Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/57dfabe4-9be6-3ed4-a51d-d550962aa99f.roa
File:                     57dfabe4-9be6-3ed4-a51d-d550962aa99f.roa (raw, json)
Hash identifier:          aMFIEqgZZE30gOyOkfv/HgBffgbJB/FnEZ2DWauqBx0=
Subject key identifier:   B4:27:A7:EC:EB:5C:B6:6A:AF:81:F0:FD:CE:04:89:B1:22:A4:94:D2
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584D1F4A07FC58467844B22A1400
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/57dfabe4-9be6-3ed4-a51d-d550962aa99f.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     4226
IP address blocks:        2600:3500:c11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:07:fc:58:46:78:44:b2:2a:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4e533157-4b8b-4811-be9a-07b544d578f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:12:98:68:c5:26:df:8c:a6:f7:18:94:ed:
                    fb:54:3c:d8:42:ae:26:54:c1:6d:0e:fa:22:b6:67:
                    65:ce:83:0a:62:42:17:13:aa:11:ae:90:b7:bc:d7:
                    75:f5:94:43:ac:64:ca:72:65:a1:bc:a1:ca:98:cd:
                    9d:4a:02:ec:e4:c6:33:8e:15:61:ea:ae:8e:f5:5a:
                    6d:d1:48:f9:5a:1c:5e:bc:cc:73:4c:b0:aa:b9:38:
                    28:cb:a5:ab:ff:88:21:f7:46:fc:6c:fe:26:a8:90:
                    62:18:f0:9c:27:3d:aa:0e:3a:ce:cf:a7:f7:37:ad:
                    a1:47:81:7b:6f:ea:a5:76:06:dd:2b:b6:4f:48:2d:
                    b8:9c:91:ab:60:f1:f6:9c:53:83:38:33:33:15:87:
                    64:35:79:02:e8:88:a3:24:e9:b9:c9:95:6f:3c:4d:
                    be:82:49:62:1e:cb:08:af:67:1d:8b:29:69:1d:5d:
                    06:a4:a1:4b:16:af:9b:69:3d:f9:c5:54:b5:29:6d:
                    78:7a:23:b5:2b:b3:2c:39:fa:e5:83:b5:44:09:3d:
                    35:40:44:76:c7:49:76:8e:ed:47:a3:03:03:d6:5b:
                    a5:1d:b3:e8:c3:75:4f:6a:83:9e:20:98:d1:19:1a:
                    d7:99:38:f0:9d:f5:55:52:e8:50:20:07:a3:2c:81:
                    28:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:27:A7:EC:EB:5C:B6:6A:AF:81:F0:FD:CE:04:89:B1:22:A4:94:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/57dfabe4-9be6-3ed4-a51d-d550962aa99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3500:c11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:cc:96:91:01:7b:0f:f4:76:a6:63:8d:0c:b2:bf:91:2b:
         c5:3a:69:30:53:21:c2:4f:9c:1f:b8:0d:e9:32:5e:a0:66:e3:
         9e:d0:b8:0b:4a:05:2f:79:1d:3b:2c:13:9c:57:7a:36:dd:3b:
         21:fd:81:c0:30:51:72:7b:2a:22:53:65:81:44:d2:db:3c:34:
         fa:98:96:4e:f8:58:93:bb:c5:9e:06:58:ec:38:bd:4d:97:79:
         0c:6a:eb:9b:38:29:d0:6f:a7:bc:3a:24:56:8a:84:6e:72:24:
         a3:be:1a:e9:fd:77:c6:bb:cb:7e:cc:ec:27:9a:23:bb:e1:f6:
         62:59:ff:ba:20:d1:06:cb:f0:9a:1a:21:ff:69:2f:d9:ba:d2:
         94:a4:1a:64:fe:cb:e4:c1:58:0f:80:de:44:dd:7e:fa:e6:37:
         b6:d3:78:5c:e0:a1:db:d4:82:c3:5f:12:e5:99:65:29:ec:96:
         96:c6:9a:ba:31:cb:09:ed:73:97:e4:08:ec:a4:03:8d:e1:fe:
         f9:28:84:55:21:5d:fb:4c:90:86:6a:db:15:12:3a:c4:e9:13:
         52:6d:b8:20:22:d6:5b:a3:1e:50:cf:d6:92:ff:d8:ea:15:18:
         d0:07:89:14:89:5b:d9:ef:24:bf:19:3b:3d:77:94:1f:f0:69:
         cb:73:e4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:13:43 2026 by rpki-client