Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
File:                     4cb51156-681b-3b02-bfaf-14a78060c1f2.roa (raw, json)
Hash identifier:          H1HByiStPehlPrS9KedB1CjmGJhm8LVgUUPuGY5dhGY=
Subject key identifier:   95:D4:7B:6E:2A:1B:AD:E3:CA:3F:B2:B3:1B:4A:F3:2D:E0:D0:A3:0A
Certificate issuer:       /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial:       010D0C9F4328584D98BAA6FEAF93078B1B399456
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     399542
IP address blocks:        2602:f8ef:fb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:a6:fe:af:93:07:8b:1b:39:94:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=b3c9abf2-35b2-467a-bfcc-720612ed0b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:db:90:b9:1e:29:ff:ca:a7:7a:2e:00:a2:2b:
                    6f:d2:34:31:cb:95:8b:c4:dd:d8:60:97:25:68:f6:
                    92:a9:f6:55:ac:a3:d2:31:a9:2c:0c:82:5c:1d:e4:
                    56:3a:b2:83:3e:a9:ff:38:d5:fc:d2:01:46:7f:ad:
                    f6:6f:b2:11:3f:de:a8:f1:3c:ef:1b:4d:a0:50:42:
                    da:79:9e:1f:cf:1a:23:07:48:92:99:ee:eb:2b:63:
                    d4:0a:b3:36:e5:b9:c3:7f:9c:4f:26:7b:ba:13:d7:
                    0c:36:06:d2:3f:e6:60:61:1d:67:07:5a:d5:ba:b3:
                    10:97:6c:96:fd:3a:e3:9b:0a:44:e0:c5:90:7f:d2:
                    17:0a:1b:07:6a:f5:f5:16:af:51:df:19:09:13:b5:
                    91:72:c4:08:fd:06:34:f6:06:3c:fe:39:c9:35:92:
                    cd:3e:e8:5d:f1:9c:a8:23:5b:bc:fd:61:53:db:65:
                    f0:64:32:37:e6:7c:aa:dd:fe:83:ec:6d:62:58:03:
                    26:ad:1e:90:45:13:c5:4a:85:51:4f:85:77:fc:b4:
                    f1:0c:66:1b:d8:27:88:e1:87:6b:63:7c:7d:d5:d5:
                    15:a9:80:fe:2a:a8:80:f3:86:a0:aa:b6:e3:ac:e6:
                    e1:5b:19:74:77:c1:9e:3e:72:96:39:59:01:9c:e5:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D4:7B:6E:2A:1B:AD:E3:CA:3F:B2:B3:1B:4A:F3:2D:E0:D0:A3:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl

            X509v3 Authority Key Identifier:
                keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ef:fb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:7c:f2:bd:39:b0:a1:87:d9:77:07:bb:98:8c:b0:99:8e:22:
         b7:f6:1a:c8:4b:fe:5b:ad:86:69:9d:82:b7:01:ff:3d:fb:58:
         54:14:c0:7a:b9:eb:9e:8a:87:f0:22:da:e3:e5:4c:af:17:c0:
         22:a8:e8:3f:6f:50:21:23:d0:39:81:e9:d1:39:fc:18:bd:c4:
         a4:46:fc:39:fd:43:ac:6d:3c:67:72:fc:30:cb:3d:c2:ff:95:
         71:75:a3:c9:40:d3:0f:c3:18:c1:4b:1b:63:ad:25:46:c5:15:
         0c:5f:f0:ab:96:01:95:65:79:e1:a3:ad:8b:72:cf:67:dc:f1:
         37:c2:87:b3:37:0e:57:5a:8b:bc:76:71:f6:d1:bb:e3:2b:53:
         34:9f:5b:41:e8:1b:2f:5a:ea:e5:60:c1:7d:eb:18:fa:33:30:
         1c:34:3b:81:8b:15:75:0c:44:27:2c:b1:16:75:41:6b:47:7c:
         97:93:05:86:bd:54:85:21:77:dd:aa:e3:e8:4a:bc:ed:b9:d1:
         96:ba:ea:4e:17:c1:26:34:10:82:ce:f3:1d:5d:bf:08:6f:80:
         f1:e2:1b:c3:9f:2d:3c:3f:87:b9:da:38:8e:8e:d4:ff:91:43:
         86:8a:59:c1:ff:22:85:c2:2a:3e:59:f0:92:67:61:ab:b5:23:
         82:62:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:55:01 2026 by rpki-client