Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa
File:                     4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa (raw, json)
Hash identifier:          fHm7lbgF8Q6ip4qjuGy5A72yPf9s7YPzuJ/IHd49Sso=
Subject key identifier:   DF:60:32:85:95:0D:D3:24:82:43:D5:FF:7D:7F:D2:D2:9F:32:7D:A5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFD05790CDCFEE002F3ED0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        2603:3015:2d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:d0:57:90:cd:cf:ee:00:2f:3e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=4573aaab-f1aa-4ee5-93e5-39840f7a23cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:e1:58:2e:5b:ac:e6:8c:da:98:de:0f:fe:
                    8d:17:72:38:48:e2:56:9e:54:57:a4:31:62:96:f4:
                    d8:d3:79:a3:c9:76:2e:a7:4b:39:5f:bb:75:3d:55:
                    2d:bd:d3:8f:ca:2a:a9:7c:18:1a:98:53:41:d2:c4:
                    7b:d1:f5:11:6f:54:0c:34:83:50:5d:25:df:44:a3:
                    79:db:45:8c:38:6f:4c:6e:8c:36:f9:d3:58:d7:70:
                    aa:e0:b9:e6:f7:76:9f:5f:85:47:8e:50:92:43:94:
                    5c:2e:db:75:90:5c:f1:50:52:c6:7f:84:c8:ef:41:
                    2e:65:46:14:ea:40:fe:e4:e1:36:4a:0f:48:f2:fa:
                    26:41:25:03:ed:c1:92:0a:f9:7b:9f:1e:71:42:3a:
                    b8:c6:2e:ee:54:ac:88:c3:7d:ac:07:cb:32:88:a5:
                    89:ce:39:ce:ea:ab:ca:c2:04:a8:4e:39:e1:34:ff:
                    a1:a8:4f:05:40:de:58:f5:2d:c0:12:1b:e3:fb:96:
                    1e:6a:51:65:c7:93:30:93:3c:5d:e3:74:84:5d:84:
                    d2:ac:66:93:a8:3e:f2:48:66:35:48:52:1d:7b:96:
                    8b:8f:10:93:fe:08:bb:20:9a:bc:17:ed:1c:f5:df:
                    60:8d:4c:b9:0b:06:20:a3:bd:10:36:3f:13:70:a5:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:60:32:85:95:0D:D3:24:82:43:D5:FF:7D:7F:D2:D2:9F:32:7D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:2d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:05:b1:5f:c3:7b:28:ca:56:78:4e:f2:4f:22:d4:bf:67:a8:
         cf:0f:6e:a1:0b:c0:ee:03:fb:c9:eb:45:d9:04:a8:ac:a7:d3:
         48:a1:79:8f:7b:8e:b0:78:c1:65:19:e0:e4:ca:9c:98:5a:bb:
         ee:bc:07:e3:2b:f5:1d:f6:be:5c:1d:0a:42:7f:c6:b0:60:31:
         5c:9d:ce:ec:aa:ff:71:3e:44:c3:6a:3d:a9:85:6c:44:03:b2:
         95:96:08:5e:06:31:fd:c5:73:3d:39:6c:6b:1f:0c:5a:1c:2a:
         e2:ef:db:73:d9:c0:dc:87:af:e8:d2:6f:d9:82:70:75:f8:b2:
         cb:be:f5:00:17:c4:44:de:24:ac:07:6e:50:1b:0e:3d:52:54:
         6f:1e:41:da:39:ea:2f:32:bc:9b:75:e0:2a:be:4a:ac:83:86:
         dd:74:67:1e:fa:dd:2d:62:d6:e7:b5:54:4a:26:2d:e4:78:d5:
         ec:c7:99:73:01:eb:36:8b:68:f1:d4:ba:ed:1b:f5:0f:2d:d2:
         88:41:d0:6b:78:fb:e9:a8:59:b6:01:6c:17:3b:b2:91:49:a0:
         96:fb:7a:2f:ca:6a:22:63:c1:97:49:48:28:eb:15:93:ef:8c:
         d8:c8:ec:e2:72:7b:82:22:c3:be:76:b0:1f:dc:0f:83:81:d7:
         ce:36:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:34:16 2026 by rpki-client