Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/3b10b129-b4d0-3a8a-8c2b-5ade9582e720.roa
File:                     3b10b129-b4d0-3a8a-8c2b-5ade9582e720.roa (raw, json)
Hash identifier:          z7I6Vfy7S22j6fWoVQGdHiDi0HJPQ1Y77XGTEPHLwDA=
Subject key identifier:   80:37:F4:EB:0C:16:FF:B4:77:11:96:65:B9:B0:5D:65:64:83:D2:EE
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584D571FB4F3BC93233FED853E00
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/3b10b129-b4d0-3a8a-8c2b-5ade9582e720.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        2604:bc40:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b4:f3:bc:93:23:3f:ed:85:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=c0fd9c2d-5ba0-426d-9acb-636e10f0bf0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:51:29:93:31:1a:76:53:eb:87:ef:8f:9f:bb:
                    b3:19:fc:00:a6:7f:32:2c:f4:de:83:fd:b5:b0:d0:
                    3b:22:64:19:21:98:bf:5a:e1:98:cb:0b:25:ea:8e:
                    d9:29:77:4b:ce:ac:b4:3d:d6:46:8e:d3:da:33:18:
                    0a:b9:b5:cf:59:fd:3b:13:5a:7a:e2:9d:9b:59:a7:
                    81:ad:78:8f:b8:5f:8f:75:d2:39:c6:c0:74:76:4d:
                    f5:c2:d3:8f:2f:9a:36:c0:bd:50:e5:cb:bc:dc:09:
                    b5:c1:b7:a0:a9:64:7e:62:d7:8b:30:f8:cc:3b:1e:
                    43:16:d4:3e:62:99:de:9c:2c:52:80:59:d0:2e:00:
                    a8:4e:0a:75:1f:e6:59:53:5e:0f:dc:47:c1:c3:40:
                    68:4f:7c:ce:cc:38:e1:78:60:92:a4:27:ca:fa:10:
                    20:ed:99:60:b4:68:5f:eb:2b:83:bc:e1:61:62:73:
                    3a:e3:4d:d7:f5:90:df:41:96:a5:75:85:b4:a4:a6:
                    02:04:dc:a4:1f:52:f7:7c:5a:8f:f3:d9:7e:2c:df:
                    2e:8c:08:b6:cc:ad:c8:31:fe:02:6a:7d:e2:d1:b4:
                    ac:c7:3f:47:34:90:db:56:ea:b8:f5:2a:29:3b:a6:
                    bd:35:c7:cc:a9:03:5c:23:95:87:89:da:7f:c0:be:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:37:F4:EB:0C:16:FF:B4:77:11:96:65:B9:B0:5D:65:64:83:D2:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/3b10b129-b4d0-3a8a-8c2b-5ade9582e720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bc40:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:75:e0:a5:96:f8:6a:bd:91:38:b4:d7:90:cb:42:91:62:0d:
         86:29:fb:02:9e:6b:a6:b2:e5:ac:0a:7a:94:1b:76:fe:06:d9:
         4e:e2:5d:56:8c:8b:bc:9e:9f:ea:04:4d:ad:b7:79:ad:57:0d:
         73:d6:9b:a4:c5:0d:f9:f4:44:b9:56:d3:f0:86:c2:1a:e0:62:
         c5:3c:9b:6f:fc:b3:b6:59:dc:27:10:80:8c:42:2a:78:6b:26:
         5a:be:e8:c3:d4:ff:c2:da:89:14:21:e1:d6:99:90:af:4c:40:
         58:d0:9f:d6:bf:4f:d0:80:f9:db:73:90:81:e8:17:88:d0:98:
         20:e9:71:0b:f4:fb:2d:b2:4b:42:56:54:f0:ea:1d:e7:95:53:
         41:b1:e7:81:81:ab:bb:4a:f0:75:df:c5:2f:8d:36:e7:c9:06:
         5f:e2:01:2e:e5:36:f0:7c:e1:2b:d5:19:58:ae:bc:7f:24:c2:
         3e:25:10:48:90:58:e5:9e:1d:11:bf:fa:08:bd:d9:02:6e:7d:
         19:55:77:23:f5:d7:bc:67:1f:22:ea:32:74:31:79:e9:22:8c:
         86:06:47:27:9b:de:14:47:82:0d:78:52:4e:b6:be:68:83:90:
         1a:17:ce:38:19:fb:d9:35:15:c7:11:a5:a3:a6:79:59:e1:02:
         04:8c:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 14:20:57 2026 by rpki-client