Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40df2267-583b-3a47-bc8e-7d162fb1f407.roa
File:                     40df2267-583b-3a47-bc8e-7d162fb1f407.roa (raw, json)
Hash identifier:          qhPjrrvMJ44TXwb+cT49VDWgHf8zKv9ZG+jbssPp/dc=
Subject key identifier:   A5:ED:6C:4F:74:B8:D6:84:98:53:49:E8:79:C9:2C:D7:45:3C:4D:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF76E674173E763D1939780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40df2267-583b-3a47-bc8e-7d162fb1f407.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        2603:2044:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:6e:67:41:73:e7:63:d1:93:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=60530485-57ab-4cf5-961d-a298481f4d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:f3:92:87:25:ce:4a:d8:d3:61:36:f3:36:
                    fd:39:1f:00:92:4f:18:58:d5:cc:09:06:ae:0d:38:
                    d2:2c:f7:cc:35:2c:57:0f:2c:3f:78:bb:00:82:78:
                    e7:8d:e6:24:24:87:52:8b:27:04:6a:ee:e0:d4:df:
                    ca:31:90:40:e3:4c:3b:bc:de:bd:55:c8:91:48:57:
                    3f:fc:c2:03:d4:4a:3f:ca:9a:b1:10:9e:50:72:e1:
                    c9:bf:21:97:6c:5a:e7:a9:0b:d7:ac:f0:2b:5f:8b:
                    d6:78:73:e8:eb:63:ba:be:3e:6f:91:94:63:e1:ca:
                    6d:92:53:90:95:39:98:d7:c9:71:23:75:37:f0:8f:
                    0c:39:2b:60:bf:d1:3d:33:f0:32:8e:ca:61:06:c4:
                    79:4e:a2:ac:86:68:73:6c:be:c0:ad:db:df:e9:7f:
                    d7:cf:e2:69:23:71:f7:63:d0:09:cf:72:c2:0f:48:
                    e8:d0:b1:56:81:ea:b6:62:77:c2:2d:9d:91:86:d6:
                    f6:f4:61:7b:7d:bc:40:9b:46:fe:6e:1d:59:1a:d2:
                    d8:4b:3b:ae:3e:1e:63:e9:75:17:cd:3d:fc:1d:bc:
                    28:ad:bf:24:06:7a:4d:0a:1a:49:9b:d9:de:b0:31:
                    30:a9:c1:78:63:7e:2a:40:69:a1:7b:cf:0b:56:77:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:ED:6C:4F:74:B8:D6:84:98:53:49:E8:79:C9:2C:D7:45:3C:4D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40df2267-583b-3a47-bc8e-7d162fb1f407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2044:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c9:d7:ff:4f:76:39:8c:b6:13:4e:a2:32:25:8b:f6:9e:01:
         bf:47:2e:d4:60:2f:68:79:0a:4f:11:7d:ba:e2:c3:f4:e6:dc:
         03:ad:77:fc:79:e0:7a:35:53:0a:c3:b5:5e:46:e1:b1:52:5c:
         f0:76:5e:ed:a6:7a:f7:cd:d7:c8:71:e4:d6:27:40:14:8d:86:
         d4:2a:2a:43:15:ed:0a:35:93:4b:d2:81:c7:86:52:b2:52:da:
         f7:d8:41:6e:e1:57:ae:31:6d:0c:1a:f5:3f:74:07:7c:fa:8a:
         3b:2c:0e:51:74:9f:00:60:75:db:0d:ec:59:7c:60:0f:a5:d0:
         9f:d1:25:dc:2f:49:e3:23:a2:41:68:f9:13:e9:b9:6b:05:e2:
         c5:29:25:94:1b:0a:74:ef:46:90:2c:73:f9:f9:ef:4e:12:16:
         56:8d:30:50:f8:4d:b3:6e:3a:b8:8c:67:b8:44:2e:a5:e5:52:
         2e:f5:cc:e8:a9:f5:97:8b:f6:69:49:75:7e:eb:e8:32:99:38:
         f1:6a:62:20:89:9a:00:10:ab:1b:a7:7c:45:46:59:e8:ac:6e:
         d4:16:6a:e5:59:cb:4d:8c:a6:52:03:1a:72:b4:23:d1:59:37:
         d8:64:24:3c:b8:86:36:3c:63:8b:83:95:eb:33:a4:22:a0:a4:
         97:56:7e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:30:34 2026 by rpki-client