Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/3c044286-bc28-3193-92aa-7d4f1013a096.roa
File:                     3c044286-bc28-3193-92aa-7d4f1013a096.roa (raw, json)
Hash identifier:          kkqi96NpqTjtGnlTPD6iWDFx6kh97NWzgR87bUTyNpQ=
Subject key identifier:   E5:AA:6C:37:2B:F9:B1:DA:35:54:58:AD:2B:0E:24:E4:EF:06:3E:63
Certificate issuer:       /CN=7386a5e1-ba73-408c-a7e4-df88e2f52603
Certificate serial:       010D0C9F4328584DA3E560734241438353361400
Authority key identifier: 8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/3c044286-bc28-3193-92aa-7d4f1013a096.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     2635
IP address blocks:        2607:f408:1018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:60:73:42:41:43:83:53:36:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7386a5e1-ba73-408c-a7e4-df88e2f52603
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=89005dba-4720-4885-a697-dff4177b26fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:f0:65:3d:59:1d:bb:03:89:19:74:90:71:
                    ba:52:fe:96:65:86:cd:42:56:25:cf:ce:e2:e7:77:
                    cc:83:77:b1:d2:7c:7e:fa:a8:30:f5:fb:fc:18:30:
                    00:d6:7d:a1:1c:27:d9:da:22:7f:ee:eb:82:5e:f6:
                    af:d2:1c:29:88:af:7f:5b:84:b2:46:c4:c1:11:41:
                    32:d4:ce:4d:9f:79:91:84:b4:3a:6a:f0:cf:47:fc:
                    f1:18:23:37:a9:ee:30:34:44:5f:dc:b9:21:a4:dd:
                    a4:3f:fb:7d:ce:c4:05:70:78:41:00:cc:41:d3:87:
                    76:6c:c7:55:61:44:39:b9:bd:54:9f:45:2d:ff:69:
                    32:29:f9:25:b6:47:58:0b:eb:95:d5:04:c2:a7:a9:
                    82:ff:99:dd:d2:0d:fa:9c:d3:84:8b:6e:c0:26:f4:
                    3c:d5:40:81:f0:03:b9:24:44:3c:4f:02:ca:88:72:
                    b5:c8:bd:e0:28:e3:13:12:a0:02:e6:90:b3:4d:fd:
                    37:75:70:ad:04:07:b0:bd:d3:c2:55:3e:43:6d:ba:
                    72:a7:96:85:15:b1:fe:94:45:0b:29:0b:61:a2:5d:
                    1d:bf:e4:a4:a5:ff:40:c0:78:0b:0b:25:49:48:e9:
                    1a:d1:fe:cc:b7:6e:c7:10:9f:14:c1:d6:39:fc:b3:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:6C:37:2B:F9:B1:DA:35:54:58:AD:2B:0E:24:E4:EF:06:3E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/3c044286-bc28-3193-92aa-7d4f1013a096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl

            X509v3 Authority Key Identifier:
                keyid:8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f408:1018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:71:19:04:33:62:81:0b:cd:af:62:6f:97:a3:ef:49:b3:39:
         91:f3:e4:e4:2b:f7:0c:bf:81:5f:08:22:75:5f:e6:d2:d4:8a:
         dc:62:56:b2:b9:54:7a:3a:b3:f8:24:bf:bb:bd:f9:6b:20:c8:
         88:bf:2d:3b:8a:df:3a:61:7f:16:b5:d3:28:fa:2b:2a:e1:55:
         fe:29:a6:79:22:78:84:40:64:b2:71:39:7e:d1:c0:38:5f:0e:
         1d:18:04:f9:2c:90:ef:e7:fb:e1:0d:49:85:bd:29:92:34:71:
         3c:f0:2c:ac:20:cf:4d:e4:2c:9c:a5:c7:eb:41:60:d4:34:44:
         96:d6:3d:d0:26:74:b6:85:1c:2e:ce:46:be:c1:5d:7a:90:58:
         4f:be:fd:0c:7e:cc:c4:a7:01:a8:d5:de:be:83:38:27:51:7b:
         df:47:6f:38:cc:f9:04:e9:f8:75:cf:ea:72:a7:02:d3:1f:ac:
         6a:f3:29:05:94:71:f6:7f:f6:9b:9a:5d:24:ad:4e:d4:a2:c2:
         26:1d:34:43:49:a3:79:5e:c2:04:37:25:c7:87:82:0d:b9:30:
         53:05:1d:29:40:07:3c:bd:40:2b:66:b3:df:c5:ad:e7:77:c9:
         f9:20:f1:14:e3:b1:d7:8a:38:51:9d:1b:cb:17:4b:ae:0b:4c:
         d1:ff:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 02:51:55 2026 by rpki-client