Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c0c026d8-87c0-3619-a341-f0f3782750ee.roa
File:                     c0c026d8-87c0-3619-a341-f0f3782750ee.roa (raw, json)
Hash identifier:          znxo4cwrgZr0u7g5dmJGJAg8BTKQFsr7mKB1kafeAmo=
Subject key identifier:   6A:97:88:A4:1B:73:DB:46:DA:E4:D2:F5:FD:32:36:5D:94:7F:06:F2
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584DAAE0330DB914AB0C85D8E380
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c0c026d8-87c0-3619-a341-f0f3782750ee.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     393885
IP address blocks:        2604:4a00::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:33:0d:b9:14:ab:0c:85:d8:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=bc4b323b-ca3e-47d4-aced-0a3abaade96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:43:21:57:92:85:7e:f0:c0:02:60:b6:7f:93:
                    b9:0e:33:44:0d:2c:2e:86:8c:12:8c:37:74:b8:6f:
                    d4:6b:21:95:95:c1:b9:08:19:84:36:3a:c2:d0:de:
                    5d:8e:de:48:1b:0b:e2:e4:54:b8:6c:4f:e3:80:b8:
                    af:61:30:ed:6d:eb:57:be:cc:0a:18:b3:da:55:68:
                    c6:3a:86:d5:97:36:7b:7b:ea:d5:e1:74:79:89:9b:
                    9d:c0:fc:c7:e7:cc:37:ad:70:78:08:c4:09:fe:f7:
                    d4:4f:24:3c:5b:41:21:37:1e:28:ae:94:36:86:9e:
                    2b:34:e2:b1:75:18:13:95:07:61:c0:38:9a:32:00:
                    3b:df:52:30:40:1e:e6:32:36:78:21:cd:d3:2c:ec:
                    1d:35:1a:cf:92:8d:cc:dc:b7:88:c7:cb:46:51:41:
                    4a:26:09:62:71:d5:ed:f0:70:59:dd:41:f6:d8:8f:
                    22:96:c4:7a:ac:79:c0:a6:e2:cf:9f:35:9b:e8:b6:
                    8f:6a:2d:49:17:8e:c9:54:78:9b:27:9f:5b:01:6f:
                    f3:b1:1f:36:2a:ef:46:b0:f2:6d:e9:05:17:01:7d:
                    4b:44:f0:04:aa:c3:22:f6:81:db:62:9a:13:b4:13:
                    49:69:f3:59:37:58:1d:2f:36:f1:cd:87:57:3c:3e:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:97:88:A4:1B:73:DB:46:DA:E4:D2:F5:FD:32:36:5D:94:7F:06:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c0c026d8-87c0-3619-a341-f0f3782750ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:c5:c0:24:16:b4:e0:e0:0d:7c:9b:7a:f4:ab:41:15:05:
         2e:db:f4:7f:bf:a8:28:02:8f:83:99:ad:4e:5b:d4:fd:f1:38:
         c1:c3:ad:d1:1b:70:04:29:93:21:1d:2e:d1:da:f0:a9:01:e9:
         8b:d0:6a:21:7b:32:4d:54:da:a0:3a:c9:fa:10:ba:5b:d3:22:
         12:78:56:c7:35:fe:fa:94:79:61:f6:be:e4:8e:a1:58:99:eb:
         d1:1f:f7:8e:38:09:e7:c4:15:af:83:fc:9b:b2:4e:9f:b7:87:
         46:23:94:96:ee:6d:df:6a:c6:e4:bb:db:8c:8d:89:96:44:bf:
         25:55:db:e8:91:d3:ea:ac:42:2c:5a:7c:d2:b2:b7:78:a9:57:
         96:42:0e:fe:0a:be:76:b9:7c:7f:da:88:85:a0:02:da:1d:56:
         b5:cd:a3:8b:45:03:3e:62:f7:2b:06:23:7c:d2:ae:30:0b:37:
         d5:cb:07:ef:15:f3:cf:56:f9:88:4a:0d:4f:98:59:45:52:61:
         47:33:28:36:85:98:fb:5b:a3:c7:21:34:e8:6b:74:b8:4e:e3:
         9f:99:dc:3c:39:38:73:67:78:9d:dc:83:8d:8e:49:9f:4d:34:
         bb:70:fb:db:67:db:96:4a:a0:cb:4d:89:cd:cf:da:e1:0a:78:
         14:bd:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:48:14 2026 by rpki-client