Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa
File:                     d8e3845c-489e-34ef-886c-d05badd37cd6.roa (raw, json)
Hash identifier:          KPCbw2zvzAi/vPdS9r+FkiWOVpow3S94RrlSzDAzAnU=
Subject key identifier:   94:CD:3D:7F:25:CD:98:AD:8B:15:70:04:E8:1F:F5:7E:78:C7:27:6D
Certificate issuer:       /CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf
Certificate serial:       010D0C9F4328584D95F004BEA8C0FB7B304613C0
Authority key identifier: B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     36427
IP address blocks:        2620:8e:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:04:be:a8:c0:fb:7b:30:46:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=c09ea1c9-2eec-4333-b527-b694887df04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:de:26:54:29:9a:e2:44:9c:ef:f1:9e:2a:5b:
                    0a:97:88:a3:35:ba:ee:75:8e:0d:4e:46:69:78:c8:
                    e0:87:29:6e:6d:7a:5c:7f:54:ef:f3:57:db:ac:88:
                    c1:c6:d8:4a:6a:6b:96:49:a0:97:9d:12:3d:77:1b:
                    10:45:a2:fc:10:9b:0b:4f:e7:76:f8:f8:1d:97:93:
                    3a:87:73:a3:81:88:05:a2:e4:90:73:e9:cd:ee:f5:
                    15:4f:b4:7f:d3:94:28:3e:46:51:b2:4e:ad:2e:c7:
                    da:f1:31:63:07:f0:08:3f:51:af:1b:05:be:42:01:
                    c6:e2:15:5c:73:5f:0c:c6:38:8e:be:ed:bf:0f:0a:
                    83:49:17:58:fc:9b:9c:26:46:a1:97:53:34:71:4e:
                    bc:7f:da:3d:76:9e:94:ca:6d:e0:d8:01:e0:4d:f0:
                    d9:67:10:45:15:d8:ec:61:a0:c4:ec:09:4a:88:52:
                    e0:cb:54:b1:82:7e:16:16:4d:8e:eb:cf:8a:f0:d6:
                    e6:cc:4a:39:95:a5:0f:7c:de:f9:d1:75:87:38:52:
                    e2:a0:41:a6:17:f5:e6:d7:d8:5f:39:ca:7a:de:f7:
                    67:a0:c9:bb:9e:ad:cb:28:04:9a:78:d8:2d:ce:4f:
                    6b:58:45:4b:d1:7b:f5:0b:c5:c3:cb:5c:d3:1f:3b:
                    e4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CD:3D:7F:25:CD:98:AD:8B:15:70:04:E8:1F:F5:7E:78:C7:27:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl

            X509v3 Authority Key Identifier:
                keyid:B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8e:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:05:85:70:61:6c:76:a1:d1:11:5a:15:6e:56:bd:5e:33:8f:
         47:88:ce:ae:d4:55:97:1c:7a:d7:f4:36:c3:0b:88:f7:45:4d:
         e0:e1:46:12:be:88:fc:bd:94:b1:8a:f9:e0:15:a8:1c:c8:72:
         a9:fc:33:f6:c3:53:81:2a:c4:f5:ec:73:9a:06:2f:43:7a:8b:
         fd:42:f2:3e:6a:61:5b:a2:d2:7d:59:1c:ba:d2:bb:7e:7b:a9:
         db:22:8e:2f:da:73:32:b7:ae:bc:84:e7:71:87:d7:b2:9a:60:
         e0:e3:ae:62:91:4b:2e:13:ce:07:93:0c:1a:21:d2:a0:29:2e:
         af:87:d8:32:63:c5:a2:6d:30:8b:06:ad:e1:19:51:b2:27:1f:
         0b:37:1f:01:01:f9:d7:e7:37:89:4f:20:c4:15:a0:3c:aa:f5:
         7e:96:a5:cc:29:f3:bd:17:d3:91:0a:a3:82:52:d9:85:77:30:
         5f:a8:84:fd:26:43:4c:b7:a8:d9:e2:96:37:61:84:ae:a5:c2:
         be:2a:39:30:f0:c3:9d:8a:53:86:f6:2e:8a:d5:45:1d:46:25:
         74:84:38:06:36:63:b0:5c:d5:e0:6f:0b:61:21:46:0c:4f:9e:
         ec:58:5b:1b:a4:2d:c5:41:b3:ff:a8:28:36:e0:aa:ef:f4:5f:
         ab:ba:55:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:14:53 2026 by rpki-client