Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/a4c22548-637c-34ab-850a-517d3b950a52.roa
File:                     a4c22548-637c-34ab-850a-517d3b950a52.roa (raw, json)
Hash identifier:          cNUxKEaXFRQf/zxmGYVWQlI0NYvHWymLi0/hgwSRRkc=
Subject key identifier:   39:0A:FE:48:68:E0:B8:92:F8:2F:87:78:36:51:F7:25:D8:B5:DA:3B
Certificate issuer:       /CN=5ef4d5f1-c1e2-4799-9868-866a263537cc
Certificate serial:       010D0C9F4328584D8EF55C31CF8FFDDF8D7AB380
Authority key identifier: F7:C0:D1:DE:57:83:26:71:CD:9B:A6:65:85:13:E5:4A:D9:D6:92:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/a4c22548-637c-34ab-850a-517d3b950a52.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        2602:fcde::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5c:31:cf:8f:fd:df:8d:7a:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef4d5f1-c1e2-4799-9868-866a263537cc
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=c14d1833-274b-478b-90cc-ab9fa720d2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d3:4a:48:d3:53:2d:73:33:75:cb:68:f0:48:
                    41:9f:d6:34:c2:1c:4c:d0:3d:74:ee:8c:ac:11:f6:
                    e5:4a:a9:0c:e7:db:bd:1f:dc:7f:51:45:a8:5e:67:
                    f1:58:c9:19:86:7d:29:69:68:ec:7f:ac:a3:a2:21:
                    d5:e0:7b:4b:cb:3d:08:7a:6c:e3:cd:c6:c0:3a:71:
                    38:57:c7:9d:93:63:ad:68:27:8d:ec:de:38:52:0c:
                    17:16:b3:72:a8:81:3c:cf:2e:da:9a:3c:ba:72:3c:
                    84:49:69:cf:a0:58:29:f1:75:ad:7f:29:c7:d7:6c:
                    e2:58:3a:29:bc:82:4d:6d:a1:7c:94:fa:9b:dd:a0:
                    fe:c5:6b:25:5a:a7:d6:2c:19:b5:64:d7:7b:6d:0a:
                    ee:ad:67:0b:e5:68:eb:64:c9:85:9a:19:df:d4:66:
                    9a:67:0b:5f:d2:33:02:a8:9c:da:83:f9:71:b1:8b:
                    c8:f4:a6:04:60:4c:40:c0:15:36:5e:e0:cd:02:40:
                    ba:e2:2b:5d:69:72:46:ee:b7:d9:dc:d7:44:59:db:
                    8f:7b:10:df:c9:f5:e8:6d:97:b2:df:9b:46:eb:59:
                    42:3f:16:19:50:31:01:06:1d:d6:e0:b1:56:5e:5f:
                    0d:87:df:5a:d0:24:4d:0a:d2:6a:9b:3c:79:e2:ed:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0A:FE:48:68:E0:B8:92:F8:2F:87:78:36:51:F7:25:D8:B5:DA:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/a4c22548-637c-34ab-850a-517d3b950a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.crl

            X509v3 Authority Key Identifier:
                keyid:F7:C0:D1:DE:57:83:26:71:CD:9B:A6:65:85:13:E5:4A:D9:D6:92:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcde::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:32:b9:c7:4a:00:d6:d9:73:46:91:11:78:4e:a6:52:95:61:
         f0:49:d4:48:3f:0e:70:6e:06:16:08:fc:0c:b5:67:30:19:4b:
         f9:3a:31:fc:75:12:84:67:ac:bc:d1:c5:09:fa:64:79:06:2a:
         f2:76:58:71:d9:f7:4d:5f:bb:24:9c:3e:a8:d3:13:f7:e5:7e:
         f6:1d:a9:d1:9d:d3:d9:3f:55:f6:d7:4f:db:5a:d4:e6:29:39:
         14:26:13:07:5f:8c:5e:55:2e:29:94:96:06:97:02:89:48:09:
         a7:13:f5:1a:97:57:10:7c:2b:81:9f:28:21:fc:ed:20:de:34:
         12:aa:15:29:f6:07:1c:0d:c0:6b:3d:7c:69:1b:7c:9c:e8:a6:
         e4:2e:54:2c:7e:79:94:d6:3f:5c:be:ee:bf:8a:1a:e7:f0:14:
         72:4a:10:48:bc:ca:65:93:83:bc:a7:a1:b9:ca:81:fc:6d:b9:
         92:a8:11:7b:b2:83:5f:da:b5:ad:48:fd:70:fe:32:ca:2d:b8:
         60:55:75:42:ac:0c:24:76:3e:c4:c5:c3:58:71:11:e1:8b:ce:
         d2:be:26:8a:b2:5a:e3:9c:41:35:7b:22:71:e7:77:bf:af:c4:
         0d:ec:3b:22:68:24:d5:3b:93:6f:f0:37:b7:f3:88:71:a6:64:
         4a:11:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:50:51 2026 by rpki-client