90:f4:
                    ae:ae:1a:f0:3d:e1:53:aa:a7:35:ce:72:cf:9e:ec:
                    43:0b:22:2e:e9:23:0f:be:59:2f:36:4a:f2:ad:cb:
                    1a:ab:17:91:15:4e:f8:c9:91:89:6b:91:fc:0e:c2:
                    57:63:fa:b3:e3:a4:50:e7:a2:b5:a5:e1:f7:a5:92:
                    d1:6b:f7:94:f3:13:b4:fd:44:f2:7b:a4:cb:e4:ad:
                    3c:57:d0:f0:6f:08:69:88:4e:d5:da:eb:e5:c7:4c:
                    0d:3b:4e:c8:c9:ce:58:b9:42:d9:fa:da:87:0d:44:
                    78:d4:93:11:83:8d:d9:1c:0f:25:a8:fd:f1:01:f3:
                    95:c3:88:5e:4c:fd:83:30:d7:e4:d5:55:47:59:da:
                    d4:b9:ea:a4:f4:10:08:3c:85:25:7c:18:50:0b:b7:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0F:8E:52:D2:29:73:88:56:5E:37:1C:BE:76:5F:C1:0F:57:04:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ce00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:83:20:8e:25:91:46:3b:60:ef:32:a9:21:f4:96:61:2d:86:
         e9:6f:35:db:f9:ba:30:d1:3a:38:0d:c8:08:9f:76:62:68:4e:
         e1:1a:ad:ff:44:66:80:a3:53:eb:af:36:fc:3a:56:12:59:67:
         d0:79:48:d6:02:a7:0d:e1:ac:70:66:14:70:09:ab:1a:dd:43:
         78:1e:f7:b7:5b:de:f5:cf:35:2c:16:34:44:0f:c4:5e:b0:6d:
         c6:84:ac:10:c0:6a:fd:eb:c2:70:c6:bc:8b:04:3b:e1:5c:58:
         2f:6a:66:6f:62:3f:71:0d:57:32:1b:7c:43:90:42:54:53:85:
         ab:a4:c8:4b:e4:51:1b:9b:cd:42:d1:99:ee:83:dd:5d:d1:12:
         69:58:c7:17:b0:09:a7:c7:bf:2c:1e:7b:18:03:39:ab:f1:91:
         39:8a:4e:d1:e1:41:84:05:3c:50:ce:5f:1f:82:ef:07:97:32:
         09:74:af:86:6e:ff:13:64:91:f8:60:ad:76:99:5b:5a:2e:0e:
         ef:c8:17:6e:46:cf:9f:8b:ef:7c:9d:19:55:88:a0:6f:3d:89:
         08:ad:f3:f6:ea:92:88:8c:8f:62:81:d3:94:94:18:4a:e0:cf:
         7f:6b:86:fb:80:f2:2f:9c:94:bb:32:db:e1:ea:52:42:61:90:
         94:73:e1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:38 2026 by rpki-client