Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1902a999-4e23-328e-ab33-245cc6455887.roa
File:                     1902a999-4e23-328e-ab33-245cc6455887.roa (raw, json)
Hash identifier:          DVVCZ2daSkKjZz5WsemCijkXnMlSQrh96SFtWOZCCN0=
Subject key identifier:   7E:75:13:59:12:16:FC:F1:44:81:F7:88:55:E9:BD:3C:0E:5C:40:EE
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584D8EF57F33D0144EE28E6A8940
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1902a999-4e23-328e-ab33-245cc6455887.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     63150
IP address blocks:        2602:f988:90::/48 maxlen: 48
                          2602:f988:91::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:7f:33:d0:14:4e:e2:8e:6a:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=5e5e97b5-692b-472f-a76b-d5cfbbd14129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:32:e1:e7:f2:47:a3:4e:9f:bc:b8:ff:90:
                    7d:43:c0:01:b9:ab:2a:40:b1:04:c4:4a:b4:c2:e8:
                    9a:ad:6f:c9:7f:76:9f:d1:d0:a7:75:4c:44:fd:86:
                    85:ac:ec:2e:53:96:df:da:29:93:43:06:21:88:38:
                    c8:b0:27:41:a0:c8:66:40:da:7e:68:33:c4:5a:68:
                    67:d0:a3:02:60:d8:79:9d:eb:1f:e1:92:7f:7d:e6:
                    59:9b:30:c6:4f:88:bb:2d:c3:9c:79:50:98:67:d3:
                    e8:1e:d2:cd:59:7c:d1:16:6c:e5:13:84:44:27:06:
                    34:92:ad:5f:32:05:01:03:0b:d8:ee:5a:30:30:cd:
                    dc:9d:6a:0d:88:6f:30:36:56:4d:e8:dd:cb:83:d2:
                    36:4c:63:06:6a:5c:64:28:9a:c7:91:93:fd:6f:18:
                    0c:ec:3b:74:49:4d:85:a2:94:f6:ed:6b:12:62:3e:
                    86:60:cc:42:27:8f:3c:1a:ef:a9:67:01:ba:a1:e9:
                    e1:5f:2d:3a:9c:93:25:31:e4:8e:00:b9:0c:ca:6a:
                    bc:2d:f7:46:d8:30:9e:b1:d7:62:d5:db:96:f2:73:
                    26:61:28:96:c2:e1:2a:d6:2c:1f:f8:d5:af:c5:d6:
                    bd:eb:2e:9e:a2:bf:ef:cc:32:24:e0:4b:d5:8e:46:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:75:13:59:12:16:FC:F1:44:81:F7:88:55:E9:BD:3C:0E:5C:40:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1902a999-4e23-328e-ab33-245cc6455887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:90::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f7:a3:12:11:56:a2:a3:28:44:16:36:37:8e:00:c2:40:6c:
         66:99:f2:27:1c:49:7a:d2:82:33:c1:a3:4a:6d:c6:98:e9:1d:
         cd:0b:3d:2f:ed:07:13:88:db:49:11:4a:ad:e5:65:1f:ba:68:
         25:cb:2d:28:40:89:ed:87:7a:71:1e:82:6e:0f:43:c1:f9:39:
         1a:c2:41:f6:c7:66:f1:e5:21:5c:53:22:af:c2:c2:4c:20:10:
         a3:ed:8a:45:cc:5a:2a:a1:e3:c5:cd:09:bb:f4:25:c8:23:81:
         30:20:c0:0b:2f:92:05:92:df:ce:04:90:a6:24:14:00:a5:d1:
         86:55:ff:c8:c5:0c:a5:b6:79:e7:17:24:25:ee:f3:58:57:95:
         f9:c8:24:c4:0a:df:37:6c:14:df:a1:1e:c7:74:2c:8b:e0:f9:
         e7:09:1f:fb:c3:bd:cc:22:f8:63:87:3e:62:29:07:72:bf:d3:
         e1:0e:da:91:5b:db:ed:2b:e5:9c:1d:ea:05:a8:73:cf:f0:61:
         29:8a:40:aa:55:35:41:52:2c:83:c6:e9:b1:c6:98:25:a0:54:
         9e:83:23:95:60:dd:59:8f:45:30:49:94:d5:c8:17:51:da:4c:
         a4:f7:31:d6:76:4b:f3:c3:90:08:28:18:72:f1:4d:02:93:21:
         17:bb:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 12:05:57 2026 by rpki-client