Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2984541f-4d58-31b5-beab-58cd4ef8404e.roa
File:                     2984541f-4d58-31b5-beab-58cd4ef8404e.roa (raw, json)
Hash identifier:          3cY8eKSk0OVf176k2TV3u9NqfH85gR7qTxTODOUqgO4=
Subject key identifier:   7D:68:77:9B:7E:E2:54:E9:C8:94:F7:34:FF:87:D5:A3:0D:A6:D6:E3
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584D8AC53D65ECF00146882D3520
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2984541f-4d58-31b5-beab-58cd4ef8404e.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     398549
IP address blocks:        2605:dd40:8009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:3d:65:ec:f0:01:46:88:2d:35:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=8e2bf5e1-81ff-4690-b773-46bfa79d5cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:4f:f4:e7:cd:49:f6:85:84:e4:f0:cd:c7:
                    f2:70:7c:9c:33:21:85:5c:4c:37:43:38:98:62:8b:
                    a6:2a:ce:c2:1b:92:e4:90:87:f0:5c:63:2d:43:0f:
                    fb:91:98:53:de:a0:21:7b:cf:d5:ba:21:dd:26:5a:
                    9e:b6:82:ab:fc:1b:3b:7c:29:b2:74:be:a0:d8:a5:
                    fa:d1:54:9a:af:0f:e4:43:dc:c6:de:c6:bc:5e:d4:
                    c7:ba:ac:62:b0:df:5f:60:b5:ac:75:b2:02:a5:66:
                    3e:9f:db:a2:e5:e9:b8:56:7c:24:0c:06:17:2a:7e:
                    5c:c7:f3:e4:28:4c:bd:62:08:64:a4:ca:f5:b5:9e:
                    74:c5:04:ec:77:dd:25:fd:77:e8:45:6a:01:15:09:
                    5c:78:df:87:94:21:a5:21:94:32:e8:7a:95:f6:92:
                    de:27:76:e7:0e:ba:8e:81:d7:0e:5e:59:3d:2e:9d:
                    dc:c4:03:11:af:ae:d5:9c:fa:ae:46:b4:78:4c:e2:
                    27:ef:35:11:a8:d3:4e:3d:2e:70:5b:de:65:3a:be:
                    79:af:ef:ff:e5:09:d3:f1:9e:49:b6:c4:83:bf:03:
                    24:06:c2:52:3d:ee:39:91:3b:5b:ab:4b:a3:eb:e8:
                    60:00:e9:8d:d6:ca:1e:80:6f:a6:44:fe:b3:ec:7f:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:68:77:9B:7E:E2:54:E9:C8:94:F7:34:FF:87:D5:A3:0D:A6:D6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2984541f-4d58-31b5-beab-58cd4ef8404e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:5a:7b:85:e8:1a:b8:48:81:4e:d1:59:18:07:bb:ad:2a:95:
         b3:ac:96:7d:3a:7c:82:08:be:9e:d1:7b:88:59:5e:f8:0a:90:
         5c:b7:2c:1d:77:3f:7c:30:dd:e1:ca:ea:83:f6:5f:31:d3:36:
         58:e6:e7:bb:8b:63:43:07:4f:23:cb:30:2e:1a:c3:79:23:a4:
         c6:a9:2d:39:c7:29:b8:e4:f3:31:27:c7:fc:53:9e:94:76:f3:
         59:0c:fb:e9:7d:13:39:09:92:cf:47:f7:d9:98:03:5d:20:cf:
         f2:6a:2e:af:c7:74:c5:ce:52:a0:38:c9:e2:56:5c:4a:61:fc:
         ac:fd:a4:f6:52:ae:ea:1f:67:91:8f:80:87:4e:b8:8c:d2:06:
         8f:e2:91:85:19:3f:61:c8:ac:e3:46:4a:0d:50:2b:f7:88:f1:
         ab:f3:93:32:ec:29:4b:52:3a:a9:f9:38:e1:97:50:bf:5f:0f:
         40:6f:9a:76:22:b8:84:55:56:9a:f4:3a:b1:6a:31:25:4f:81:
         ab:6f:f3:81:b4:a4:70:aa:95:c3:2c:99:c6:aa:64:3c:ad:c4:
         b6:d5:28:74:b8:f6:73:2a:34:6e:f2:d3:ad:56:b5:34:d5:51:
         ef:f0:b4:19:9a:8d:12:3f:32:4b:54:97:74:b5:80:9e:76:26:
         c1:64:9c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:50:15 2026 by rpki-client