Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8644368-bf82-35d3-b3e9-d4e4eb109891.roa
File:                     c8644368-bf82-35d3-b3e9-d4e4eb109891.roa (raw, json)
Hash identifier:          G35tNY5jWjsAaOcC6GCn9o6xY1EhZf9n8qb6XyJS9Wg=
Subject key identifier:   9E:36:19:E7:8D:5B:09:E6:17:90:DB:6D:52:80:6F:A0:E6:FD:B0:D0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3E5F2502564F9196656CFE40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8644368-bf82-35d3-b3e9-d4e4eb109891.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:4038::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:25:02:56:4f:91:96:65:6c:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=5d58613e-bd46-4666-85c3-5bbb12c97358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:6c:91:9b:99:07:25:56:cd:ea:d1:28:0b:
                    c1:ea:9f:e1:c3:a8:e8:a4:01:14:c0:e5:20:b7:00:
                    40:68:ef:a2:f3:25:61:64:be:e7:15:7f:e8:3d:75:
                    c3:08:6d:0c:b3:53:95:93:da:8e:63:54:96:bf:0f:
                    38:db:1d:02:94:26:65:64:c1:e3:56:d0:1c:58:eb:
                    01:8c:e2:88:67:95:72:44:3b:08:b7:d2:b5:02:e8:
                    e4:7e:7b:73:f3:00:39:df:19:13:7f:c5:72:86:13:
                    87:a7:97:70:b9:ab:a5:d9:bc:a9:ef:20:27:63:07:
                    0a:df:d0:85:cd:02:8e:4d:85:81:41:e2:c2:4c:60:
                    22:1a:34:12:2f:60:e3:1f:d8:31:6b:45:4a:2d:fa:
                    fe:cb:59:0e:04:ab:56:b8:58:53:3d:5b:bf:97:b8:
                    04:bb:e1:9b:59:df:69:d3:dd:8e:58:22:83:0d:70:
                    b5:31:77:39:66:37:58:67:eb:c1:e2:04:c5:4b:59:
                    30:d9:22:02:af:06:c5:7d:03:14:ed:6b:38:7b:29:
                    51:d2:28:2e:52:36:85:e4:68:ea:dc:f0:88:60:ff:
                    ec:4d:06:36:22:1b:5d:68:70:a6:c0:99:78:a6:92:
                    d6:2e:fb:08:96:9c:34:f1:5e:5b:6d:8a:ef:19:e7:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:36:19:E7:8D:5B:09:E6:17:90:DB:6D:52:80:6F:A0:E6:FD:B0:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8644368-bf82-35d3-b3e9-d4e4eb109891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4038::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:59:d8:fd:ff:c8:e5:91:98:63:5b:29:ee:bc:3b:4d:6f:b2:
         d7:eb:54:54:1d:e2:b6:c4:e7:7b:2e:43:e0:34:89:b8:2f:df:
         0d:d4:9c:02:3b:09:87:c3:a4:8e:82:c1:8a:5a:a0:8d:c5:42:
         d1:e0:e8:22:26:66:9e:db:99:55:de:54:07:71:28:a0:0f:4b:
         9a:9e:d7:9f:5c:96:4b:3c:cd:8c:93:a2:77:dc:3c:31:50:57:
         29:b8:1f:4c:48:fd:ef:2e:16:2b:8c:22:17:f4:23:20:c7:a6:
         57:f5:05:2b:e2:df:98:47:d0:6c:84:b1:79:f9:f8:03:91:52:
         95:5c:ab:c9:1c:81:43:2e:13:fc:91:0f:9d:d9:2e:21:fa:c3:
         c9:22:44:45:35:d9:ff:c1:af:5c:35:1c:ee:c6:ef:77:e8:64:
         e1:a3:79:35:96:ef:8a:c1:66:29:6c:2b:58:32:75:67:30:42:
         20:b7:2f:4d:c2:ec:18:c7:e3:1b:7e:a1:98:0d:3e:c8:f6:4f:
         b9:c0:16:ee:1b:05:ec:00:71:6d:9b:51:f0:1e:8f:fe:03:74:
         cf:57:9e:3d:ae:87:4d:40:94:6e:d2:84:cf:37:0c:dd:bd:f7:
         55:1e:f5:57:2c:e0:32:c2:e5:cb:cf:f9:d5:56:4b:a1:3c:d5:
         20:c6:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:44:12 2026 by rpki-client