Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb5c803f-8bb1-38d4-bcc9-3ac62c1036e7.roa
File:                     fb5c803f-8bb1-38d4-bcc9-3ac62c1036e7.roa (raw, json)
Hash identifier:          u6RN5ELYTXLEcKS+BXUrsuJOUPFyR6D7DxepGzw81MA=
Subject key identifier:   58:3C:38:D0:58:84:51:34:28:36:8F:DD:B2:FB:3D:5F:33:9E:10:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF77D2F17D15898082A8AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb5c803f-8bb1-38d4-bcc9-3ac62c1036e7.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        2603:2244::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:7d:2f:17:d1:58:98:08:2a:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=3a4496d5-282f-4ced-b276-15cd0e7b09ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:e7:69:93:83:11:69:c4:96:cf:b9:61:70:
                    ac:39:ca:2b:ef:ab:d0:5e:4d:20:de:13:d7:cc:0f:
                    ec:7d:b1:6a:19:d2:61:96:1b:af:34:20:ca:cf:c0:
                    86:b3:01:6a:33:ff:c5:f8:14:e9:ff:25:ba:84:5b:
                    dc:21:3b:fc:69:7e:26:f7:1c:6b:ec:fa:80:39:ef:
                    2f:f4:2b:00:31:f7:35:a2:52:f9:56:c9:19:16:60:
                    99:5e:02:8a:b5:db:15:7c:8a:67:e7:ea:e9:57:e5:
                    80:2e:1f:09:08:d0:c0:b1:d7:49:b4:c6:66:06:6e:
                    4e:bd:4b:cb:64:ea:72:16:bb:09:3a:c3:07:02:7e:
                    9e:ca:12:bd:78:2d:b7:b0:7c:15:b0:f6:07:a8:ca:
                    0f:3d:51:21:f5:39:d0:e4:18:06:a3:9c:d6:00:e9:
                    de:32:ff:e2:ea:3c:5c:6c:2c:65:e0:26:9a:48:2a:
                    89:54:83:21:0a:3b:3a:9d:7a:25:ca:60:d4:a2:dc:
                    3e:8c:2a:c2:ac:85:95:88:ca:89:36:c1:f1:f5:50:
                    a9:be:67:3c:a8:49:9f:f5:b8:5b:1d:ce:fe:05:c2:
                    ab:57:3b:a2:1d:84:4c:82:c1:14:2e:4d:b3:65:6c:
                    f1:01:f1:2b:db:46:04:68:a2:31:1e:cd:89:df:b3:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3C:38:D0:58:84:51:34:28:36:8F:DD:B2:FB:3D:5F:33:9E:10:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb5c803f-8bb1-38d4-bcc9-3ac62c1036e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2244::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b0:61:ac:38:32:6c:ae:27:ba:a9:ef:8d:27:e4:f5:6b:d9:
         f1:e3:76:6e:11:2c:3c:dd:f5:8e:26:9e:49:76:f3:00:c5:b5:
         24:92:62:b2:b2:e0:41:9a:f8:6c:1e:62:2d:2f:b9:3a:0a:c5:
         bc:cb:6a:7f:14:49:01:0c:76:38:2c:c3:eb:98:b7:52:11:1e:
         da:07:80:55:e6:06:be:e6:0b:96:9a:c3:10:85:77:4b:1c:93:
         10:44:d1:8d:7f:a8:5b:5b:ea:00:57:7c:a2:5a:ae:8c:ae:a0:
         f4:b6:cc:14:ad:1c:cf:e5:84:e3:ba:4b:3f:71:ab:88:1b:28:
         55:5b:cf:ec:37:7d:bf:22:8f:76:32:0b:63:84:34:b6:7d:6c:
         b3:cc:bc:21:e1:84:ea:a2:e3:8c:ef:b5:b4:ce:bb:08:18:c8:
         e8:6f:69:10:ef:4b:01:9a:0b:8d:6e:53:c7:2d:79:8b:27:ce:
         92:d8:ef:8c:81:c6:aa:01:1a:6d:59:fd:52:56:33:65:32:d6:
         8a:33:3e:d4:6e:74:a5:b6:e0:06:99:df:7c:22:3d:49:de:98:
         fc:a0:37:f5:cc:5a:21:1f:20:31:b9:3b:71:90:ab:28:ed:97:
         0d:92:f7:88:f1:fb:4a:dd:76:17:11:40:a1:03:fe:83:34:6d:
         80:66:1d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:21:20 2026 by rpki-client