Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecac3bf4-88d5-32ee-a3de-78282fc46830.roa
File:                     ecac3bf4-88d5-32ee-a3de-78282fc46830.roa (raw, json)
Hash identifier:          BWSQD9ER/yGymKP/TAbQoQadmUuzikz0DoQzRS2R95g=
Subject key identifier:   05:D5:E5:B1:A3:14:CE:71:CC:82:6D:58:D9:38:8B:25:2D:AC:E5:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF73B9B558E7ED9557EB000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecac3bf4-88d5-32ee-a3de-78282fc46830.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        2601:8c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:3b:9b:55:8e:7e:d9:55:7e:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=6287139a-8d34-40b6-a345-829504cbb271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0a:e8:d5:d6:e6:3a:c4:0c:8e:9e:00:e7:b7:
                    f7:85:8d:fc:51:1e:1d:61:9a:25:dd:4e:39:9b:0f:
                    a9:24:37:84:6f:b2:41:ab:f2:8a:23:05:03:ca:43:
                    6e:27:c7:79:5e:e7:bf:be:22:90:86:bc:1a:17:37:
                    f6:f2:02:04:41:a3:90:76:d3:5f:e4:1b:ff:0a:6d:
                    20:03:02:ad:22:43:4c:eb:8c:2f:3a:71:6c:b5:c1:
                    f8:0e:61:2e:14:7e:48:5d:eb:6a:77:49:20:14:0f:
                    13:f5:c8:3d:ab:d1:d6:be:3c:3a:61:5b:53:45:e5:
                    74:3b:bb:7c:0f:f7:de:93:2b:62:25:2a:db:54:8b:
                    38:5d:79:ba:00:04:c8:f5:2c:11:e7:9a:e9:1d:44:
                    a0:75:1d:4b:44:46:c4:85:53:e5:e6:49:9a:59:83:
                    99:c1:1f:a0:e8:0d:fd:ca:13:c2:42:1b:76:0b:5d:
                    ab:94:b3:e4:54:1c:1f:4a:b9:86:5e:59:00:ea:f4:
                    69:f0:39:ba:62:01:b7:19:33:08:b3:d6:c0:0f:10:
                    58:fc:c9:49:98:6a:87:cc:55:11:69:aa:bf:34:1a:
                    3f:87:7d:1b:ea:10:9c:dc:d9:51:ac:b6:ae:6a:cf:
                    8c:78:88:42:0f:70:ce:bf:81:2f:7d:9f:a2:de:f2:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D5:E5:B1:A3:14:CE:71:CC:82:6D:58:D9:38:8B:25:2D:AC:E5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecac3bf4-88d5-32ee-a3de-78282fc46830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:8c:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:17:d0:de:fe:e6:68:81:57:e4:8a:a5:75:a4:78:db:0d:aa:
         0f:f1:7f:94:54:bd:12:11:22:04:5f:24:10:60:ca:23:78:09:
         61:69:15:ca:25:7a:9d:3a:9f:d9:7d:9d:07:77:3c:bb:11:30:
         a4:1e:f4:5a:17:4c:98:9c:56:af:37:5a:a4:52:31:ef:c7:33:
         1c:50:20:0b:85:bd:7f:53:ab:ac:bf:57:64:f7:fb:ad:6b:f8:
         6f:79:83:b7:50:58:7f:3c:e3:d7:df:28:c8:97:c8:96:ba:19:
         0e:1d:c7:50:b4:22:2b:d7:ff:ca:ba:4a:79:d0:c2:bf:d0:34:
         40:c0:1e:cf:c0:a2:f7:6a:a0:46:08:10:a4:c6:95:0a:2c:79:
         26:25:82:5f:be:64:eb:dd:f3:b6:b5:18:03:77:19:9c:e6:8b:
         ca:98:f3:73:4c:f7:bb:3d:38:7f:83:9a:af:82:65:9e:94:11:
         11:9e:b8:b4:3a:34:4b:0d:31:2d:60:82:78:ac:3a:45:7f:75:
         b4:e2:dd:3d:e5:38:5b:3f:6c:0b:a7:dc:e4:54:4b:1f:3b:9c:
         86:4b:38:ec:56:cd:8e:b0:b1:5e:82:f3:57:7e:4b:c4:ba:ad:
         4d:c3:7e:e6:b6:19:96:eb:77:51:b6:d1:88:14:91:84:22:40:
         97:af:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:40:25 2026 by rpki-client