Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9c288285-892f-3b71-b073-ac54e51371cd.roa
File:                     9c288285-892f-3b71-b073-ac54e51371cd.roa (raw, json)
Hash identifier:          hyoi74D5g25i6oNTn0pGKoEvRMY9pbUeCeKJcIc3Fa0=
Subject key identifier:   1F:54:9F:9A:65:72:A9:7A:37:28:DC:34:F0:72:ED:18:34:E3:48:29
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584D8AC5388839280854EF464380
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9c288285-892f-3b71-b073-ac54e51371cd.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2605:dd40:8570::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:38:88:39:28:08:54:ef:46:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=a3da228e-de92-41c4-883c-2fdb15a7c168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:61:f1:bd:f0:83:3a:ab:f2:21:c5:ba:dc:
                    46:85:c7:d9:9d:c7:59:33:d8:3f:e5:99:60:39:5a:
                    80:72:68:9b:a1:99:be:82:d2:e3:14:d4:d2:24:9f:
                    f3:1c:f2:d6:00:8b:a3:77:b1:0c:10:65:67:b4:2e:
                    fd:67:f0:16:d8:3b:c4:53:39:e7:a2:e0:36:a2:d8:
                    29:13:f6:7b:ca:01:ce:42:77:60:24:6b:79:33:ef:
                    69:9e:90:3a:b1:df:a0:3f:4b:f9:7a:8f:c6:c9:44:
                    d4:e6:35:e6:0c:b9:bd:98:02:2a:05:2b:59:ca:9b:
                    7d:51:91:44:40:a5:bd:05:aa:94:70:ea:00:19:e9:
                    0e:da:4e:85:ca:1f:87:13:73:40:26:e4:8e:6a:26:
                    e7:d3:d1:19:5b:f1:7a:19:0f:a9:41:b5:05:b8:bc:
                    55:b8:43:cc:de:0b:f5:c3:dd:f4:03:8c:22:8a:74:
                    03:14:c6:bd:7f:23:72:32:c8:77:a3:35:9f:6e:bb:
                    ea:9a:83:a8:80:c7:0f:ab:6a:56:76:49:bf:bb:e2:
                    b5:c4:1d:7d:b8:e1:16:5a:35:e0:2f:e2:65:ec:2c:
                    11:6b:29:43:f1:7d:29:f1:73:09:33:5e:e4:63:91:
                    28:15:01:28:43:05:3c:15:84:e9:50:87:ee:b5:73:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:54:9F:9A:65:72:A9:7A:37:28:DC:34:F0:72:ED:18:34:E3:48:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9c288285-892f-3b71-b073-ac54e51371cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8570::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:1e:81:b3:62:6e:6d:52:a6:46:71:2d:c0:ec:6d:f6:d0:
         f8:11:84:ab:da:d4:1f:8e:65:fc:90:98:b2:40:4d:90:c4:71:
         12:11:c4:bd:2d:52:c0:2c:e8:73:7f:2d:22:34:ce:a6:98:13:
         6f:5e:82:a9:ea:30:2f:e0:0d:29:2c:c2:e6:35:74:6d:a1:33:
         96:73:75:28:51:76:1d:5b:9f:a8:55:04:f5:a6:9a:28:b5:fc:
         5a:2a:ed:fa:83:a1:a4:45:e5:1b:c6:3a:16:d4:7b:e2:db:67:
         82:74:1e:c7:21:d9:fb:05:b0:7d:71:dd:46:d1:fc:18:c3:47:
         dd:2c:9a:b9:83:31:a6:b7:c4:6d:a3:de:b1:58:b9:06:9a:80:
         36:50:03:82:74:40:6f:c1:cd:72:f2:38:7c:79:7f:df:95:ab:
         42:df:0f:e2:a8:5e:5f:18:d4:14:6a:b4:2b:aa:36:b3:09:d7:
         9f:34:2e:7d:1d:19:ea:92:1d:b9:67:e2:d7:7e:83:c0:b6:21:
         ed:4b:31:76:7d:65:86:83:91:55:95:bf:80:e6:50:d3:99:94:
         fb:c4:a4:34:c9:35:3c:35:58:cc:fa:4a:8e:02:2e:05:e2:35:
         ff:ea:60:b3:77:2b:b2:b2:e0:44:ec:20:84:87:96:e1:1a:ce:
         9a:d4:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:27:03 2026 by rpki-client