Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
File:                     1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa (raw, json)
Hash identifier:          j9SeX63seTDI/QpF4tcxa4WFO3N8A1sq8pELWyYz/Ck=
Subject key identifier:   2E:5F:21:A1:0B:CF:56:05:9A:71:05:1F:72:F9:63:7A:7D:D3:22:47
Certificate issuer:       /CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Certificate serial:       010D0C9F4328584D1B1A159FF5C96987101C2100
Authority key identifier: 9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     55230
IP address blocks:        2604:c580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:15:9f:f5:c9:69:87:10:1c:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=a582e48b-3cb7-40fd-a85d-34bc28707370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:48:c5:24:07:80:32:05:a8:5f:d5:b7:db:
                    ea:6a:40:86:92:fc:3a:62:8a:b1:83:01:f9:a6:fb:
                    3c:18:cb:a8:c9:c7:c7:0e:01:3a:64:35:55:0e:11:
                    2b:3e:b4:b2:aa:ef:f6:6c:92:f7:03:1b:fb:28:4c:
                    b5:ca:8f:b0:9a:23:e1:de:32:82:13:05:bc:43:e8:
                    bd:7c:5d:56:ed:78:bb:7f:29:a9:20:4c:49:a9:19:
                    08:e9:1f:86:ea:94:61:d0:5d:6a:7e:28:25:52:e1:
                    cb:c7:9b:ba:39:26:b2:9e:d0:76:84:54:22:a9:98:
                    34:2f:67:ad:6f:9d:52:95:8e:a7:9f:8a:69:b3:b1:
                    29:89:ea:27:4c:38:5f:e9:88:01:33:9d:86:8d:ca:
                    3c:d9:20:35:3e:89:4c:1a:ee:7b:f7:14:f9:ce:0f:
                    61:09:f4:36:dd:e5:2f:52:82:78:a1:eb:14:86:0d:
                    62:5d:57:31:55:47:77:b8:8b:c7:62:9b:83:7c:a9:
                    86:f3:b9:1c:5a:b3:d6:ff:02:56:ac:06:55:9b:43:
                    94:5b:7e:18:28:b0:b0:b8:32:db:58:35:92:84:4e:
                    fd:02:d4:51:f9:b4:39:a4:86:53:79:43:36:24:be:
                    e0:8e:32:9a:81:0f:8f:81:12:8b:ea:31:d8:c7:cd:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5F:21:A1:0B:CF:56:05:9A:71:05:1F:72:F9:63:7A:7D:D3:22:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:87:cb:f9:00:05:f9:3e:42:ca:20:a0:2e:f5:be:04:c9:
         9d:30:03:cb:3c:68:5b:33:a9:e9:00:b2:e2:36:6c:bf:14:92:
         e7:71:ff:eb:37:8b:f8:96:df:81:67:6b:6e:44:75:1d:ba:66:
         db:f1:11:79:45:61:42:6c:7b:b4:05:4a:b2:6b:55:3e:49:71:
         dc:58:32:cf:84:2f:98:bc:24:65:af:94:74:f2:97:dc:23:60:
         3c:58:73:44:19:24:02:4d:b9:d9:75:ba:12:2d:e7:fa:eb:a5:
         e4:01:52:7c:41:d5:c9:45:03:66:1a:4c:c5:bd:ac:7c:58:1b:
         1f:a7:8a:1e:75:47:90:6d:df:5c:84:c5:75:0d:c5:ae:9d:56:
         99:2f:75:75:44:9c:3f:06:d7:53:a6:a3:b6:95:dc:60:b4:09:
         bb:97:99:a4:85:4d:d1:3b:24:79:31:ea:3e:df:2d:be:bf:57:
         c4:df:c0:60:e4:e6:50:50:6e:38:7a:bd:ae:c7:9b:8f:65:f8:
         0e:c1:f8:32:85:96:f1:9b:d1:dc:ce:c7:61:58:20:73:ce:ee:
         d9:2e:dd:2b:f1:9c:4f:71:0c:b2:0f:4b:db:30:04:ba:46:f3:
         2b:ec:80:c5:03:25:d4:76:02:1a:5b:80:63:5f:b9:05:a3:eb:
         e5:23:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:54:38 2026 by rpki-client