Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c9507779-5983-34f7-a390-7f021cbc2c47.roa
File:                     c9507779-5983-34f7-a390-7f021cbc2c47.roa (raw, json)
Hash identifier:          JWQF9w+jlaAwz7E5xxML13AVO1d3ueDf+sndQSCnhYc=
Subject key identifier:   FC:87:3C:A1:C4:F0:98:B7:A9:6C:34:0E:31:6C:A2:21:51:C0:7E:D1
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584DAAE033588132C8884D079BC0
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c9507779-5983-34f7-a390-7f021cbc2c47.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     393885
IP address blocks:        2604:4a00:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:33:58:81:32:c8:88:4d:07:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=416e0ce4-535e-4455-a963-986fa4993ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:d9:2b:3f:5e:f9:5d:9f:d4:01:2c:6a:10:
                    42:11:a0:85:4c:e4:ed:66:69:25:e0:e0:64:f7:f6:
                    0b:15:56:94:48:29:bd:6f:66:67:35:7a:3c:bd:eb:
                    3e:56:8c:7e:22:19:b1:e5:db:79:f6:bc:9c:6c:d1:
                    9c:4c:6a:52:a7:7d:8f:1d:43:ca:72:5a:07:fc:d2:
                    2a:c7:a2:00:42:45:f4:3b:47:02:e0:b8:4c:2a:8c:
                    b8:9e:2f:55:fb:e9:6d:e2:6d:3a:d2:6f:f1:c3:63:
                    45:0b:25:a0:23:ac:e6:56:29:9d:fd:ac:29:b9:0d:
                    66:0a:8b:60:08:bf:9a:a8:33:87:7f:e6:ce:d8:15:
                    5c:8e:cf:d6:82:be:30:c7:1c:cf:3c:40:c6:ff:a0:
                    4b:43:05:eb:4e:7c:3c:22:41:99:e5:ca:31:f1:ce:
                    2e:00:0f:fa:d7:07:c8:6a:88:f0:4d:4f:b9:bf:f1:
                    33:2f:06:f3:e3:67:68:d2:66:48:e6:21:fa:33:aa:
                    a0:86:e1:34:06:d6:7c:68:20:73:be:60:7e:e6:45:
                    5a:ee:8e:ba:24:08:bb:4c:e4:a0:a5:71:20:33:ee:
                    74:4e:3d:bf:bf:10:43:67:7a:5e:61:3f:6e:20:fa:
                    cd:fc:8a:af:41:ec:81:00:4f:b1:58:59:fe:fb:d4:
                    af:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:87:3C:A1:C4:F0:98:B7:A9:6C:34:0E:31:6C:A2:21:51:C0:7E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c9507779-5983-34f7-a390-7f021cbc2c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:65:03:79:56:43:fd:b2:53:ae:00:17:1a:ed:5b:a9:24:9c:
         bb:af:c2:d0:ee:12:d9:e9:08:af:de:54:7c:e5:66:e9:40:72:
         1c:69:bf:9e:9f:cd:8d:93:d3:80:e1:24:af:cf:de:d2:7b:21:
         2c:dd:84:95:d0:5a:d5:a7:c4:4a:fc:f2:3f:c3:1f:a7:6b:a6:
         4f:da:4e:cb:07:05:e9:a1:38:17:b7:9e:d6:01:97:3b:d1:e1:
         df:54:91:8b:15:95:99:ea:3a:da:c0:d9:be:50:af:22:c1:8f:
         8e:ec:f5:88:37:cc:bc:5a:04:10:51:ad:10:47:92:5f:fa:cd:
         e5:83:3d:d3:e3:20:f8:96:cd:87:71:71:b8:a3:86:64:5d:cf:
         9d:d5:2e:2d:ee:ac:2b:67:8c:d0:e6:00:73:a4:bd:f4:73:01:
         65:1e:38:e2:2e:0e:9e:db:06:77:1a:eb:fa:9a:b4:5b:b3:b1:
         df:55:fa:f2:14:cb:78:c9:a4:f7:4a:a7:2f:47:8f:a8:ea:23:
         7a:58:bc:b4:6a:0d:85:6f:db:66:26:8d:a6:39:77:d2:91:cc:
         04:47:21:32:19:03:b4:a7:0d:a1:90:6b:31:26:25:9e:b9:93:
         70:56:f7:e2:ad:d7:be:3c:83:29:dd:a2:05:bb:68:a7:c7:78:
         e3:e4:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:47:14 2026 by rpki-client