Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa
File:                     0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa (raw, json)
Hash identifier:          zlxjDI0cEx1AcapzNqmHMvQ5qpwo7QHAJL5z8TKJhZ0=
Subject key identifier:   77:7B:7B:C8:F8:F8:0C:58:D5:E9:70:2A:DB:FB:0B:F6:A3:89:3C:E4
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F4328584DAC456B23F373F9CA230FFD00
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     396982
IP address blocks:        2620:121:5050::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:6b:23:f3:73:f9:ca:23:0f:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=d6551196-620e-4c75-b2d8-3063f41eddfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:cb:f2:eb:94:35:5f:49:c5:68:63:51:3b:
                    28:2f:3a:e2:ec:7a:86:68:8b:cf:43:a0:c2:9b:82:
                    be:29:56:f0:ba:60:f4:69:bf:51:9c:38:30:15:e5:
                    4b:f4:4e:44:28:5c:73:4f:66:f7:2f:75:48:51:76:
                    e4:a9:bb:95:f2:ca:3f:b7:c4:37:25:ab:a2:81:c7:
                    19:2a:e7:7c:0d:6c:5e:7f:b4:83:49:75:55:57:73:
                    5c:7f:08:aa:4d:58:ef:7f:f0:e9:4a:53:61:8d:64:
                    22:29:de:9b:2b:89:1a:ce:a6:24:ff:09:a1:60:49:
                    e1:cd:6c:81:e0:9e:69:cc:16:44:06:2e:6a:a8:6b:
                    38:9b:d3:ae:dd:b0:d3:1b:c7:24:7d:be:15:41:cf:
                    7b:71:55:50:b3:f9:7c:5d:3c:0a:7b:cf:55:86:aa:
                    77:a2:9d:df:32:9a:28:af:89:e2:23:c0:10:b7:9f:
                    bd:9d:f0:c3:45:ad:fe:d2:f2:4b:8a:91:79:aa:5a:
                    65:78:d7:00:a2:b3:2a:df:ea:9d:ef:f8:3d:13:1f:
                    9c:84:5e:90:34:89:93:77:02:97:cf:62:ef:7b:8d:
                    04:9e:7c:6e:d9:b5:84:2b:01:af:0d:26:c8:7c:fa:
                    a8:fc:8e:85:e9:6a:6d:b3:4b:83:06:9e:c7:dd:85:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7B:7B:C8:F8:F8:0C:58:D5:E9:70:2A:DB:FB:0B:F6:A3:89:3C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5050::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:50:ae:f0:5c:6d:69:f7:65:e8:ba:0f:3f:6f:f2:59:26:38:
         eb:25:c6:9f:f7:97:68:5b:e9:a7:96:f2:fc:28:0e:76:4e:07:
         43:5a:b5:5d:5e:f3:28:ce:4e:11:de:7a:14:88:76:2b:64:b3:
         ec:12:9e:53:44:ff:fc:1f:d1:7e:1a:7c:9a:d8:0a:99:ba:c1:
         83:40:28:25:b2:17:4e:d1:82:9b:86:91:1a:03:3c:ca:29:0b:
         32:ec:05:23:dd:e9:75:33:74:c9:7b:b1:d3:d7:b3:f1:f8:20:
         ae:3e:0d:d8:0f:3d:10:97:55:2d:c6:f9:bd:69:3f:3f:3a:70:
         64:89:80:f9:3e:63:a9:80:ef:34:bf:c5:28:33:a8:61:b8:35:
         50:e3:ec:91:cf:d2:4e:a4:57:ca:ad:94:2f:15:17:16:d3:87:
         1e:05:63:eb:48:63:6c:66:50:80:e6:4f:ea:84:df:f4:e1:1f:
         ac:f7:e1:81:47:43:2a:4d:0f:e3:c6:1c:3f:e7:87:8a:2d:ef:
         0e:42:6a:fc:28:42:73:b5:3f:57:c7:0b:cd:e6:4f:af:f6:d7:
         7d:aa:1b:00:66:30:b6:2f:45:06:04:02:59:f8:ac:b1:d3:3c:
         c0:27:ee:6a:f8:1b:ad:0d:39:31:38:7d:66:10:15:a6:79:f9:
         d3:f5:71:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:53:07 2026 by rpki-client