Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e7df0-d9d5-343f-82df-50f9349aa927.roa
File:                     4d6e7df0-d9d5-343f-82df-50f9349aa927.roa (raw, json)
Hash identifier:          J4id23pQC1dQz6bujvpHGjx+p13bpGK78nFgGN53U6M=
Subject key identifier:   8C:B0:51:A5:92:C4:FB:63:D6:63:9A:66:84:A0:95:F5:83:AC:22:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3ACDF2D3E4A57615E6E560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e7df0-d9d5-343f-82df-50f9349aa927.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        2603:300a:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:cd:f2:d3:e4:a5:76:15:e6:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=c449bbc6-20c5-46c6-8de6-a2f780492e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:00:55:27:6d:d5:89:37:c9:ba:6a:cc:52:
                    ec:c4:fd:05:e1:31:67:13:9c:3b:7c:4f:12:1d:57:
                    c2:96:03:bd:b9:0b:54:df:b1:f6:2f:64:31:8c:5e:
                    33:cd:c8:48:04:90:20:e6:95:6e:c8:af:fd:b0:39:
                    78:d0:8e:d6:7f:6f:73:f2:92:d6:22:41:0d:fb:c5:
                    75:4c:4f:49:9b:29:80:f6:bb:7f:e9:8c:15:e5:a8:
                    10:76:6a:6b:06:8a:d1:b2:43:f3:92:e1:39:03:0d:
                    d8:91:73:51:af:69:aa:74:b4:ef:0e:c8:aa:52:1b:
                    30:6f:f2:85:67:7c:13:15:e2:29:a2:f8:d7:78:49:
                    c0:e4:d0:22:b0:55:47:1d:bc:73:ef:4e:b6:fd:1c:
                    73:16:0a:3a:a7:6d:86:db:84:66:59:a1:7b:dd:33:
                    7c:5d:7e:ea:c2:a6:91:fd:cc:b8:8c:b3:8e:8c:54:
                    03:5d:1d:b6:37:bb:13:87:b8:1a:88:6e:92:69:da:
                    82:13:6a:30:f5:4e:da:bc:63:bb:b1:d6:99:bc:eb:
                    19:1e:3c:e4:01:1d:58:72:50:5e:4b:05:8b:a0:3c:
                    c1:a7:f3:bf:5d:43:f6:46:6d:4c:11:4d:cc:79:71:
                    89:26:85:48:74:6a:d4:22:b7:aa:b3:b2:83:be:d9:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B0:51:A5:92:C4:FB:63:D6:63:9A:66:84:A0:95:F5:83:AC:22:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e7df0-d9d5-343f-82df-50f9349aa927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300a:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:0c:ef:63:be:38:b8:6a:c1:e1:6a:8f:3f:8f:a0:76:22:27:
         9a:ab:a7:2b:eb:75:57:31:3f:8f:2c:7b:9a:12:a9:ae:7a:73:
         39:d6:00:19:57:dc:76:57:f8:a4:ac:67:09:d8:b9:0f:04:43:
         a9:47:b2:80:3e:40:e2:c8:48:cc:f7:f4:cc:8b:87:8e:fa:99:
         7a:66:5e:0a:b9:4e:b0:42:2a:e7:24:6a:2c:2e:12:bb:85:2b:
         c6:6d:08:9f:fb:17:4f:cf:72:b9:d6:56:7e:3b:28:c9:ad:d4:
         b1:f6:61:30:96:af:d7:0b:7d:48:b0:31:7f:db:48:3c:eb:68:
         2a:97:f8:be:67:81:13:95:9b:77:9d:49:28:bf:8a:0e:59:3d:
         5f:72:61:71:cc:e8:a1:bf:f6:2f:61:6f:49:e9:4d:53:b9:ba:
         3c:af:68:cf:d4:7a:f2:a7:44:1a:d2:7a:be:b9:3c:cf:8b:f8:
         e9:15:f8:a1:ca:e3:1e:f1:d7:19:6c:4b:07:ac:5b:d5:29:9c:
         64:6d:cc:13:5d:c2:83:f8:07:21:de:23:b7:2a:0f:cf:54:98:
         5f:86:b3:83:27:22:53:fb:a3:dc:05:8b:e4:f8:84:c5:53:49:
         4d:78:b6:71:73:9d:dd:e5:7d:92:cf:c5:2c:bf:58:d9:5a:d3:
         84:50:80:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:12:02 2026 by rpki-client