Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/005241ca-b220-3c47-ba7e-8f956eb26d08.roa
File:                     005241ca-b220-3c47-ba7e-8f956eb26d08.roa (raw, json)
Hash identifier:          P9Z2qRMNHV0+BuM9pFCYA6aG5vm4HHW9ggmnQWrB458=
Subject key identifier:   DF:78:7D:37:41:7B:06:57:3C:F0:72:A3:AC:D3:0F:CF:04:B8:1B:31
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B02E717EB7B09BDC68A600
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/005241ca-b220-3c47-ba7e-8f956eb26d08.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2620:147:c10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2e:71:7e:b7:b0:9b:dc:68:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=1a31ffc4-1912-4224-ace9-2992b9a08627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8b:ad:31:a5:0d:aa:9b:d4:b9:84:8f:15:3d:
                    e2:ab:b7:2c:66:c2:6e:a3:d7:34:a4:1b:d3:fd:a8:
                    dd:40:3d:a3:ce:fa:64:0a:3c:62:e7:1c:f6:bd:55:
                    96:35:81:20:c2:a3:34:4b:ee:72:9e:6a:e7:8d:3e:
                    d0:d9:3f:af:92:33:a7:7f:7b:40:fd:2c:2b:08:ab:
                    c6:66:68:fd:9e:47:0f:8b:c1:78:0d:3a:4f:35:ac:
                    fd:7f:00:e7:ea:06:4b:b0:92:0f:8f:dd:1a:25:a4:
                    8e:32:0a:03:0a:d1:fe:d0:20:1e:ef:fe:2a:25:e2:
                    f2:22:8d:47:e8:87:9e:57:d4:da:fa:58:1e:cf:3c:
                    ec:af:a0:35:f6:4a:de:36:9f:ce:4b:ba:eb:a7:39:
                    8b:c0:9c:bd:00:c8:77:87:e8:28:ab:d6:b8:38:49:
                    e2:39:1e:e1:3a:25:23:29:5f:3f:27:55:e3:44:c4:
                    c8:2c:1f:85:44:be:56:41:6b:3f:ba:29:f6:35:d2:
                    32:b1:bc:31:ce:e2:52:d7:c2:f4:9b:69:47:29:05:
                    6d:48:26:e8:96:c4:b8:58:6c:c5:7d:f9:09:08:04:
                    0f:10:9e:f2:85:56:b2:5b:73:d7:83:56:ad:c9:88:
                    71:b5:7c:59:c5:15:b5:ec:ef:5d:73:f2:b9:ed:f7:
                    01:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:78:7D:37:41:7B:06:57:3C:F0:72:A3:AC:D3:0F:CF:04:B8:1B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/005241ca-b220-3c47-ba7e-8f956eb26d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f5:c9:02:b4:58:ad:a1:bc:4d:39:6f:aa:6f:c0:17:7d:5d:
         95:d6:41:44:a1:a4:2b:d7:1f:90:a2:b7:1f:86:91:0a:f3:be:
         c4:3d:12:a1:9c:57:3a:e4:a8:94:19:df:41:47:c6:a8:9b:1a:
         9e:4e:a7:89:cf:fd:ed:e9:2d:03:b5:38:e7:1a:ff:f3:cd:50:
         28:a3:d1:ca:0b:e3:7a:ae:92:20:40:78:63:38:b9:9a:36:be:
         cc:f7:b0:16:58:46:c2:b1:b6:de:27:71:dc:76:f8:9b:ff:59:
         04:f2:8b:5e:60:0f:2d:86:56:6c:22:77:5a:d7:35:05:4c:b5:
         45:ef:73:1f:84:45:8b:a1:e8:c8:4d:5e:cf:b6:9f:b6:f9:ed:
         9b:94:eb:78:4e:fa:58:dc:92:83:1d:0c:3b:1c:44:0f:8a:1f:
         9b:c7:36:06:ef:f3:3b:ec:6a:eb:b9:29:c9:3e:fc:8a:45:d2:
         b0:42:11:85:a2:3a:dd:f2:8b:d2:aa:7e:55:af:9e:d7:a6:c1:
         9b:d7:56:8a:b4:ef:3b:5c:f5:79:5e:1d:45:aa:9d:8b:18:2f:
         f1:76:26:3b:27:5d:22:4c:73:a3:6a:fd:39:42:78:56:5f:2b:
         3e:6c:78:57:ca:a3:6f:62:75:b9:c3:14:27:e0:6a:cb:2c:0e:
         52:a1:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:02:16 2026 by rpki-client